System and method for privilege management and revocation

Abstract

The present disclosure relates generally to the management of privileges associated with certain applications that are accessible by users of electronic equipment, such as, for example, networked computers, mobile wireless communications devices, and the like. In particular, the disclosure is directed to systems and methods for managing privileges associated with particular applications and for revoking these privileges in a timely and robust manner. For example, the device keeps track of which applications get access to which privileges. When policies or application control changes, the system detects which privileges have been revoked for which applications. This can be accomplished by simply comparing the old set of privileges with the new set of privileges. For each revoked privilege for a given application, the system determiner if the application has ever accessed that privilege in the past. If an application has accessed a privilege that is now revoked at any time in the past, the device is reset. To ensure that privileges that may be passed between applications are not overlooked, the device is arranged to perform a reset if any revoked privilege accessible by the device is one that may be passed between applications.

Description

technical field [0001] The present invention generally relates to the management of privileges associated with specific applications accessible by users of electronic devices, such as network computers, mobile wireless communication devices, and the like. In particular, the present disclosure relates to a system and method for managing privileges associated with specific applications and revoking those privileges in an instant and robust manner. Background technique [0002] As is known, certain electronic devices, such as network computers, mobile wireless communication devices, etc., include application programs residing on some of the devices that have access to specific privileges that enable the application programs to perform various functions. Typically, system administrators can use IT policies and application controls to set privileges associated with various applications residing on devices under administrator control. Examples of privileges can include things lik...

AI Technical Summary

Problems solved by technology

Events that can trigger privilege revocation can include things like: the application is loaded before IT administrator / application control data exists on the device; the application is found to be a rogue application; and / or restrictions on the use of privileges associated with

Images