Enterprise device policy management
View Patent ↗Methods and systems for managing policies of portable data storage devices in conjunction with a third-party service are disclosed. One or more candidates of a plurality of members in an enterprise may be identifying via the third-party service. Each of the plurality of members may be associated with a respective portable data storage device. An indication provided by the third-party service of one or more candidate devices may be obtained. The one or more candidate devices may each be a portable data storage device associated with a respective candidate. Policies of the one or more candidate devices may be modified.
1. A computer-implemented method for managing policies of portable data storage devices in conjunction with a third-party service, the method comprising:
identifying one or more candidates of a plurality of members in an enterprise via the third-party service, each of the plurality of members being associated with a respective portable data storage device;
obtaining an indication provided by the third-party service of one or more candidate devices, the one or more candidate devices each being a portable data storage device associated with a respective candidate;
modifying policies of the one or more candidate devices;
wherein the indication includes a different administrator-device public key associated with each of the one or more candidate devices and a shared administrator keypair; and
importing each administrator-device public key into the one or more candidate devices associated therewith, and importing the shared administrator keypair into each of the one or more candidate devices.
2. The computer-implemented method of claim 1 , wherein the policies determine whether the one or more candidate devices can be accessed.
3. The computer-implemented method of claim 1 , wherein the policies determine operability of software applications associated with the one or more candidate devices.
4. The computer-implemented method of claim 1 , wherein the policies determine whether the one or more candidate devices must communicate with the third-party service prior to being accessed.
5. The computer-implemented method of claim 1 , wherein the policies are related to one or more passwords associated with the one or more candidate devices.
6. The computer-implemented method of claim 1 , wherein the policies determine an administrative level attributed to the one or more candidate devices.
7. The computer-implemented method of claim 1 , wherein the policies determine whether a candidate can control one or more features of a candidate device associated therewith.
8. The computer-implemented method of claim 1 , wherein the policies are different for two or more candidate devices.
9. The computer-implemented method of claim 1 , further comprising encrypting the imported shared administrator keypair in each candidate device with the imported administrator-device public key associated with that candidate device.
10. The computer-implemented method of claim 9 , further comprising sending each encrypted shared administrator keypair to the third-party service.
11. The computer-implemented method of claim 1 , wherein an administrator-device public key is encrypted and signed by a third-party service public key.
12. The computer-implemented method of claim 1 , wherein the indication provided by the third-party service further includes a shared administrator public key.
13. The computer-implemented method of claim 12 , wherein the shared administrator keypair is encrypted and signed by a third-party service public key.
14. The computer-implemented method of claim 1 , further comprising zeroizing or deleting one or more of the shared administrator keypair associated with each candidate device or the administrator-device public key.
15. A system for managing policies of portable data storage devices in conjunction with a third-party service, the system comprising:
a processor coupled to memory;
an enterprise member code stored in the memory and executable by the processor to identify one or more candidates of a plurality of members in an enterprise via the third-party service, each of the plurality of members being associated with a respective portable data storage device;
an enterprise device code stored in memory and executable by a processor to obtain an indication provided by the third-party service of one or more candidate devices, the one or more candidate devices each being a portable data storage device associated with a respective candidate;
an interface code stored in memory and executable by a processor to modify policies of the one or more candidate devices;
wherein the indication includes a different administrator-device public key associated with each of the one or more candidate devices and a shared administrator keypair; and
importing each administrator-device public key into the one or more candidate devices associated therewith, and importing the shared administrator keypair into each of the one or more candidate devices.
16. A non-transitory computer readable storage medium having a program embodied thereon, the program executable by a processor to perform a method for managing policies of portable data storage devices in conjunction with a third-party service, the method comprising:
identifying one or more candidates of a plurality of members in an enterprise via the third-party service, each of the plurality of members being associated with a respective portable data storage device;
obtaining an indication provided by the third-party service of one or more candidate devices, the one or more candidate devices each being a portable data storage device associated with a respective candidate;
modifying policies of the one or more candidate devices;
wherein the indication includes a different administrator-device public key associated with each of the one or more candidate devices and a shared administrator keypair; and
importing each administrator-device public key into the one or more candidate devices associated therewith, and importing the shared administrator keypair into each of the one or more candidate devices.
17. The non-transitory computer readable storage medium of claim 16 , the method further comprising encrypting the imported shared administrator keypair in each candidate device with the imported administrator-device public key associated with that candidate device.
18. The non-transitory computer readable storage medium of claim 17 , the method further comprising sending each encrypted shared administrator keypair to the third-party service.
19. The non-transitory computer readable storage medium of claim 16 , wherein an administrator-device public key is encrypted and signed by a third-party service public key.
20. The non-transitory computer readable storage medium of claim 16 , wherein the indication provided by the third-party service further includes a shared administrator public key.