Method and apparatus for bearer and server independent parental control on smartphone, managed by the smartphone

A child mobile phone, comprising:

• a plurality of communication features of the child phone to be controlled by at least one authenticated master phone, wherein control of the communication features is transparent to a user of the child phone;
• an authentication agent configured to enable the child phone to authenticate a data connection session between a master phone and the child phone, the authentication to utilize a security engine coupled to the child phone for encrypting and decrypting messages and/or certificates;
• a policy management and enforcement agent to initiate changes in a control policy in the child phone and record the changes in a secure storage coupled to the child phone, wherein (i) the control policy defines control and management of at least one feature of the child phone and (ii) the policy management and enforcement agent restricts, redirects, and/or monitors the at least one feature of the child phone, according to the control policy;
• a communication agent configured to receive requests and control policy changes from the master phone, and perform a handshake communication between the child phone and the master phone to initiate the data connection session by a series of short message service (SMS) messages between the master phone and the child phone, wherein the master phone and the child phone communicate via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages.

A master mobile phone, comprising:

• a user interface of a parental control application to allow a master user on the master phone to interactively manage and control at least one child phone, wherein a set-up phase is to identify whether a phone is to act as a master phone or child phone;
• an authentication agent configured to enable the master phone to authenticate a data connection session between the master phone and the at least one child phone, the authentication to utilize a security engine coupled to the master phone for encrypting and decrypting messages and/or certificates;
• a policy management and enforcement agent to initiate changes in a control policy in the at least one child phone and record the changes in a secure storage coupled to the master phone, wherein (i) the control policy defines control and management of at least one feature of the child phone and (ii) the child phone restricts, redirects, and/or monitors the at least one feature of the child phone, according to the control policy;
• a communication agent configured to send requests and control policy changes to the at least one child phone, and perform a handshake communication between the at least one child phone and the master phone to initiate the data connection session by a series of short message service (SMS) messages between the master phone and the at least one child phone, wherein the master phone and the child phone communicate via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages.

A method for controlling at least one child mobile phone by at least on master mobile phone, comprising:

• identifying whether a phone is to be a master or child phone, by a master user;
• initiating a message handshake protocol between a master phone and a child phone;
• initiating a data connection session between the master phone and the child phone by a series of short message service (SMS) messages between the master phone and the child phone;
• communicating between the master phone and the child phone via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages;
• requesting authentication of the master phone to the child phone;
• controlling features of the child phone by the master phone, after authentication by sending a control policy to the child phone;
• defining control and management of at least one feature of the child phone in the control policy;
• and
• restricting, redirecting, and/or monitoring the at least one feature of the child phone, according to the control policy.

A method for enabling control in a child phone by at least one master phone, comprising:

• identifying whether a phone is to be a master or child phone, by a master user;
• defining control and management of at least one feature of the child phone in a control policy;
• responding to a message handshake protocol initiation between a master phone and a child phone;
• initiating a data connection session between the master phone and the child phone by a series of short message service (SMS) messages between the master phone and the child phone;
• communicating between the master phone and the child phone via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages;
• receiving a request for authentication of the master phone by the child phone;
• authenticating the master phone by the child phone;
• receiving a request from the master phone, by the child phone, wherein the request received by the child phone comprises a control policy change;
• and
• restricting, redirecting, and/or monitoring the at least one feature of the child phone, according to the control policy as updated by the control policy change.

A non-transitory, machine readable storage medium having instructions stored thereon for controlling at least one child mobile phone, the instructions when executed by a machine cause the machine to:

• categorize that a phone is to be a master phone or a child phone based on a selection by a master user;
• initiate a message handshake protocol between a master phone and a child phone;
• initiate a data connection session between the master phone and the child phone by a series of short message service (SMS) messages between the master phone and the child phone;
• communicate between the master phone and the child phone via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages;
• request authenticating of the master phone to the child phone;
• control features of the child phone by the master phone, after authentication by sending a control policy to the child phone;
• define control and management of at least one feature of the child phone in the control policy;
• and
• restrict, redirect, and/or monitor the at least one feature of the child phone, according to the control policy.

A non-transitory, machine readable storage medium having instructions stored thereon for enabling controlling of a child mobile phone, the instructions when executed by a machine cause the machine to:

• categorize that a phone is to be a master phone or a child phone based on a selection by a master user;
• define control and management of at least one feature of the child phone in a control policy;
• respond to a message handshake protocol initiation between a master phone and a child phone;
• initiate a data connection session between the master phone and the child phone by a series of short message service (SMS) messages between the master phone and the child phone;
• communicate between the master phone and the child phone via a TCP/IP protocol after the data connection session is initiated by the series of SMS messages;
• receive a request for authentication of the master phone by the child phone;
• authenticate the master phone by the child phone;
• receive a request from the master phone, by the child phone, wherein the request received by the child phone comprises a control policy change;
• and
• restrict, redirect, and/or monitor the at least one feature of the child phone, according to the control policy as updated by the control policy change.