Adaptive security indicator for wireless devices

Patent metadata

Field	Value
Publication number	US-2016205128-A1
Application number	US-201314914531-A
Country	US
Kind code	A1
Filing date	Aug 29, 2013
Priority date	Aug 29, 2013
Publication date	Jul 14, 2016
Grant date	—

Abstract

Methods and apparatus, including computer program products, are provided for adaptive security. In one aspect there is provided a method. The method may include receiving, at a user equipment, at least one policy update representative of a rule defining at least one of a security level and an operation allowed to be performed at the security level; monitoring a configuration of the user equipment to determine whether the configuration of the user equipment violates the at least one policy update; and adapting, based on the monitoring, at least one of a security indicator at the user equipment and the operation at the user equipment. Related apparatus, systems, methods, and articles are also described.

First claim

1 - 21 . (canceled)

22 . A method comprising:
receiving, at a user equipment, at least one policy update representative of a rule defining at least one of a security level and an operation allowed to be performed at the security level, wherein the at least one policy update indicates a vulnerability of an encryption algorithm; monitoring a configuration of the user equipment to determine whether the configuration of the user equipment violates the at least one policy update; and adapting, based on the monitoring, at least one of a security indicator at the user equipment and the operation at the user equipment.

23 . The method of claim 22 , wherein the at least one policy update is updated at least one of periodically, when requested by the user equipment, and in response to an event prompting a change in policy, wherein the policy update is received from a server configured to provide a plurality of security policies including the at least one policy update.

24 . The method of claim 23 , wherein the event comprises a security event indicating a vulnerability to the user equipment.

25 . A method of claim 22 , wherein the operation further comprises at least one of an application at the user equipment, a type of connection between the user equipment and a network, and a function at the user equipment.

26 . A method of claim 22 , wherein the adapting further comprises:
generating, based on a result of the monitoring, the security indicator as a graphical indicator representing a plurality of security levels including the at least one security level.

27 . A method of claim 22 , wherein the adapting further comprises:
inhibiting, based on a result of the monitoring including the at least one policy update, the operation at the user equipment.

28 . The method of claim 27 , wherein the result of the monitoring indicates whether the configuration violates the at least one of the policy update, the at least one security level, or a combination thereof.

29 . The method of claim 22 , wherein the vulnerability of the encryption algorithm includes a vulnerability of a data encryption standard.

30 . An apparatus comprising:
at least one processor; and at least one memory including computer program code, the at least one processor, the at least one memory, and the computer program code configured to cause the apparatus to at least: receive at least one policy update representative of a rule defining at least one of a security level and an operation allowed to be performed at the security level, wherein the at least one policy update indicates a vulnerability of an encryption algorithm; monitor a configuration of the apparatus to determine whether the configuration of the apparatus violates the at least one policy update; and adapt, based on the monitoring, at least one of a security indicator at the apparatus and the operation at the apparatus.

31 . The apparatus of claim 30 , wherein the at least one policy update is updated at least one of periodically, when requested by the apparatus, and in response to an event prompting a change in policy, wherein the policy update is received from a server configured to provide a plurality of security policies including the at least one policy update.

32 . The apparatus of claim 31 , wherein the event comprises a security event indicating a vulnerability to the apparatus.

33 . An apparatus of claim 30 , wherein the operation further comprises at least one of an application at the apparatus, a type of connection between the apparatus and a network, and a function at the apparatus.

34 . An apparatus of claim 30 , wherein the apparatus is further configured to at least generate, based on a result of the monitoring, the security indicator as a graphical indicator representing a plurality of security levels including the at least one security level.

35 . An apparatus of claim 30 , wherein the apparatus is further configured to at least inhibit, based on a result of the monitoring including the at least one policy update, the operation at the user equipment.

36 . The apparatus of claim 35 , wherein the result of the monitoring indicates whether the configuration violates the at least one of the policy update, the at least one security level, or a combination thereof.

37 . The apparatus of claim 30 , wherein the vulnerability of the encryption algorithm includes a vulnerability of a data encryption standard.

38 . A non-transitory computer-readable storage medium including computer code which when executed by at least one processor causes operations comprising:
receiving at least one policy update representative of a rule defining at least one of a security level and an operation allowed to be performed at the security level, wherein the at least one policy update indicates a vulnerability of an encryption algorithm; monitoring a configuration to determine whether the configuration of the violates the at least one policy update; and adapting, based on the monitoring, at least one of a security indicator and the operation.

Assignees

• Nokia Technologies Oy

Inventors

• Holtmanns Silke
• Uusilehto Janne

Classifications

• H04M1/72463

  to restrict the functionality of the device · CPC title

• H04W88/02

  Terminal devices · CPC title

• H04W12/08 Primary

  Access security · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title