System and method for location based policy management

Abstract

In a particular embodiment, a policy server is disclosed that includes a network device interface adapted to communicate with a set of wireless access points via a short range wireless network. Each of the wireless access points has a coverage area. The policy server also includes a processor and a memory accessible to the processor. The memory includes instructions executable by the processor to determine whether at least one wireless device is located within a boundary area, to apply a first policy when the at least one wireless device is located within the boundary area, and to apply a second policy when the at least one wireless device is located outside of the boundary area. The boundary area covers an area that is different from the coverage area of any one wireless access point.

1 . A policy server comprising: 
 a network device interface adapted to communicate with a set of wireless access points via a short range wireless network, each of the wireless access points having a coverage area;    a processor and a memory accessible to the processor, the memory comprising instructions executable by the processor to: 
 determine whether at least one wireless device is located within a boundary area, the boundary area covering an area that is different from the coverage area of any one wireless access point of the set of wireless access points; and  
 apply a first policy when the at least one wireless device is located within the boundary area and apply a second policy when the at least one wireless device is located outside of the boundary area.  
   
   
   
       2 . The policy server of  claim 1 , wherein the memory further comprises an instruction executable by the processor to receive location information from the at least one wireless device and to determine a location of the at least one wireless device relative to the boundary area based on the received location information.  
   
   
       3 . The policy server of  claim 1 , wherein the memory further comprises an instruction executable by the processor to define the boundary area.  
   
   
       4 . The policy server of  claim 1 , wherein the boundary area is located within a collective wireless coverage area provided by the coverage area of each wireless access point of the set of wireless access points.  
   
   
       5 . The policy server of  claim 1 , wherein the first policy allows data packets from the at least one wireless device to pass to external networks and wherein the second policy does not allow data packets from the at least one wireless device to pass to external networks.  
   
   
       6 . The policy server of  claim 1 , wherein the boundary area comprises a portion of a collective wireless coverage area of each of the wireless access points.  
   
   
       7 . The policy server of  claim 1 , wherein the memory further comprises instructions executable by the processor to: 
 receive a set of points from a calibration device; and    extrapolate the boundary area from the received set of points.    
   
   
       8 . A method comprising: 
 receiving location information related to a wireless device from at least one access point of a set of access points providing a short range wireless network;    determining a location of the wireless device relative to a boundary area defined within a coverage area of the short range wireless network, the boundary area defining a region that is not coextensive with the coverage area; and    selectively associating at least one policy with the wireless device based on the determined location.    
   
   
       9 . The method of  claim 8 , wherein selectively associating at least one policy comprises assigning a first policy when the wireless device is determined to be within the boundary area and assigning a second policy when the wireless device is determined to be outside of the boundary area.  
   
   
       10 . The method of  claim 8 , wherein selectively associating at least one policy comprises controlling the wireless device within the boundary area to use a particular ring tone when the wireless device is located within the boundary area.  
   
   
       11 . The method of  claim 8 , wherein selectively associating at least one policy comprises communicating using a first encryption protocol when the wireless device is within the boundary area and communicating using a second encryption protocol when the wireless device is outside of the boundary area.  
   
   
       12 . The method of  claim 8 , wherein selectively associating at least one policy comprises communicating using a first security key when the wireless device is within the boundary area and communicating using a second security key when the wireless device is outside of the boundary area.  
   
   
       13 . The method of  claim 8 , further comprising: 
 receiving a plurality of calibration points from one or more calibration devices; and    extrapolating the boundary area from the plurality of calibration points.    
   
   
       14 . The method of  claim 8 , wherein receiving the location information comprises receiving global positioning system (GPS) location data related to the wireless device.  
   
   
       15 . The method of  claim 8 , wherein receiving the location information comprises: 
 receiving location data from at least three access points of the set of access points; and    performing a triangulation operation based on the location data received from the at least three access points.    
   
   
       16 . A network device comprising: 
 an interface adapted to communicate with a plurality of wireless access points that provide a wireless coverage area;    a network interface adapted to communicate with a network; and    logic adapted to communicate with the interface and the network interface, the logic to determine a location of a wireless device relative to a boundary area that is not coextensive with the wireless coverage area, the logic to enforce at least one location-based policy with respect to the wireless device based on the determined location.    
   
   
       17 . The network device of  claim 16 , wherein the at least one location-based policy comprises a first policy when the wireless device is located within the boundary area and a second policy when the wireless device is outside of the boundary area.  
   
   
       18 . The network device of  claim 16 , wherein the logic is adapted to determine the location of the wireless device by triangulation using data received from at least three of the plurality of wireless access points.  
   
   
       19 . The network device of  claim 16 , wherein the logic is adapted to receive boundary point data and to determine the boundary area from the boundary point data.  
   
   
       20 . The network device of  claim 16 , wherein the boundary point data comprises a set of calibration points associated with a physical dimension of a building.