Policy enforcement in mobile devices

摘要

Systems, methods and computer program products for enabling enforcement of an administrative policy on one or more mobile devices are described herein. In an embodiment, an administrator uses a policy server to create and provide an enforcement policy to a mobile device. An enforcement policy may include information on mobile device resources which may be controlled by an administrator. An enforcement policy also includes information on how mobile device features will be set, configured or disabled. An enforcement device driver and an enforcement monitor on a mobile device use the enforcement policy to control access to resources associated with the mobile device regardless of whether the mobile device is “online” and connected to a network or “offline” and disconnected from a network.

主权项

1. A method of controlling access to a resource in a mobile device, comprising:
intercepting a request to access said resource; determining a type of intended operation of a resource functionality based on said request, wherein said type of intended operation corresponds to a user's purpose of intended use associated with a communication type of said mobile device; selectively authorizing access to said resource according to said determined type of intended operation based on an encrypted enforcement policy stored in said mobile device, wherein said selectively authorizing comprises granting access to said resource when said intended operation utilizes resource functionality of a first communication type, and denying access to said resource when said intended operation utilizes resource functionality of a second communication type; applying said encrypted enforcement policy; monitoring one or more settings associated with said resource when said mobile device is offline; detecting a change in said one or more settings, wherein said one or more settings are enforced by said encrypted enforcement policy; determining whether said change in said one or more settings is authorized by said encrypted enforcement policy; and restoring said one or more settings to a state based on determining that said change is not authorized, wherein said state is based on said encrypted enforcement policy.