Policy settings configuration with signals

Patent metadata

Field	Value
Publication number	US-2016119301-A1
Application number	US-201414525308-A
Country	US
Kind code	A1
Filing date	Oct 28, 2014
Priority date	Oct 28, 2014
Publication date	Apr 28, 2016
Grant date	—

Abstract

Techniques and systems are disclosed for enabling device configuration using signals that encode device policy settings. A method of configuring policy settings on a host device can include receiving a signal that encodes at least one policy setting; interpreting the signal to determine the at least one policy setting; and applying the at least one policy setting to the host device at its own authority.

First claim

What is claimed is:

1 . A method of configuring policy settings on a host device comprising:
receiving a signal that encodes at least one policy setting; interpreting the signal to determine the at least one policy setting; and applying the at least one policy setting to the host device at its own authority.

2 . The method of claim 1 , wherein the signal comprises a visual pattern, an audio pattern, tactile, kinetic pattern, or combination thereof.

3 . The method of claim 1 , wherein applying the at least one policy setting to the host device at its own authority comprises:
initiating a modification to a policy setting store of the host device in accordance with one or more of the at least one policy setting.

4 . The method of claim 1 , wherein the at least one policy setting comprises one or more of a device security setting and a resource access setting.

5 . The method of claim 1 , wherein interpreting the signal comprises:
decoding the signal; and determining a key and value pair corresponding to each of the at least one policy setting encoded by the signal.

6 . The method of claim 5 , wherein at least one policy setting is encrypted, wherein interpreting the signal further comprises:
decrypting the at least one policy setting before determining the key and value pair corresponding to each of the at least one policy setting encoded by the signal.

7 . The method of claim 1 , further comprising saving one or more prior policy settings.

8 . The method of claim 7 , wherein the signal further encodes an expiration time for the at least one policy setting, and the method further comprises: applying the one or more prior policy settings to the host device after the expiration time has elapsed.

9 . A system comprising:
one or more computer readable storage media; program instructions for a component stored on at least one of the one or more computer readable storage media that, when executed by a processing system, direct the processing system to: in response to receiving a signal that encodes at least one policy setting, interpret the signal to determine the at least one policy setting and apply the at least one policy setting to the system on its own authority.

10 . The system of claim 9 , wherein the at least one policy setting comprises at least one of a setting to enforce a PIN on a lock screen, access to a company Wi-Fi access point, and a VPN connection setting.

11 . The system of claim 9 , wherein the at least one policy setting comprises at least one of a setting that limits internet access to particular hours, a setting affecting store purchases, and a setting that blocks a specified application.

12 . The system of claim 9 , wherein the at least one policy setting is described in XML.

13 . The system of claim 9 , wherein the program instructions, when executed by the processing system, further direct the processing system to generate an output signal that encodes one or more prior policy settings.

14 . A device comprising:
a processing system; an input capability; one or more computer readable storage media; a policy settings store stored on the one or more computer readable media; program instructions for a component stored on at least one of the one or more computer readable storage media that, when executed by the processing system, direct the processing system to: receive, via the input capability, a signal that encodes at least one policy setting; interpret the signal to determine the at least one policy setting; and initiate a modification to the policy settings store in accordance with the at least one policy setting.

15 . The device of claim 14 , wherein the input capability is a camera and the signal comprises a barcode.

16 . The device of claim 14 , wherein the at least one policy setting comprises one or more of a device security setting and a resource access setting.

17 . The device of claim 14 , wherein at least one policy setting is encrypted and wherein the program instructions that direct the processing system to interpret the signal comprise instructions that direct the processing system to decrypt the at least one policy setting

18 . The device of claim 14 , wherein the at least one policy setting is described in XML.

19 . The device of claim 14 , wherein the program instructions, when executed by the processing system, further direct the processing system to save one or more prior policy settings.

20 . The device of claim 19 , wherein the signal further encodes an expiration time for the at least one policy setting, and the program instructions, when executed by the processing system, further direct the processing system to initiate, after the expiration time has elapsed, a reverting modification to the policy settings store in accordance with the one or more prior policy settings.

Assignees

• Microsoft Corp

Inventors

• Thilgen Christopher

Classifications

• H04L63/06 Primary

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/36 Primary

  by graphic or iconic representation · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04W12/37

  Managing security policies for mobile devices or for controlling mobile applications · CPC title