Source: https://patents.google.com/patent/US9998478B2/en
Timestamp: 2019-09-19 17:37:17
Document Index: 147923030

Matched Legal Cases: ['§ 120', 'Application No. 04814713', 'Application No. 09759830', 'Application No. 06736310', 'Application No. 04814713', 'Application No. 09759830']

US9998478B2 - Enterprise-wide security for computer devices - Google Patents
Enterprise-wide security for computer devices Download PDF
US9998478B2
US9998478B2 US14/499,754 US201414499754A US9998478B2 US 9998478 B2 US9998478 B2 US 9998478B2 US 201414499754 A US201414499754 A US 201414499754A US 9998478 B2 US9998478 B2 US 9998478B2
US14/499,754
US20150106924A1 (en
2012-09-28 Priority to US13/630,830 priority patent/US8850530B2/en
2014-09-29 Priority to US14/499,754 priority patent/US9998478B2/en
2014-09-29 Application filed by McAfee LLC filed Critical McAfee LLC
2015-04-16 Publication of US20150106924A1 publication Critical patent/US20150106924A1/en
2018-06-12 Publication of US9998478B2 publication Critical patent/US9998478B2/en
This Application is a continuation (and claims the benefit of priority under 35 U.S.C. § 120) of U.S. patent application Ser. No. 13/630,830, filed on Sep. 28, 2012, now issued as U.S. Pat. No. 8,850,530, and entitled ENTERPRISE-WIDE SECURITY SYSTEM FOR COMPUTER DEVICES, which application is a continuation of U.S. patent application Ser. No. 12/972,410, filed on Dec. 17, 2010, now issued as U.S. Pat. No. 8,341,693, which application is a continuation of U.S. patent application Ser. No. 11/441,049, filed May 26, 2006, now issued as U.S. Pat. No. 7,865,938, which application is a divisional of U.S. patent application Ser. No. 10/527,235, filed Nov. 30, 2005, now issued as U.S. Pat. No. 7,669,237, which application is the National Stage Entry of PCT/US2003/026645 filed Aug. 27,2003 (published as WO/2004/021114), which application claims the benefit of priority from U.S. Provisional Patent Application Ser. No. 60/406,032 filed Aug. 27, 2002. The disclosures of the prior applications and patents are considered part of and are incorporated by reference in their entirety in the disclosure of this application.
Many personal computer users use Personal Information Management (PIM) applications such as an address book, a daily organizer, and a To-Do list application-on their personal computers and mobile devices. The data for these PINTS are stored in corresponding databases at the personal computers and mobile devices. Often, data in these databases must be synchronized in order to maintain data uniformity. The synchronization of data between devices of this type is known. For example, U.S. Pat. No. 6,006,274 describes a “Method and Apparatus Using a Pass Through Personal Computer Connected to Both a Local Communication Link and a Computer Network for Identifying and Synchronizing a Preferred Computer with a Portable Computer”. Also, U.S. Pat. Nos. 6,000,000 and 5,884,323 both describe an “Extendible Method and Apparatus for Synchronizing Multiple Files on Two Different Computer Systems.” Generally, the synchronization process is activated either by detecting a mobile device on a cradle or by manual press of a button. The synchronization process proceeds to synchronize data for several different applications that run on the mobile devices with data for corresponding application on other computers.
Various types of security software incorporating different data security encryption standards have been used in the past for securing network, desktop, laptop and PDA environments. On such suit of software is called Trusted Mobility Suite™ offered by Trust Digital™, which is used to set access control, encryption, and other parameters and push them to such mobile devices as Palm Pilot™, Pocket PC™, Blackberry™ or Symbian OS devices to protect against fraud and theft, sabotage, malicious hacking and other adverse exposure caused by data compromise. For example, at a network level, PDASecure™ Virtual Private Network provides secure communication among mobile devices or between mobile devices and routers and servers. Mobile DesktopSecure™ is a security and encryption software designed to protect files, data, applications, databases, directories, or an entire hard drive. It is also used to push security profiles containing defined security policies from a server to protect laptops and desktops within a network. Generally, Trusted Mobility Suite™ implements security using a graphical user interface (GUI) that allows administrators and users to secure all or selected applications. In this way, the users and administrators can selectively secure application(s) from unwanted and unauthorized access.
The system and method for securing data in mobile devices of the present invention includes a computing node and a plurality of mobile devices, as later defined below. A node security program or agent executed in the computing node interfaces with a device security program executed at a mobile device, if one exists or interface with device resources. The node security program or agent can also interface with a node security program executed, at another computing node. The computing node or alternatively a security server can be responsible for sending information and created profiles to other devices, nodes, or agents, and for controlling the flow of information and data with devices, nodes or agents.
As stated above, the computing node 102 can be any type of wired or wireless network node, including a client station connected to the security server 106 directly or via a wired or wireless network. In its simplest form, the computing node 102 can be a stand alone computer station. Also, the computing node 102 can itself be a mobile device 102 that is responsible for managing security for other mobile devices 104. As stated above, the security parameters of the computing node 102 is defined by the node security profile 208. For example, the node security profile 208 can set user access rights by enabling/disabling or password protecting users' ability to configure the computing node 104 and/or its profile. Depending upon the security parameters set in the node security profile 208, corresponding changes are made to the registry key, file, or database entries of the computing node 102 or its configuration file to enforce the node security profile parameters. Registry key, file, or database entries along with functionality associated with the computing node 102 are used to control and monitor all data synchronization, transfer, access, modification, or execution of files, applications, programs., profiles (e.g., security profiles) and processes that occur through the computing node by any data transport that relates to applications that synchronize data with the devices 104 and 124. The computing node security program 202 can also check, for example, periodically, for security profile updates.
A node or device security profile 206 or 208 defines one or more security features used for providing various security quality features and characteristics within the computer system 100 of the present invention. The security profiles 206,208 can be created at the central station 118, the server station 106 or at a computing node 102. As stated above, the node security profile 208 defines the parameters for managing security in accordance with the present invention. The node security profile 208 is interpreted by the node security program 202 to determine the security parameters. The present invention can use any suitable tool for creating security profiles that have defined interpretation rules, such those that govern .ini or XML files. The security profiles can be edited using corresponding editing tools. If the security profile is a text profile, for example, a text editor can be used for creating the node profile. The security profile can also be a binary or XML file interpreted by the node security program or agent based on defined rules.
According to another aspect of the invention, a discovery process is used to discover, detect, or locate mobile devices 104, resources based on specified discovery rules. Various methods can be used to detect and discover the mobile devices 104 or resource devices 124. The discovery of the mobile devices can be done remotely or locally. Remote discovery can be within a network that comprises domains, with each domain including a number of computing nodes. Under this arrangement, the discovery, detection and location of the mobile devices, resources can be controlled by a central discovery program 704 or agent, for example, one that runs at the security server 106. Also, the discovery method of the present invention can be a local discovery process, where the mobile devices 102 are discovered or detected locally at a computing node by running a discovery agent in the computing node locally as opposed to a centrally. The discovery process can detect and track, how a mobile device or external resource is used and on which systems a particular resource or mobile device has synchronized data. The discovery can also detect foreign and unknown devices (that have not been attached to the network earlier) entering a wired or wireless network of an organization.
Close Closes a file and deletes the object
Read Reads (unbuffered) data from a file at the current file position.
Write Writes (unbuffered) data in a file to the current file position.
GetSize Get length of the file
1 CryptoFileAccess::CryptoFileAccess( )
2 CryptoFileAccess:: CryptoFileAccess(PCSTR pszPassword,
SECURITY ATTRIBUTES*
3 Void CryptoFileAccess::Open(PCSTR pszPassword, CRYPTALGS alg,
dwFlagsAndAthibutes=FILE_ATTRIBUTE_NORMAL,
4 Void CryptoFileAccess::Close( )
8 DWORD CryptoFileAccess::GetPointer( )
10 bool CryptoFileAccess::IsOpen( )
11 static bool CryptoFikleAccess::IsFileEncrypted(PCTSTR pszFileName)
1. At least one non-transitory computer readable medium that includes code for execution and when executed by a processor:
scans a network based on a scan profile defining one or more parameters associated with at least one of domains and computing nodes in the network;
detects at least one domain on the network in accordance with at least one parameter defined in the scan profile;
detects at least one computing node within the detected domain;
connects to the detected computing node;
detects, using a discovery program, one or more mobile devices connected to the detected computing node; and
determines information associated with at least one mobile device of the detected mobile devices, wherein the information is to include a type of computing platform of the at least one mobile device, and wherein the type of computing platform of the at least one mobile device is determined by querying one or more application registries on the computing node.
2. The at least one non-transitory computer readable medium of claim 1, wherein the discovery program is to run in at least one of a remote central station or a local computing node.
3. The at least one non-transitory computer readable medium of claim 1, which includes further code for execution and when executed by a processor:
groups the detected mobile devices by type.
4. The at least one non-transitory computer readable medium of claim 1, wherein the scan profile contains information associated with at least one of the network, the domains, an IP address, a netmask, and a computer identity to be scanned.
5. The at least one non-transitory computer readable medium of claim 1, which includes further code for execution and when executed by a processor:
analyzes results of the scanning to produce an analysis result; and
displays the analysis result to at least one user.
6. The at least one non-transitory computer readable medium of claim 1, which includes further code for execution and when executed by a processor:
detects one or more resource devices connected to the detected computing node; and
determines information associated with at least one of the detected resource devices.
7. The at least one non-transitory computer readable medium of claim 1, which includes further code for execution and when executed by a processor:
determines at least one of a connection profile and a location of the at least one mobile device.
8. The at least one non-transitory computer readable medium of claim 1, wherein the determining the information of the mobile device is based on at least one of a registry resource, a file resource, a process resource, a network management parameter, a communication protocol parameter, a data format, a packet format, a synchronization log entry, a directory structure and a database entry.
9. The at least one non-transitory computer readable medium of claim 1, which includes further code for execution and when executed by a processor:
detects one or more mobile devices previously connected to the detected computing node; and
determines information associated with at least one of the one or more mobile devices previously connected to the detected computing node.
10. The at least one non-transitory computer readable medium of claim 9, wherein the detecting is based, at least in part, on an imprint in a registry structure of the detected computing node, the imprint associated with the at least one mobile device previously connected to the detected computing node.
a discovery program configured to run on the processor to:
scan a network based on a scan profile defining one or more parameters associated with at least one of domains and computing nodes in the network;
detect at least one domain on the network in accordance with at least one parameter defined in the scan profile;
detect at least one computing node within the detected domain;
connect to the detected computing node;
detect, using a discovery program, one or more mobile devices connected to the detected computing node; and
determine information associated with at least one mobile device of the detected mobile devices, wherein the information is to include a type of computing platform of the at least one mobile device, and wherein the type of computing platform of the at least one mobile device is determined by querying one or more application registries on the computing node.
12. The apparatus of claim 11, wherein the apparatus is one of a remote central station or a local computing node.
13. The apparatus of claim 11, wherein the discovery program is configured to run on the processor to:
determine at least one of a device type, a connection profile, and a location of the at least one mobile device.
14. The apparatus of claim 11, wherein the discovery program is configured to run on the processor to:
detect one or more mobile devices previously connected to the detected computing node; and
determine information associated with at least one of the one or more mobile devices previously connected to the detected computing node.
15. The apparatus of claim 14, wherein the detecting is based, at least in part, on an imprint in a registry structure of the detected computing node, the imprint associated with the at least one mobile device previously connected to the detected computing node.
16. A method for managing a computer system on a network, the method comprising:
scanning a network based on a scan profile defining one or more parameters associated with at least one of domains and computing nodes in the network;
detecting at least one domain on the network in accordance with at least one parameter defined in the scan profile;
detecting at least one computing node within the detected domain;
connecting to the detected computing node;
detecting, using a discovery program, one or more mobile devices connected to the detected computing node; and
determining information regarding at least one mobile device of the detected mobile devices, wherein the information includes a type of computing platform of the at least one mobile device, and wherein the type of computing platform of the at least one mobile device is determined by querying one or more application registries on the computing node.
determining at least one of a device type, a connection profile, and a location of the at least one mobile device.
detecting one or more mobile devices previously connected to the detected computing node; and
determining information associated with at least one of the one or more mobile devices previously connected to the detected computing node.
19. At least one non-transitory computer readable medium that includes code for execution and when executed by a processor:
detects, using a discovery program, one or more mobile devices previously connected to the detected computing node, wherein the detection of the one or more mobile devices previously connected to the detected computing node is based, at least in part, on an imprint in a registry structure of the detected computing node, the imprint associated with at least one mobile device of the one or more mobile devices previously connected to the detected computing node; and
20. At least one non-transitory computer readable medium that includes code for execution and when executed by a processor:
detects, using a discovery program, one or more mobile devices connected to the detected computing node;
determines information associated with at least one mobile device of the detected mobile devices, wherein the information is to include a type of computing platform of the at least one mobile device;
detects one or more other mobile devices previously connected to the detected computing node; and
determines information associated with at least one of the one or more other mobile devices previously connected to the detected computing node based on information obtained from the detected computing node.
21. The at least one non-transitory computer readable medium of claim 20, wherein the detecting is based, at least in part, on an imprint in a registry structure of the detected computing node, the imprint associated with a mobile device of the one or more other mobile devices previously connected to the detected computing node.
22. The at least one non-transitory computer readable medium of claim 19, which includes further code for execution and when executed by a processor:
analyzes at least one result of the scanning to produce an analysis result; and
US14/499,754 2002-08-27 2014-09-29 Enterprise-wide security for computer devices Active US9998478B2 (en)
US20150106924A1 US20150106924A1 (en) 2015-04-16
US9998478B2 true US9998478B2 (en) 2018-06-12
EP0661677A2 (en) 1993-12-28 1995-07-05 Eastman Kodak Company Method and apparatus for customer identification at automated teller machines
WO2000016190A1 (en) 1998-09-17 2000-03-23 Index Systems, Inc. Apparatus and methods for unlocking password protected software systems to recover master password
WO2002019116A2 (en) 2000-08-31 2002-03-07 F-Secure Oyj Wireless device management
WO2002044892A2 (en) 2000-11-28 2002-06-06 4Thpass Inc. Method and system for maintaining and distributing wireless applications
US6804722B1 (en) 1999-07-09 2004-10-12 Nec Corporation System, method and device for communication service provisioning
US20060190684A1 (en) 2005-02-24 2006-08-24 Mccammon Keiron Reverse value attribute extraction
US7136907B1 (en) * 2000-10-19 2006-11-14 International Business Machines Corporation Method and system for informing an operating system in a system area network when a new device is connected
WO2008109866A2 (en) 2007-03-07 2008-09-12 Qualcomm Incorporated Systems and methods for controlling service access on a wireless communication device
US20100191847A1 (en) 2009-01-28 2010-07-29 Gregory G. Raleigh Simplified service network architecture
US20110320819A1 (en) 2010-06-23 2011-12-29 Weber Karon A Accessing restricted content based on proximity
US20130047219A1 (en) 2002-08-27 2013-02-21 Majid Shahbazi Enterprise-wide security system for computer devices
US20110162049A1 (en) 2002-08-27 2011-06-30 Mcafee, Inc., A Delaware Corporation Enterprise-wide security system for computer devices
EP1709556A1 (en) 2003-12-23 2006-10-11 Trust Digital, LLC System and method for enforcing a security policy on mobile devices using dynamically generated security profiles
US8010997B2 (en) 2005-06-30 2011-08-30 Microsoft Corporation Enforcing device settings for mobile devices
US20120270523A1 (en) 2006-10-23 2012-10-25 Mcafee, Inc. System and method for controlling mobile device access to a network
US20140357253A1 (en) 2006-10-23 2014-12-04 Norm LAUDERMILCH System and method for controlling mobile device access to a network
US20120270522A1 (en) 2006-10-23 2012-10-25 Mcafee, Inc. System and method for controlling mobile device access to a network
EP2345205A1 (en) 2008-11-06 2011-07-20 McAfee, Inc. System and method for mediating connections between policy source servers, corporate repositories, and mobile devices
"Face-Image Capturing Method for Unattended Terminal", IBM Technical Disclosure Bulletin, IBM Corporation, New York, US, vol. 38, No. 1, Jan. 1995 (Jan. 1995), (2 pages), XP000498703 ISSN: 0018-8689.
"FACE-IMAGE CAPTURING METHOD FOR UNATTENDED TERMINAL.", IBM TECHNICAL DISCLOSURE BULLETIN, INTERNATIONAL BUSINESS MACHINES CORP. (THORNWOOD), US, vol. 38., no. 01., 1 January 1995 (1995-01-01), US, pages 101/102., XP000498703, ISSN: 0018-8689
3GPP TS 23.040, "3rd Generation Partnership Project: Technical Specification Group Terminals; Technical Realization of the Short Message Service (SMS); (Release 6)." Dec. 2005, 3GPP, Global System for Mobile Communications (191 pages).
Advisory Action in U.S. Appl. No. 13/459,216 dated Jul. 19, 2013 (5 pages).
Corrected Notice of Allowance in U.S. Appl. No. 11/578,420 dated Oct. 23, 2013 (3 pages).
Croft, N.J. and M.S. Oliver, A Silent SMS Denial of Service (DoS) Attack, Sep. 2007, retrieved on Feb. 15, 2017 from https://pdfs.semanticscholar.org/79eb/97baebe6ae89dd45d3b1d2a78fe41f1cd74a.pdf, 7 pages.
EPO Replacement International Search Report for EP Application No. 04814713.6.1238/1709556 dated May 30, 2011 (8 pages).
European Patent Office Communication Pursuant to Article 94(3) EPC (Examination Report) dated Jul. 5, 2013 in EP Application No. 09759830.4 (7 pages).
European Patent Office Communication Pursuant to Article 94(3) EPC (Examination Report) dated Mar. 6, 2017 in EP Application No. 06736310.1 (7 pages).
European Patent Office Communication Pursuant to Article 94(3) EPC (Examination Report) dated Sep. 29, 2011 in EP Application No. 04814713.6 (6 pages).
European Patent Office Communication Pursuant to Rules 161(1) and 162 EPC in EP Application No. 09759830.4-1244 dated Jun. 15, 2011 (2 pages).
European Patent Office Extended Search Report and Written Opinion in EP Application Serial No. 06736310.1.1853 dated May 28, 2014 (7 pages).
European Patent Office Extended Search Report and Written Opinion in EP Application Serial No. 13186544.6.1955 dated Apr. 24, 2014 (7 pages).
Examiner Interview Summary in U.S. Appl. No. 11/441,049 dated July 27, 2009 (1 page).
Examiner Interview Summary in U.S. Appl. No. 11/441,049 dated Jun. 14, 2010 (3 pages).
Final Office Action in U.S. Appl. No. 10/527,235 dated Dec. 12, 2006 (12 pages).
Final Office Action in U.S. Appl. No. 10/527,235 dated Jul. 11, 2008 (11 pages).
Final Office Action in U.S. Appl. No. 11/363,283 dated Jan. 30, 2012 (20 pages).
Final Office Action in U.S. Appl. No. 11/363,283 dated Jan. 5, 2010 (23 pages).
Final Office Action in U.S. Appl. No. 11/363,283 dated Mar. 9, 2011 (28 pages).
Final Office Action in U.S. Appl. No. 11/441,049 dated Jul. 9, 2008 (16 pages).
Final Office Action in U.S. Appl. No. 11/441,049 dated Mar. 22, 2007 (9 pages).
Final Office Action in U.S. Appl. No. 11/578,420 dated Mar. 4, 2011 (31 pages).
Final Office Action in U.S. Appl. No. 11/578,420 dated May 14, 2012 (32 pages).
Final Office Action in U.S. Appl. No. 11/877,656 dated Mar. 1, 2011 (35 pages).
Final Office Action in U.S. Appl. No. 12/614,319 dated Aug. 7, 2013 (16 pages).
Final Office Action in U.S. Appl. No. 12/614,319 dated Sep. 20, 2012 (17 pages).
Final Office Action in U.S. Appl. No. 12/614,326 dated May 10, 2012 (18 pages).
Final Office Action in U.S. Appl. No. 12/614,333 dated Aug. 1, 2012 (10 pages).
Final Office Action in U.S. Appl. No. 12/972,410 dated Mar. 7, 2012 (10 pages).
Final Office Action in U.S. Appl. No. 13/102,627 dated Sep. 26, 2013 (10 pages).
Final Office Action in U.S. Appl. No. 13/459,213 dated Jun. 11, 2013 (28 pages).
Final Office Action in U.S. Appl. No. 13/459,216 dated Mar. 26, 2013 (26 pages).
GSM Technical Specification, 03.40, Jul. 1996, retrieved on Feb. 14, 2017 from http://www.etsi.org/deliver/etsi_gts/03/0340/05.03.00_60/gsmts 0340v050300p.pdf, 109 page.
International Preliminary Examination Report for International Application No. PCT/US03/26645 dated Mar. 3, 2005 (6 pages).
International Preliminary Examination Report for International Application No. PCT/US04/042565 dated Jul. 17, 2006 (7 pages).
International Preliminary Report on Patentability and Written Opinion for International Application No. PCT/US2009/063640 dated May 19, 2011 (10 pages).
International Preliminary Report on Patentability dated Mar. 24, 2009 (1 page) and Written Opinion of the International Searching Authority dated Feb. 29, 2008 (4 pages) for International Application No. PCT/US06/06968.
International Search Report and Written Opinion for International Application No. PCT/US2009/063640 dated Apr. 20, 2010 (13 pages).
International Search Report for International Application No. PCT/US03/26645 dated Feb. 13, 2004 (3 pages).
International Search Report for International Application No. PCT/US04/42565 dated May 25, 2005 (1 page).
International Search Report for International Application No. PCT/US06/06968 dated Feb. 29, 2008 (1 page).
Nayak, et al., "Security Issues in Mobile Data Networks," Vehicular Technology Conference, 2004; VTC2004-Fall 2004; IEEE 60th., vol. 5, pp. 3229-3233 (5 pages).
Non-Final Office Action in U.S. Appl. No. 10/527,235 dated Aug. 28, 2007 (9 pages).
Non-Final Office Action in U.S. Appl. No. 10/527,235 dated Jan. 9, 2009 (11 pages).
Non-Final Office Action in U.S. Appl. No. 10/527,235 dated Jun. 28, 2006 (10 pages).
Non-Final Office Action in U.S. Appl. No. 11/363,283 dated Aug. 17, 2011 (27 pages).
Non-Final Office Action in U.S. Appl. No. 11/363,283 dated Jun. 2, 2009 (18 page).
Non-Final Office Action in U.S. Appl. No. 11/363,283 dated Sep. 23, 2010 (27 pages).
Non-Final Office Action in U.S. Appl. No. 11/441,049 dated Dec. 10, 2009 (15 pages).
Non-Final Office Action in U.S. Appl. No. 11/441,049 dated Feb. 2, 2009 (16 pages).
Non-Final Office Action in U.S. Appl. No. 11/441,049 dated Oct. 17, 2006 (8 pages).
Non-Final Office Action in U.S. Appl. No. 11/441,049 dated Sep. 24, 2007 (16 pages).
Non-Final Office Action in U.S. Appl. No. 11/578,420 dated Dec. 1, 2011 (29 pages).
Non-Final Office Action in U.S. Appl. No. 11/578,420 dated Jun. 22, 2011 (6 pages).
Non-Final Office Action in U.S. Appl. No. 11/578,420 dated Sep. 16, 2010 (25 pages).
Non-Final Office Action in U.S. Appl. No. 11/877,656 dated Aug. 6, 2010 (30 pages).
Non-Final Office Action in U.S. Appl. No. 12/614,319 dated Apr. 19, 2012 (11 pages).
Non-Final Office Action in U.S. Appl. No. 12/614,319 dated Feb. 7, 2013 (14 pages).
Non-Final Office Action in U.S. Appl. No. 12/614,326 dated Dec. 12, 2012 (12 pages).
Non-Final Office Action in U.S. Appl. No. 12/614,326 dated Dec. 16, 2011 (13 pages).
Non-Final Office Action in U.S. Appl. No. 12/614,333 dated Mar. 28, 2012 (12 pages).
Non-Final Office Action in U.S. Appl. No. 12/830,861 dated Jun. 21, 2012 (7 pages).
Non-Final Office Action in U.S. Appl. No. 12/972,410 dated Sep. 21, 2011 (8 pages).
Non-Final Office Action in U.S. Appl. No. 13/102,627 dated Mar. 28, 2013 (6 pages).
Non-Final Office Action in U.S. Appl. No. 13/459,213 dated Dec. 17, 2012 (21 pages).
Non-Final Office Action in U.S. Appl. No. 13/459,216 dated Dec. 7, 2012 (20 pages).
Non-Final Office Action in U.S. Appl. No. 13/630,830 dated Aug. 26, 2013 (9 pages).
Non-Final Office Action in U.S. Appl. No. 14/299,085 dated Nov. 15, 2016 (26 pages).
Notice of Allowance in U.S. Appl. No. 10/527,235 dated Oct. 5, 2009 (8 pages).
Notice of Allowance in U.S. Appl. No. 11/363,283 dated Jan. 7, 2013 (11 pages).
Notice of Allowance in U.S. Appl. No. 11/363,283 dated May 24, 2013 (13 pages).
Notice of Allowance in U.S. Appl. No. 11/441,049 dated Aug. 23, 2010 (19 pages).
Notice of Allowance in U.S. Appl. No. 11/578,420 dated Jan. 18, 2013 (5 pages).
Notice of Allowance in U.S. Appl. No. 11/578,420 dated Sep. 17, 2013 (6 pages).
Notice of Allowance in U.S. Appl. No. 11/578,420 dated Sep. 26, 2012 (3 pages).
Notice of Allowance in U.S. Appl. No. 11/578,420 dated Sep. 26, 2012 (9 pages).
Notice of Allowance in U.S. Appl. No. 11/877,656 dated Jan. 24, 2012 (14 pages).
Notice of Allowance in U.S. Appl. No. 11/877,656 dated Jul. 12, 2011 (15 pages).
Notice of Allowance in U.S. Appl. No. 11/877,656 dated Jul. 20, 2012 (14 pages).
Notice of Allowance in U.S. Appl. No. 11/877,656 dated Mar. 29, 2012 (14 pages).
Notice of Allowance in U.S. Appl. No. 11/877,656 dated Oct. 5, 2011 (16 pages).
Notice of Allowance in U.S. Appl. No. 12/614,326 dated Jul. 15, 2013 (12 pages).
Notice of Allowance in U.S. Appl. No. 12/614,326 dated Mar. 19, 2013 (12 pages).
Notice of Allowance in U.S. Appl. No. 12/614,333 dated Jul. 1, 2013 (8 pages).
Notice of Allowance in U.S. Appl. No. 12/614,333 dated Mar. 5, 2013.
Notice of Allowance in U.S. Appl. No. 12/972,410 dated Jun. 25, 2012 (10 pages).
Notice of Allowance in U.S. Appl. No. 12/972,410 dated Oct. 17, 2012 (9 pages).
Notice of Allowance in U.S. Appl. No. 13/102,627 dated Sep. 17, 2014.
Notice of Allowance in U.S. Appl. No. 13/459,213 dated Jan. 27, 2014 (14 pages).
Notice of Allowance in U.S. Appl. No. 13/459,213 dated Oct. 9, 2013 (14 pages).
Notice of Allowance in U.S. Appl. No. 13/630,830 dated May 1, 2014 (14 pages).
PCT Written Opinion in International Application Serial No. PCT/US03/26645 dated Jan. 21, 2005 (7 Pages).
Restriction Requirement in U.S. Appl. No. 11/578,420 dated Jun. 9, 2010 (8 pages).
RFC 791, "Internet Protocol: DARPA Internet Protocol Specification", Sep. 1981, Information Sciences Institute, University of Southern California (50 pages).
Smith, Randy F., "Tracking Logon and Logoff Activity in Windows 2000", Feb. 2001, Microsoft TechNet, http://www.microsoft.com/technet/prodtechnol/windows2000serv/maintain/monitor/logonoff.mspx (6 pages) (printed Jul. 1, 2010, © 2010).
Supplementary European Search Report for EPO Application No. EP 04 81 4713 dated Apr. 25, 2007 (2 pages).
U.S. Appl. No. 12/972,410, filed Dec. 17, 2010, entitled "Enterprise-Wide Security System for Computer Devices," Inventor Majid Shahbazi.
U.S. Appl. No. 13/630,830 filed Sep. 28, 2012 entitled "Enterprise-Wide Security System for Computer Devices", Inventor, Majid Shahbazi.
U.S. Appl. No. 14/299,085, filed Jul. 9, 2014, entitled "System and Method for Controlling Mobile Device Access to a Network"; inventors Norm Laudermilch et al. (62 pages).
U.S. Appl. No. 14/299,085, filed Jun. 9, 2014 and entitled "System and Method for Controlling Mobile Device Access to a Network"; inventors Norm Laudermilch et al.
Wireless Short Message Service Tutorial, ADC NewNet, Inc., 1999, retrieved on Feb. 15, 2017 from http://educypedia.karadimov.info/library/SMS_tutorial.pdf, 17 pages.
Written Opinion of the International Searching Authority for International Application No. PCT/US04/42565 dated May 25, 2005 (6 pages).
US8341693B2 (en) 2012-12-25
US9542571B2 (en) 2017-01-10 System and method of owner application control of electronic devices
CA2516580C (en) 2011-01-25 System and method of multiple-level control of electronic devices
US7409547B2 (en) 2008-08-05 Adaptive transparent encryption
EP1320011B1 (en) 2007-03-07 Method and architecture for providing pervasive security to digital assets
US7725737B2 (en) 2010-05-25 System and methodology providing secure workspace environment
JP6131381B2 (en) 2017-05-17 The provision of managed browser
US20150229651A1 (en) 2015-08-13 Methods and systems for controlling access to computing resources based on known security vulnerabilities
EP2285061A1 (en) 2011-02-16 System and Method for Providing Distributed Access Control to Secured Items