US 7,787,863 B2Granted

System and method for automatically configuring a mobile device

AssigneeComputer Associates Think, Inc.

InventorJoannes G. van de Groenendaal

Life of this patent

Estimating the term…

Loading patent…

Abstract

The disclosure provides a wireless agent for a mobile device. In one embodiment, the example wireless agent is operable to dynamically determine an access point for wireless communications from a mobile device through a network. The wireless agent is further operable to automatically select one of a plurality of security profiles associated with a mobile device based, at least in part, on the determined access point, with each security profile including a plurality of security parameters for accessing at least one wireless network. The wireless agent then modifies at least one of plurality of network configuration options of the mobile device based on the selected security profile and automatically attempts to communicably connect the mobile device to the access point using the network configuration options.

Claims36

Dependent claims

A wireless agent for configuring and securing wireless access to a network, wherein the wireless agent comprises at least one processing device configured to:

provide a request from a mobile device to wirelessly communicate with a network, wherein the request includes one or more characteristics dynamically describing the mobile device, and wherein the characteristics describing the mobile device include at least one physical characteristic and at least one logical characteristic describing a location of the mobile device;
implement a security profile on the mobile device based on the characteristics describing the mobile device, wherein the security profile includes one or more security parameters defining an access zone for the network;
implement at least one connection profile on the mobile device based on the characteristics describing the mobile device, wherein the connection profile configures one or more of the characteristics describing the mobile device to enforce the security parameters defining the access zone;
authorize the mobile device to wirelessly communicate with the network from within the access zone, wherein the security parameters include one or more in-house security parameters in effect in response to the location of the mobile device being within the network and one or more on-the-road security parameters in effect in response to the location of the mobile device being remote from the network, wherein the connection profile enforces the security parameters defining the access zone by instructing the mobile device to:
automatically collect security information on the mobile device;
and
encrypt the collected security information for storage on the mobile device.

4 more elements

A method for configuring and securing wireless access to a network, comprising:

providing a request from a mobile device to wirelessly communicate with a network, wherein the request includes one or more characteristics dynamically describing the mobile device, and wherein the characteristics describing the mobile device include at least one physical characteristic and at least one logical characteristic describing a location of the mobile device;
implementing a security profile on the mobile device based on the characteristics describing the mobile device, wherein the security profile includes one or more security parameters defining an access zone for the network;
implementing at least one connection profile on the mobile device based on the characteristics describing the mobile device, wherein the connection profile configures one or more of the characteristics describing the mobile device to enforce the security parameters defining the access zone;
authorizing the mobile device to wirelessly communicate with the network from within the access zone, wherein the security parameters include one or more in-house security parameters in effect in response to the location of the mobile device being within the network and one or more on-the-road security parameters in effect in response to the location of the mobile device being remote from the network, wherein the connection profile enforces the security parameters defining the access zone by instructing the mobile device to:
automatically collect security information on the mobile device;
and
encrypt the collected security information for storage on the mobile device.

4 more elements

A system for configuring and securing wireless access to a network, comprising:

a memory configured to store a security profile, wherein the security profile includes one or more security parameters defining an access zone for a network;
and
at least one processing device configured to:
provide a request from a mobile device to wirelessly communicate with the network, wherein the request includes one or more characteristics dynamically describing the mobile device, and wherein the characteristics describing the mobile device include at least one physical characteristic and at least one logical characteristic describing a location of the mobile device;
implement the security profile on the mobile device based on the characteristics describing the mobile device;
implement at least one connection profile on the mobile device based on the characteristics describing the mobile device, wherein the connection profile configures one or more of the characteristics describing the mobile device to enforce the security parameters defining the access zone;
and
authorize the mobile device to wirelessly communicate with the network from within the access zone, wherein the security parameters include one or more in-house security parameters in effect in response to the location of the mobile device being within the network and one or more on-the-road security parameters in effect in response to the location of the mobile device being remote from the network, wherein the connection profile enforces the security parameters defining the access zone by instructing the mobile device to:
automatically collect security information on the mobile device;
and
encrypt the collected security information for storage on the mobile device.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 11/136,028Filed 24 May 2005 · us provisional application
Priority: 24 May 2004
Published: US 2005/0260996 A124 Nov 2005
Granted: 31 Aug 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification19 codes

H04W 48/04
Access restriction performed under specific conditions: based on user or terminal location or mobility data, e.g. moving direction, speed
H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 67/564
Provisioning of proxy services: enhancement of application control based on intercepted application data
H04M 1/67
Preventing unauthorised calls from a telephone set: by electronic means