Distributed wireless communication access security

1. A computer implemented method of distributed wireless communications access security, the method comprising steps a computer processor of a server computer is programmed to perform, the steps comprising:

receiving data characterizing a device;

selecting a policy among a plurality of predefined policies according to the received data characterizing the device, for the device, the selected policy defining a criterion for determining which wireless access points are allowable; and

communicating data defining the selected policy to the device, for the device to use for determining whether access to an active wireless access point is allowable.

2. The method of claim 1 , further comprising receiving data on compliance of the device with the policy selected for the device from the device.

3. The method of claim 1 , further comprising receiving data on a deviation of the device from the policy selected for the device from the device.

4. The method of claim 1 , further comprising receiving data on compliance of the device with the policy selected for the device from the device, and prompting an update of the policy deviated from based on the compliance.

5. The method of claim 1 , further comprising receiving data on a deviation of the device from the policy selected for the device from the device, and prompting an update of the policy deviated from based on the deviation.

6. The method of claim 1 , further comprising receiving data on a deviation of the device from the policy selected for the device from the device, and restricting access of a user of the device to at least one computing resource based on the deviation.

7. The method of claim 1 , further comprising preliminary steps of defining the policies and storing the defined policies in a database.

8. The method of claim 1 , further comprising preliminary steps of defining the policies, resolving conflicts among the defined policies, and storing the conflict-resolved policies in a database.

9. The method of claim 1 , wherein the selected policy pertains to a protocol used by a wireless access point.

10. The method of claim 1 , wherein the selected policy is defined so as to be applied in way that changes upon a change in stage of communication of the device with a wireless access point.

11. Apparatus for distributed wireless communications access security, the apparatus comprising:

a computer processor of a server computer;

a device data receiver, implemented on the computer processor, configured to receive data characterizing a device;

a policy selector, in communication with the device data receiver, configured to select a policy among a plurality of predefined policies according to the received data characterizing the device, for the device, the selected policy defining a criterion for determining which access points are allowable; and

a policy data communicator, in communication with the policy selector, configured to communicate data defining the selected policy to the device, for the device to use for determining whether access to an active wireless access point is allowable.

12. A non-transitory computer readable medium storing computer processor executable instructions for performing steps of distributed wireless communications access security, the steps comprising:

receiving data characterizing a device;

selecting a policy among a plurality of predefined policies according to the received data characterizing the device, for the device, the selected policy defining a criterion for determining which access points are allowable; and

communicating data defining the selected policy to the device, for the device to use for determining whether access to an active wireless access point is allowable.

13. A computer implemented method of distributed wireless communications access security, the method comprising steps a computer processor of a device is programmed to perform, the steps comprising:

receiving data defining a policy selected by a server computer for the device among a plurality of predefined policies according to data characterizing the device, the selected policy defining a criterion for determining which wireless access points are allowable;

determining whether access to an active wireless access point is allowable, using the received data defining the policy selected for the device.

14. The method of claim 13 , further comprising a step of communicating data on compliance of the device with the policy selected for the device to the server computer.

15. The method of claim 13 , further comprising a step of communicating data on a deviation of the device from the policy selected for the device to the server computer.

16. The method of claim 13 , further comprising a step of restricting the access according to said determining.

17. Apparatus for distributed wireless communications access security, the apparatus comprising:

a computer processor of a device;

a policy data receiver, implemented on the computer processor, configured to receive data defining a policy selected by a server computer for the device among a plurality of predefined policies according to data characterizing the device, the selected policy defining a criterion for determining which wireless access points are allowable; and

an access allowability determiner, in communication with said policy data receiver, configured to determine whether access to an active wireless access point is allowable, using the received data defining the policy selected for the device.

18. The apparatus of claim 17 , further comprising a compliance data communicator, configured to communicate data on compliance of the device with the policy selected for the device to the server computer.

19. The apparatus of claim 17 , further comprising a compliance data communicator, configured to communicate data on a deviation of the device from the policy selected for the device to the server computer.

20. A non-transitory computer readable medium storing computer processor executable instructions for performing steps of distributed wireless communications access security on a device, the steps comprising:

receiving data defining a policy selected by a server computer for the device among a plurality of predefined policies according to data characterizing the device, the selected policy defining a criterion for determining which access points are allowable; and

determining whether access to an active wireless access point is allowable, using the received data defining the policy selected for the device.