Access control to files based on source information

Abstract

The present invention is a security tool for protection of data on a mobile computing device. The security tool provides a plurality of security policies to be enforced based on source information for the data and a location associated with a network environment in which a mobile device is operating. The security tool may be either located at the mobile computing device or at the server. The security tool includes a file access module for determining whether files are visible or accessible. The file access module comprises a tag generator, an association module, and a policy enforcement module. The tag generator creates source information for the file being accessed and the policy enforcement module determines what actions, if any, can be performed on the file and under what conditions such as location and network environment, type of file and other factors.

1 - 21 . (canceled) 
     
     
         22 . A method for providing security to a mobile device, comprising:
 automatically detecting a location of a mobile device; and   implementing on the mobile device a first security policy when the mobile device is located in a first location, and implementing on the mobile device a second security policy when the mobile device is located in a second location.   
     
     
         23 . The method of  claim 22 , comprising pre-configuring security policies for a plurality of locations. 
     
     
         24 . The method of  claim 23 , wherein the plurality of locations comprises a home, a work, an alternate, or a custom location. 
     
     
         25 . The method of  claim 23 , wherein the plurality of security policies are stored on a memory of the mobile device. 
     
     
         26 . The method of  claim 23 , wherein the plurality of security policies are accessed over a network connection. 
     
     
         27 . The method of  claim 22 , further comprising implementing on the mobile device a third security policy when the mobile device is located in a third location. 
     
     
         28 . The method of  claim 22 , wherein the location of the mobile device is detected based on one or more parameters received from a network connection. 
     
     
         29 . The method of  claim 28 , wherein one of the parameters is an Internet Protocol address. 
     
     
         30 . The method of  claim 22 , wherein the mobile device continues to detect the location of the mobile device and applies an appropriate policy automatically when a location of the mobile device changes. 
     
     
         31 . The method of  claim 28 , wherein the network connection is a wireless network connection. 
     
     
         32 . The method of  claim 22 , further comprising:
 determining whether one or more security features have an activity status of inactive or active; and   determining the current security policy based upon the activity status of the one or more security features as well as the detected location.   
     
     
         33 . A mobile device comprising:
 a memory storing a plurality of locations, each location associated with a security policy;   a processor configured to:   automatically detect a location of a mobile device; and   implement on the mobile device a first security policy when the mobile device is located in a first location, and implement on the mobile device a second security policy when the mobile device is located in a second location.   
     
     
         34 . The mobile device of  claim 33 , wherein the mobile device is configured to connect to a network wirelessly. 
     
     
         35 . The mobile device of  claim 33 , wherein the plurality of locations comprises a home, a work, an alternate, or a custom location. 
     
     
         36 . The mobile device of  claim 33 , wherein the processor is configured to implement on the mobile device a third security policy when the mobile device is located in a third location. 
     
     
         37 . The mobile device of  claim 33 , wherein the location of the mobile device is detected based on one or more parameters received from a network connection. 
     
     
         38 . The mobile device of  claim 37 , wherein one of the parameters is an Internet Protocol address. 
     
     
         39 . The mobile device of  claim 33 , wherein the processor is configured to continuously detect the location of the mobile device and apply an appropriate policy automatically when a location of the mobile device changes. 
     
     
         40 . The mobile device of  claim 34 , wherein the processor is further configured to:
 determine whether one or more security features have an activity status of inactive or active; and   determine the current security policy based upon the activity status of the one or more security features as well as the detected location.