IP Library Granted Patent US 9,167,550
Granted Patent B2
US 9,167,550 · App. 14/050,804 · Granted Oct 20, 2015

Systems and methods for applying a security policy to a device based on location

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,167,550
App. No.
14/050,804
Granted
Oct 20, 2015
Kind
B2
Abstract

A security policy may be applied to a mobile communications device based on a location of the mobile communications device. For example, a first location of the mobile communications device may be obtained and a first security policy may be applied to the mobile communications device based on the first location. Furthermore, a change in the location of the mobile communications device may be detected. For example, the location of the mobile communications device may change from the first location to a second location. In response to the mobile communications device now being located at the second location, a second security policy may be applied to the mobile communications device. Thus, different security policies may be applied to a mobile communications device as the current location of the mobile communications device changes.

Claims (44)

1. A method comprising:

obtaining, by a mobile communications device, a first location associated with a current location of the mobile communications device;

applying a first security policy to the mobile communications device based on the first location;

determining, by the mobile communications device, a change in the current location of the mobile communications device from the first location to a second location associated with the current location of the mobile communications device;

at the mobile communication device, applying a second security policy to replace the first security policy to the mobile communications device based on the change from the first location to the second location;

generating, by the mobile communications device, a notification when the detected change in the current location corresponds to one of the mobile communications device entering a location known to the mobile communications device or leaving a location known to the mobile communications device; and

transmitting, from the mobile communications device, the generated notification to a server.

2. The method of claim 1 , wherein an application of the second security policy replaces an application of the first security policy for the mobile communications device.

3. The method of claim 1 , wherein the current location is transmitted to the server.

4. The method of claim 3 , further comprising receiving at the mobile communications device an email notification from the server in response to a change in the determined current location and transmitted current location.

5. The method of claim 4 , wherein the email notification comprises information to indicate that the mobile communications device has left the first location.

6. The method of claim 1 , wherein the mobile communications device determines the first security policy to apply and the second security policy to apply based upon the current location.

7. The method of claim 1 , wherein the first security policy and the second security policy are different, the second security policy providing access to fewer features of the mobile communications device than the first security policy.

8. The method of claim 1 , further comprising receiving, from the server, a command to apply the second security policy, the command being based on the generated notification,

wherein the applying the second security policy to replace the first security policy to the mobile communications device is further based on the received command.

9. A non-transitory computer-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

obtaining, by a mobile communications device, a first location associated with a current location of the mobile communications device;

applying a first security policy to the mobile communications device based on the first location;

determining, by the mobile communications device, a change in the current location of the mobile communications device from the first location to a second location associated with the current location of the mobile communications device;

at the mobile communication device, applying a second security policy to replace the first security policy to the mobile communications device based on the change from the first location to the second location;

generating, by the mobile communications device, a notification when the detected change in the current location corresponds to one of the mobile communications device entering a location known to the mobile communications device or leaving a location known to the mobile communications device; and

transmitting, from the mobile communications device, the generated notification to a server.

10. The non-transitory computer-readable medium of claim 9 , wherein an application of the second security policy replaces an application of the first security policy for the mobile communications device.

11. The non-transitory computer-readable medium of claim 9 , wherein the current location is transmitted to the server.

12. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise receiving at the mobile communications device an email notification from the server in response to a change in the determined current location and transmitted current location.

13. The non-transitory computer-readable medium of claim 12 , wherein the email notification comprises information to indicate that the mobile communications device has left the first location.

14. The non-transitory computer-readable medium of claim 9 , wherein the mobile communications device determines the first security policy to apply and the second security policy to apply based upon the current location.

15. The non-transitory computer-readable medium of claim 9 , wherein the first security policy and the second security policy are different, the second security policy providing access to fewer features of the mobile communications device than the first security policy.

16. The non-transitory computer-readable medium of claim 9 , further comprising instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising receiving, from the server, a command to apply the second security policy, the command being based on the generated notification,

wherein the applying the second security policy to replace the first security policy to the mobile communications device is further based on the received command.

17. A system, comprising at least one processor and memory, comprising:

a module to obtain, by a mobile communications device, a first location associated with a current location of the mobile communications device;

a module to apply a first security policy to the mobile communications device based on the first location;

a module to determine, by the mobile communications device, a change in the current location of the mobile communications device from the first location to a second location;

a module to apply, at the mobile communication device, a second security policy to replace the first security policy to the mobile communications device based on the change from the first location to the second location;

a module to generate, by the mobile communications device, a notification when the detected change in the current location corresponds to one of the mobile communications device entering a location known to the mobile communications device or leaving a location known to the mobile communications device; and

a module to transmit, from the mobile communications device, the generated notification to a server.

18. The system of claim 17 , wherein the application of the second security policy replaces the application of the first security policy for the mobile communications device.

19. The system of claim 17 , wherein the current location is transmitted to a server.

20. The system of claim 17 , wherein the mobile communications device determines the first security policy to apply and the second security policy to apply based upon the current location.

21. The system of claim 20 , further comprising a module to receive at the mobile communications device an email notification from the server in response to the determined and transmitted change in the current location.

22. The system of claim 21 , wherein the email notification comprises information to indicate that the mobile communications device has left the first location.

23. The system of claim 17 , further comprising a module to receive, from the server, a command to apply the second security policy, the command being based on the generated notification,

wherein the module to apply the second security policy to replace the first security policy to the mobile communications device further applies the second security policy based on the received command.

Assignments (10)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 26, 2023
From: LOOKOUT, INC.
To: F-SECURE CORPORATION
Reel/Frame 065027/0342 →
RELEASE OF PATENT SECURITY INTEREST AT REEL 59909 AND FRAME 0764 Recorded Jun 2, 2023
From: ALTER DOMUS (US) LLC, AS ADMINISTRATIVE AGENT
To: LOOKOUT, INC.
Reel/Frame 063844/0638 →
RELEASE OF PATENT SECURITY INTEREST REEL 59909 AND FRAME 0764 Recorded Jun 2, 2023
From: ALTER DOMUS (US) LLC, AS ADMINISTRATIVE AGENT
To: LOOKOUT, INC.
Reel/Frame 064120/0985 →
RELEASE OF SECURITY INTEREST Recorded May 9, 2022
From: SILICON VALLEY BANK (THE "BANK")
To: LOOKOUT, INC.
Reel/Frame 059909/0668 →
SECURITY INTEREST Recorded May 9, 2022
From: LOOKOUT, INC.
To: ALTER DOMUS (US) LLC
Reel/Frame 059909/0764 →
RELEASE OF SECURITY INTEREST Recorded Nov 23, 2020
From: OBSIDIAN AGENCY SERVICES, INC.
To: LOOKOUT INC.
Reel/Frame 054716/0923 →
SECURITY INTEREST Recorded Jun 6, 2019
From: LOOKOUT, INC.
To: OBSIDIAN AGENCY SERVICES, INC.
Reel/Frame 049408/0861 →
SECURITY INTEREST Recorded Oct 29, 2018
From: LOOKOUT, INC.
To: SILICON VALLEY BANK
Reel/Frame 048208/0947 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 10, 2013
From: MAHAFFEY, KEVIN; HERING, JOHN G.; BURGESS, JAMES
To: FLEXILIS, INC.
Reel/Frame 031382/0367 →
CHANGE OF NAME Recorded Oct 10, 2013
From: FLEXILIS, INC.
To: LOOKOUT, INC.
Reel/Frame 031395/0185 →