Location-based configuration policy toggling

Patent metadata

Field	Value
Publication number	US-9426162-B2
Application number	US-201313875426-A
Country	US
Kind code	B2
Filing date	May 2, 2013
Priority date	May 2, 2013
Publication date	Aug 23, 2016
Grant date	Aug 23, 2016

Abstract

Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled on the user devices if the location constraints are satisfied.

First claim

What is claimed is:

1. A system comprising:
at least one memory storage; and
at least one processor coupled to the at least one memory storage, wherein the at least one processor is configured to:
identify at least one configuration profile associated with at least one user device;
determine whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on whether the current location associated with the at least one user device complies with at least one compliance rule, the compliance rule specifying that the at least one user device is authorized to enable the at least one configuration profile when the at least one user device is within a proximity of a second device, the second device being a mobile device; and,
enable the at least one configuration profile in response to a determination that the at least one user device is within the proximity of the second device.

2. The system of claim 1 , wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of business data, business applications, business software features, and business hardware features.

3. The system of claim 1 , wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of personal data, personal applications, personal software features, and personal hardware features.

4. The system of claim 1 , wherein the at least one processor is further configured to:
disable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device.

5. The system of claim 1 , wherein the at least one processor is further configured to:
determine whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on whether the current time associated with the at least one user device complies with at least one compliance rule specifying at least one time period when the at least one user device is authorized to enable the at least one configuration profile on the at least one user device; and,
enable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

6. The system of claim 5 , wherein the at least one processor is further configured to:
disable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

7. A method comprising:
identifying at least one configuration profile associated with at least one user device;
determining whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on the current location associated with the at least one user device; and,
enabling the at least one configuration profile on the at least one user device in response to determining that the at least one user device is within a proximity of a second device, the second device being a mobile device.

8. The method of claim 7 , wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of business data, business applications, business software features, and business hardware features.

9. The method of claim 7 , wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of personal data, personal applications, personal software features, and personal hardware features.

10. The method of claim 7 , wherein determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device comprises determining whether the current location associated with the at least one user device complies with at least one compliance rule specifying at least one location where the at least one user device is authorized to enable the at least one configuration profile on the at least one user device.

11. The method of claim 7 , further comprising:
disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device.

12. The method of claim 7 , further comprising:
determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device; and,
enabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

13. The method of claim 12 , wherein determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device comprises determining whether the current time associated with the at least one user device complies with at least one compliance rule specifying at least one time period when the at least one user device is authorized to enable the at least one configuration profile on the at least one user device.

14. The method of claim 12 , further comprising:
disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

15. A non-transitory computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:
identifying at least one configuration profile on at least one user device;
determining whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on the current location associated with the at least one user device; and,
disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not within a proximity of a second device, the second device being a mobile device.

16. The non-transitory computer-readable medium of claim 15 , wherein the at least one configuration profile associated with the at least one user device is specifically

Assignees

• Sky Socket Llc
• Airwatch Llc

Inventors

• Dabbiere Alan
• Marshall John
• Stuntebeck Erich

Classifications

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04W4/02

  Services making use of location information · CPC title