# US 8,544,057 B2 · Method of customizing a standardized IT policy > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,544,057 B2 - Document ID: US8544057B2 - Status: Granted - Kind: B2 - Application number: 11/679,470 - Filed: 2007-02-27 - Published: 2007-08-30 - Granted: 2013-09-24 - Earliest claimed: 2006-02-27 - Assignees: BlackBerry Limited - Applicants: Andrew Bocking; Michael Thomas Hardy; Phillip Roberts; Rudy Rawlins; Ronald Hanson - Inventors: Andrew Bocking; Michael Thomas Hardy; Phillip Roberts; Rudy Rawlins; Ronald Hanson - Web page: https://patentgrep.com/patent/US8544057B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 21/31: User authentication - H04L 41/0894: Policy-based network configuration management - H04L 63/102: {Entity profiles} - H04L 63/104: {Grouping of entities} - H04W 8/245: {from a network towards a terminal} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method are described herein for standardizing an IT policy that is used to configure devices operating on a network. An IT policy can be generated that applies to a group of users or to one or more special users without having to define and store a new IT policy for each special user. This can be achieved by specifying global and per-user IT policy rules and merging these rules as needed to produce IT policy data. The IT policy can also be used to configure settings associated with storing electronic messages on the devices. ## Claims ### Claim 1 A method of providing an IT policy to configure a plurality of devices associated with a group of users, the IT policy comprising a set of rules that dictate the functionality of the plurality of devices, wherein the IT policy comprises IT policy data that is customizable on a per-user basis, the method being implemented by a processor at a server and the method comprises: checking for a change made to a global IT policy; noting a first group of users for which the change in the global IT policy applies; checking for at least one special user in the first group of users that have per-user IT policy rules; generating global IT policy data based on settings in a first data structure associated with global IT policy rules that are applicable to all users within the group of users; generating per-user IT policy data based on settings in a second data structure associated with the per-user IT policy rules that are applicable to the at least one special user within the group of users; generating merged IT policy data for the at least one special user by merging the global IT policy data and the per-user IT policy data, the merged IT policy data being generated before being sent to the at least one special user; and sending the merged IT policy data to the at least one special user within the group, wherein the processor at the server is configured to define at least one of the global IT policy rules and the per-user IT policy rules to specify at least one of maximum storage size and maximum storage time for electronic messages stored on the devices based on at least one keyword used in the subject line of the electronic messages, the at least one keyword corresponding to a message type comprising at least one of personal, corporate, customer, sensitive and confidential messages. ### Claim 2 (depends on 1) The method of claim 1, wherein the merging comprises overriding settings in the global IT policy data with settings in the per-user IT policy data for conflicting IT policy rules in the global and per-user IT policy data. ### Claim 3 (depends on 1) The method of claim 1, wherein both the global and per-user IT policy rules comprise grouped IT policy rules with associated sub-IT policy rules, and during the merging, the global and per-user IT policy data corresponding to sub-IT policy rules associated with one of the grouped IT policy rules are grouped together. ### Claim 4 (depends on 1) The method of claim 1, wherein the method comprises storing IT policy rules in an IT policy table, the IT policy rules comprising the global IT policy rules and the per-user IT policy rules, and the method further comprises using a field in the IT policy table to indicate whether a given IT policy rule is settable on a per-user basis. ### Claim 5 (depends on 1) The method of claim 1, wherein the method further comprises setting at least one of the maximum storage size and maximum storage time based on folder type for folders used to store the electronic messages on the device, wherein a given folder type corresponds to a given message type. ### Claim 6 (depends on 1) The method of claim 1, wherein the method further comprises setting at least one of the maximum storage size and maximum storage time based on the user of the device. ### Claim 7 (depends on 1) The method of claim 1, wherein if at least one of the global IT policy data and the per-user IT policy data is updated, the method further comprises sending the merged IT policy data to the corresponding users within the group to whom the updated data applies. ### Claim 8 (depends on 1) The method of claim 1, wherein the sending comprises sending the merged IT policy data to the devices via one of a wireless connection for a wireless network, and a wired connection for a wired network. ### Claim 9 (depends on 1) The method of claim 1, wherein the maximum storage size can be applied on at least one of a per message basis and a cumulative message basis for messages with the at least one keyword in the subject line. ### Claim 10 A computer program product comprising a non-transitory computer readable medium embodying program code means executable by a processor at a server for performing a method for providing an IT policy to configure a plurality of devices associated with a group of users on a network, the IT policy comprising a set of rules that dictate the functionality of the plurality of devices, wherein the IT policy comprises IT policy data that is customizable on a per-user basis and the method comprises: checking for a change made to a global IT policy; noting a first group of users for which the change in the global IT policy applies; checking for at least one special user in the first group of users that have per-user IT policy rules; generating global IT policy data based on settings in a first data structure associated with global IT policy rules that are applicable to all users within the group of users; generating per-user IT policy data based on settings in a second data structure associated with the per-user IT policy rules that are applicable to the at least one special user within the group of users; generating merged IT policy data by merging the global IT policy data and the per-user IT policy data, the merged IT policy data being generated before being sent to the at least one special user; sending the merged IT policy data to the at least one special user within the group; and defining at least one of the global IT policy rules and the per-user IT policy rules to specify at least one of maximum storage size and maximum storage time for electronic messages stored on the devices based on at least one keyword used in the subject line of the electronic messages, the at least one keyword corresponding to a message type comprising at least one of personal, corporate, customer, sensitive and confidential messages. ### Claim 11 (depends on 10) The computer program product of claim 10, wherein the method further comprises setting at least one of the maximum storage size and maximum storage time based on folder type for folders used to store the electronic messages on the device, wherein a given folder type corresponds to a given message type. ### Claim 12 (depends on 10) The computer program product of claim 10, wherein the method further comprises setting at least one of the maximum storage size and maximum storage time based on the user of the device. ### Claim 13 (depends on 10) The computer program product of claim 10, wherein the maximum storage size can be applied on at least one of a per message basis and a cumulative message basis for messages with the at least one keyword in the subject line. ### Claim 14 An IT policy server for providing an IT policy to configure a plurality of devices associated with a group of users on a network, the IT policy comprising a set of rules that dictate the functionality of the plurality of devices, wherein the IT policy comprises IT policy data that is customizable on a per-user basis and the IT policy server comprises: a processor adapted to generate the IT policy data; a network interface connected to the processor, the network interface being adapted to allow the IT policy server to communicate with the network; and a memory unit connected to the processor, the memory unit being adapted to store applications and data related to the IT policy, wherein, the processor is configured to check for a change made to a global IT policy, to note a first group of users for which the change in the global IT policy applies, to check for at least one special user in the first group of users that have per-user IT policy rules, to generate global IT policy data based on settings in a first data structure associated with global IT policy rules that are applicable to all users within the group of users, to generate per-user IT policy data based on settings in a second data structure associated with the per-user IT policy rules that are applicable to the at least one special user within the group of users, to generate merged IT policy data by merging the global IT policy data and the per-user IT policy data, the merged IT policy data being generated before being sent to the at least one special user, to send the merged IT policy data to the at least one special user within the group, and to define at least one of the global IT policy rules and the per-user IT policy rules to specify at least one of maximum storage size and maximum storage time for electronic messages stored on the devices based on at least one keyword used in the subject line of the electronic messages, the at least one keyword corresponding to a message type comprising at least one of personal, corporate, customer, sensitive and confidential messages. ### Claim 15 (depends on 14) The IT policy server of claim 14, wherein during merging, the IT policy server overrides settings in the global IT policy data with settings in the per-user IT policy data for conflicting IT policy rules in the global and per-user IT policy data. ### Claim 16 (depends on 14) The IT policy server of claim 14, wherein both the global and per-user IT policy rules comprise grouped IT policy rules with associated sub-IT policy rules, and during merging, the IT policy server is configured to group together global and per-user IT policy data corresponding to sub-IT policy rules associated with one of the grouped IT policy rules. ### Claim 17 (depends on 14) The IT policy server of claim 14, wherein the IT policy server is configured to store IT policy rules in an IT policy table, the IT policy rules comprise the global IT policy rules and the per-user IT policy rules, and the IT policy table comprise a field to indicate whether a given IT policy rule is settable on a per-user basis. ### Claim 18 (depends on 14) The IT policy server of claim 14, wherein the IT policy server is configured to set at least one of the maximum storage size and maximum storage time based on folder type for folders used to store the electronic messages on the device, wherein a given folder type corresponds to a given message type. ### Claim 19 (depends on 14) The IT policy server of claim 14, wherein the IT policy server is configured to set at least one of the maximum storage size and maximum storage time based on the user of the device. ### Claim 20 (depends on 14) The IT policy server of claim 14, wherein if at least one of the global IT policy data and the per-user IT policy data is updated, the IT policy server is configured to send the merged IT policy data to the corresponding users within the group to whom the updated data applies. ### Claim 21 (depends on 14) The IT policy server of claim 14, wherein the maximum storage size can be applied on at least one of a per message basis and a cumulative message basis for messages with the at least one keyword in the subject line. ### Claim 22 A communications system for providing an IT policy to configure a plurality of devices associated with a group of users of the system, the IT policy comprising a set of rules that dictate the functionality of the plurality of devices, wherein the IT policy comprises IT policy data that is customizable on a per-user basis and the system comprises: an IT policy server comprising: a processor adapted to generate the IT policy data; a network interface connected to the processor, the network interface being adapted to allow the IT policy server to communicate with the network; and a memory unit connected to the processor, the memory unit being adapted to store applications and data related to the IT policy, and a plurality of user devices connected to the network wherein, the processor is configured to check for a change made to a global IT policy, to note a first group of users for which the change in the global IT policy applies, to check for at least one special user in the first group of users that have per-user IT policy rules, to generate global IT policy data based on settings in a first data structure associated with global IT policy rules that are applicable to all users within the group of users, to generate per-user IT policy data based on settings in a second data structure associated with the per-user IT policy rules that are applicable to the at least one special user within the group of users, to generate merged IT policy data by merging the global IT policy data and the per-user IT policy data, the merged IT policy data being generated before being sent to the at least one special user, to send the merged IT policy data to the at least one special user within the group, and to define at least one of the global IT policy rules and the per-user IT policy rules to specify at least one of maximum storage size and maximum storage time for electronic messages stored on the devices based on at least one keyword used in the subject line of the electronic messages, the at least one keyword corresponding to a message type comprising at least one of personal, corporate, customer, sensitive and confidential messages. ### Claim 23 (depends on 22) The communications system of claim 22, wherein the IT policy server is configured to set at least one of the maximum storage size and maximum storage time based on folder type for folders used to store the electronic messages on the device, wherein a given folder type corresponds to a given message type. ### Claim 24 (depends on 22) The communications system of claim 22, wherein the maximum storage size can be applied on at least one of a per message basis and a cumulative message basis for messages with the at least one keyword in the subject line.