Blackberry Corporation

Christopher Maybee Ryerson

Christopher Lyle Bender

Kevin John Oerton

David Bukurak

Denis Fedotenko

Michael Thomas Winkler

Benjamin Altman

Andrey Leonov

Jayesh Beldar

Jing Chuan Zhao

Denis Fedotnko

Some aspects of what is described here relate to managing the use of network resources on a mobile device. User input received at the device indicates whether to allow an application associated with a first perimeter on the device to access a network resource associated with a second perimeter on the device. For example, in some instances user input may indicate whether to allow data from applications associated with a personal perimeter on the device to be transmitted over an enterprise communication system. When outbound data associated with the first perimeter are received, the device determines, according to the indication from the user input, whether to route the outbound data to the network resource associated with the second perimeter.

Managing use of network resources

A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator, services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked. The invoked module causes one of the available wireless network identifiers from the scan list that matches one of the offered wireless network identifiers to be selected, if such matching identifier exists. A connection is established with one of the available wireless networks corresponding to the selected available wireless network identifier, for accessing a selected aggregator service corresponding to the selected aggregator service profile.

Network selection methods and apparatus with use of a master service management module and a prioritized list of multiple aggregator service profiles

Methods and devices for implementing security policies on a wireless device. The wireless device may include a non-volatile memory comprising a security type hard-coded in the non-volatile memory. Based on the security type, it may be determined whether a received security policy governing behavior of one or more resources designated as personal is applicable to the one or more resources designated as personal. If the security type is determined to indicate that the received security policy is not applicable to the one or more resources designated as personal, the security policy may not be applied to the one or more resources designated as personal.

Methods and systems for implementing security policies on a mobile device

In one illustrative example, a wireless device receives a communication policy from a private network. The communication policy includes allowable service provider identifiers (e.g. domain names, realms) corresponding to allowable service providers. The wireless device stores these identifiers in its memory. When roaming, the wireless device encounters a wireless network ('hotspot') and receives via the wireless network one or more reachable service provider identifiers corresponding to one or more reachable service providers. In a work mode of operation, the wireless device allows a connection to the wireless network based on a match between one of the allowable and reachable service provider identifiers, but otherwise disallows the connection. The communication policy may additionally or alternatively include device types for P2P networks, and/or allowable private network identifiers (e.g. ESSIDs), and/or allowable hotspot aggregator service identifiers or names, for use in the work mode.

Methods and apparatus for use in controlling connections to wireless networks

A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked. The invoked module causes one of the available wireless network identifiers from the scan list that matches one of the offered wireless network identifiers to be selected, if such matching identifier exists. A connection is established with one of the available wireless networks corresponding to the selected available wireless network identifier, for accessing a selected aggregator service corresponding to the selected aggregator service profile.

Growing community of inventors

Waterloo, Canada

Christopher Maybee Ryerson