METHOD FOR MANAGING A TERMINAL DEVICE

[0001] The present application is a continuation of PCT Application No. PCT/CN2006/001869, filed Jul. 27, 2006, which claims priorities to Chinese Patent Application No. 200510112683.0, filed Oct. 13, 2005 and Chinese Patent Application No. 200510135008.X, filed Dec. 23, 2005. All of these applications are incorporated by reference herein for all purposes.

[0002] The present invention relates to Open Mobile Alliance (OMA) Device Management (DM), and more particularly to a method for managing a terminal device.

[0003] Mobile terminal devices act as an important component in the whole mobile operation and service system. As functions of terminal devices become increasingly complex, the probability of software troubles in terminal devices increases greatly. In addition, as the competition among operators becomes more and more severe, how to effectively ensure customers' experience, enhance their loyalty, and maintain high QoS and low equipment maintenance cost has become a great concern for operators and terminal manufacturers.

[0004] Open Mobile Alliance Device Management (OMA DM) Specification is the technique for management, diagnostics, and maintenance of mobile terminal devices. The terminal devices are managed in an Over The Air (OTA) manner. Management operations of terminal devices include: terminal device parameter setting, firmware update, software installation and upgrade, and acquisition and handling of device fault and event information, etc. Also, OMA DM also provides a Web Services Interface (WSI) mechanism, which enables third-party software/service providers to provide customers with a variety of services through a Device Management (DM) Server, such as software download and update, firmware upgrade, parameter configuration, and device diagnostics, etc. The mobile terminal devices that may be managed by the OMA DM include mobile telephones, personal digital assistants, laptop computers, embedded devices, and onboard systems, and any other mobile terminal devices.

[0005] As communication technology develops, functions of terminal devices become more and more powerful. For example, at present, some terminal devices have a high-resolution camera, a high storage capacity, an infrared transmission interface, and a Blue Tooth transmission interface, etc. For some enterprises or organizations sensitive to technology, the application of such terminal devices makes information security more and more uncontrollable. For example, new designs are stolen by photographing stealthy, or confidential technical materials are stolen with mobile telephones by infrared transmission, etc.

[0006] Some embodiments of the present invention provide a method for managing a terminal device, to control terminal devices, so as to prevent security information in an enterprise from attacks of the terminal devices and thereby enhance security and confidentiality of enterprise information.

[0007] Some embodiments of the present invention provide a method for managing a terminal device including:

[0008] setting management commands;

[0009] sending the management commands to a terminal device; and

[0010] obtaining executed results of the management commands from the terminal device.

[0011] Preferably, the method further includes:

[0012] setting triggering conditions; and

[0013] executing the management commands if the triggering conditions are met.

[0014] Preferably, the method further includes: sending the triggering conditions to the terminal device.

[0015] Preferably, the management commands and the triggering conditions are sent to the terminal device in a form of device management tree.

[0016] Preferably, the method further includes:

[0017] monitoring that the triggering conditions are met; and

[0018] sending an execution instruction to the terminal device;

[0019] wherein the process of executing the management commands comprises: executing the management commands in response to the execution instruction.

[0020] Preferably, the process of obtaining executed results of the management commands from the terminal device is implemented in the following mode:

[0021] the terminal device reports the executed results of the management commands to a Device Management Server (DMS); or

[0022] a Device Management Server (DMS) retrieves the executed results of the management commands from the terminal device.

[0023] Preferably, the process of sending the management commands to a terminal device comprises:

[0024] authenticating the management commands, determining the management commands meet a device management protocol upon a successful authentication, and sending the management commands to the terminal device; or

[0025] authenticating the management commands, determining the management commands do not meet a device management protocol upon a successful authentication, translating the management commands into commands meeting a device management protocol, and sending the translated management commands to the terminal device.

[0026] Preferably, the management commands comprise:

[0027] to record use of additional functions of the terminal device; or

[0028] to disable/enable additional functions of the terminal device.

[0029] Preferably, the additional functions of the terminal device comprise at least one of:

[0030] camera function of the terminal device with a camera;

[0031] short-range wireless communication function of the terminal device with an infrared interface, and

[0032] short-range wireless communication function of the terminal device with a Blue Tooth interface.

[0033] Preferably, the triggering conditions include:

[0034] a time-based triggering condition, for triggering execution of the management commands by time; and/or

[0035] a location-based triggering condition, for triggering execution of the management commands by current location of the terminal device.

[0036] Some other embodiments of the present invention provide a method for managing a terminal device, including:

[0037] setting management commands;

[0038] configuring a terminal device with the management commands; and

[0039] obtaining executed results of the management commands from the terminal device.

[0040] Preferably, the process of configuring a terminal device with the management commands is implemented by writing the management commands into a smart card installed in the terminal device.

[0041] Preferably, the process of writing the management commands into a smart card configured in the terminal device comprises: writing the management commands into the smart card installed in the terminal device in a form of device management tree.

[0042] Preferably, the method further includes:

[0043] setting triggering conditions; and

[0044] executing the management commands if the triggering conditions are met.

[0045] Preferably, the method further includes: writing the triggering conditions into a smart card installed in the terminal device.

[0046] Preferably, the process of writing the triggering conditions into a smart card installed in the terminal device comprises: writing the triggering conditions into the smart card installed in the terminal device in a device management tree.

[0047] Preferably, the process of obtaining executed results of the management commands from the terminal device is implemented in the following mode:

[0048] the terminal device reports the executed results of the management commands to a Device Management Server (DMS); or

[0049] a Device Management Server (DMS) retrieves the executed results of the management commands from the terminal device.

[0050] Preferably, the method further includes: updating and maintaining the management commands configured in the terminal device.

[0051] Preferably, the management commands include:

[0052] to record use of additional functions of the terminal device; or

[0053] to disable/enable additional functions of the terminal device.

[0054] Preferably, the additional functions of the terminal device comprise at least one of:

[0055] camera function of the terminal device with a camera;

[0056] short-range wireless communication function of the terminal device with an infrared interface, and

[0057] short-range wireless communication function of the terminal device with a Blue Tooth interface.

[0058] Preferably, the triggering conditions include:

[0059] a time-based triggering condition, for triggering execution of the management commands by time; and/or

[0060] a location-based triggering condition, for triggering execution of the management commands by current location of the terminal device.

[0061] According to the embodiments of the present invention:

[0062] Management commands are set at a management side. The management commands are sent to managed terminal devices through a DMS or the managed terminal devices are configured with the management commands. The managed terminal devices execute the management commands, so that the management side can manage the terminal devices. Further, the managed terminal devices may report executed results of the management commands to the management side through the DMS, so that an administrator can monitor states of the managed terminal devices, so as to control the terminal devices.

[0063] If the technical solution according to embodiments of the present invention is used in an enterprise to manage the use of user terminal devices in the enterprise by a management side of the enterprise. Therefore, threats of communication terminal devices of employees to security information can be avoided effectively, and the security of enterprise information can be enhanced.

[0064] FIG. 1 is a flow diagram of a method for managing a terminal device according to a first embodiment of the present invention;

[0065] FIG. 2 is a flow diagram of a method for managing a terminal device according to a second embodiment of the present invention;

[0066] FIG. 3 is a structural diagram of an exemplary system for management and control of user terminal devices in an enterprise, which is implemented with the method according to an embodiment of the present invention;

[0067] FIG. 4 is a flow diagram of registration of users in an enterprise on the management server in the enterprise so as to determine target operation group user information according to an embodiment of the present invention, based on the system as shown in FIG. 3;

[0068] FIG. 5 is a detailed flow diagram of registration of users in an enterprise on the management server in the enterprise so as to determine target operation group user information according to an embodiment of the present invention, based on FIG. 4;

[0069] FIG. 6 is a detailed flow diagram of maintenance of target operation group user information according to an embodiment of the present invention;

[0070] FIG. 7 is a flow diagram in which an enterprise manages use of user terminal devices in an enterprise with the method according to the first embodiment of the present invention;

[0071] FIG. 8 is a flow diagram in which an enterprise manages use of user terminal devices in an enterprise with the method according to the second embodiment of the present invention; and

[0072] FIG. 9 is a flow diagram in which an enterprise maintains and updates management information in smart cards installed in user terminal devices according to an embodiment of the present invention.

[0073] Based on the OMA DM Specification, embodiments of the present invention provide a mechanism by utilizing terminal device management capability and Web Service Interface (such as WSI) of Device Management Server (DMS), to enable enterprises or organizations to manage use of terminal devices of their employees, so as to ensure security of enterprise information within a controllable range.

[0074] Hereinafter embodiments of the present invention are described in detail with reference to the attached drawings.

[0075] FIG. 1 is a flow diagram of a method for managing a terminal device according to a first embodiment of the present invention.

[0076] In process S10, a management side sets management commands. The management commands may be configured to record use of additional communication functions of a terminal device to be managed or disable/enable additional communication functions of a terminal device to be managed, etc. In consideration of current development of terminal devices, the additional communication functions of terminal device mainly include, but not limited to: camera function of the terminal device with a camera, and/or short-range wireless communication function of the terminal device with an infrared interface, and/or short-range wireless communication function of the terminal device with a Blue Tooth interface.

[0077] In process S20, the management side sends the management commands to the terminal device to be managed via the DMS. The management side may communicate with the DMS via an external interface (such as WSI interface) of the DMS, i.e., the management side sends the management commands to the DMS and sends information of the terminal device to be managed to the DMS. The DMS sends the management commands to the terminal device in accordance with the information of the terminal device to be managed by the management side.

[0078] The DMS authenticates the management commands, and determines whether the management commands meet DM protocol after a successful authentication. If yes, the DMS sends the management commands to the managed terminal device; otherwise the DMS translates the management commands into DM commands meeting the DM protocol, and sends translated management commands to the managed terminal device.

[0079] In process S30, the managed terminal device executes the management commands.

[0080] When the method according to an embodiment of the present invention is applied, the management commands need to be triggered and executed when appropriate in some cases, instead of always executed; for example, in the case that an enterprise manages and controls the use of terminal devices of employees in the enterprise, it is only necessary to manage the terminal devices of the employees during worktime or when the employees are in offices, instead of in other time or at other places.

[0081] In view of the above situation, the management side shall set triggering conditions for triggering execution of the management commands. Accordingly, the method according to an embodiment of the present invention may be implemented in any of the following three examples:

[0082] A management side sets management commands and triggering conditions for triggering execution of the management commands respectively;

[0083] The management side monitors whether the triggering conditions are met;

[0084] If monitoring that the triggering conditions are met, the management side sends the management commands to a managed terminal device via the DMS;

[0085] Upon receiving the management commands, the managed terminal device executes the management commands immediately.

[0086] A management side sets management commands and triggering conditions for triggering execution of the management commands respectively;

[0087] The management side sends the management commands and the triggering conditions for triggering execution of the management commands to a managed terminal device via the DMS;

[0088] The managed terminal device stores the management commands and the triggering conditions for triggering execution of the management commands from the DMS. The managed terminal device preferably utilizes a device management tree (DM tree) to store the management commands and the triggering conditions for triggering execution of the management commands (i.e., the management commands and the triggering conditions are stored in an OMA DM tree in the managed terminal device); in this way, nodes of the DM tree of triggering conditions can be identified and manipulated by an OMA DM Scheduling enabler, and the managed terminal device selects a specific sub-tree or node of management commands in the DM tree to execute the management commands when the triggering conditions are met.

[0089] The managed terminal device monitors whether the received triggering conditions are met; and

[0090] If the triggering conditions are met, the managed terminal device executes the management commands immediately.

[0091] A management side sets management commands and triggering conditions for triggering execution of the management commands respectively;

[0092] The management side sends the management commands to a managed terminal device via the DMS;

[0093] The managed terminal device stores the management commands from the management side; and the managed terminal device preferably utilizes a DM tree to store the management commands;

[0094] The management side monitors whether the triggering conditions are met;

[0095] If the triggering conditions are met, the management side sends an execution instruction to the managed terminal device via the DMS;

[0096] Upon receiving the execution instruction, the managed terminal device executes the management commands stored locally (i.e., upon receiving the execution instruction, the managed terminal device selects a specific sub-tree or node of management commands in the DM tree to execute).

[0097] The triggering conditions for triggering execution of the management commands set by the management side may include, but not limited to:

[0098] A time-based triggering condition configured to trigger execution of the management commands by time, i.e., the management commands shall be executed within a specified time period but may not be executed within other time periods;

[0099] A location-based triggering condition configured to trigger execution of the management commands by current location of the managed terminal device, i.e., the management commands shall be executed if the managed terminal device is in a specified location but not executed if the managed terminal device is not in the specified location. Current location of the managed terminal device may be detected with a location function.

[0100] To facilitate the management side to obtain the information on use of the managed terminal device, the managed terminal device shall feed back executed results of the management commands to the management side. The managed terminal device may feed back the executed results to the management side in any of the following four examples:

[0101] EXAMPLE 1: the managed terminal device reports the executed results of the management commands to the DMS periodically; the DMS reports the executed results to the management side in turn.

[0102] EXAMPLE 2: the managed terminal device reports the executed results of the management commands to the DMS periodically; the management side retrieves the executed results from the DMS periodically.

[0103] EXAMPLE 3: the DMS retrieves the executed results of management commands from the managed terminal device periodically, and reports the executed results to the management side periodically in turn.

[0104] EXAMPLE 4: the DMS retrieves the executed results of management commands from the managed terminal device periodically; the management side retrieves the executed results from the DMS periodically.

[0105] The terminal devices under a management of the management side may be updated at any time (e.g., new terminal devices are added, some existing managed terminal devices are removed, etc.). When information of any managed terminal device changes, the management side shall update the information of the managed terminal device in a local database in synchronization, so as to improve pertinency and accuracy of the management.

[0106] FIG. 2 is a flow diagram of a method for managing a terminal device according to a second embodiment of the present invention. The major implementation procedures are described as follows.

[0107] In process S100, a management side sets management commands. The management commands have the same meaning as described above, and therefore will not be described further here.

[0108] In process S200, the management side configures a terminal device to be managed with the management commands. The management side can configure the managed terminal device with the management commands by writing the management commands into a smart card installed in and identified by the managed terminal device. The management side preferably utilizes a DM tree to write the management commands into the smart card installed in and identified by the managed terminal device. Also, the management side can subsequently maintain and update the management commands configured in the managed terminal device through the DMS.

[0109] In process S300, the managed terminal device executes the management commands configured therein, i.e., the managed terminal device can select a specific sub-tree or node of management commands in the DM tree stored in the local smart card to execute.

[0110] Similarly, based on the above technical solution, the management side may set triggering conditions for triggering execution of the management commands. Accordingly, the method according to an embodiment of the present invention can be implemented in either of the following two examples:

[0111] A management side sets management commands and triggering conditions for triggering execution of the management commands.

[0112] The management side configures a terminal device to be managed with the management commands and the triggering conditions for triggering execution of the management commands respectively. The management side can configure the managed terminal device with the management commands and the triggering conditions respectively by writing the management commands and the triggering conditions into a smart card installed in and identified by the managed terminal device respectively. The management side preferably utilizes a DM tree to write the management commands and the triggering conditions into the smart card installed in and identified by the managed terminal device respectively.

[0113] The managed terminal device monitors whether the triggering conditions configured therein are met. If the triggering conditions are met, the managed terminal device executes the management commands configured therein immediately, i.e., nodes of the DM tree of triggering conditions can be identified and manipulated by an OMA DM Scheduling enabler. The managed terminal device selects a specific sub-tree or node of management commands in the DM tree stored in the local smart card to execute, when it detects the triggering conditions are met.

[0114] A management side sets management commands and triggering conditions for triggering execution of the management commands.

[0115] The management side configures a managed terminal device with the management commands via a smart card, i.e., the management side utilizes a DM tree to write the management commands into the smart card installed in and identified by the managed terminal device.

[0116] The management side monitors whether the triggering conditions are met; and

[0117] If the triggering conditions are met, the management side sends an execution instruction to the managed terminal device through the DMS.

[0118] Upon receiving the execution instruction, the managed terminal device executes the management commands configured therein, i.e., upon receiving the execution instruction, the managed terminal device selects a specific sub-tree or node of management commands in the DM tree stored in the local smart card to execute.

[0119] The triggering conditions are described as above, which will not be described here further.

[0120] Similarly, to facilitate the management side to obtain the information on use of the managed terminal device, the managed terminal device shall feed back executed results of the management commands to the management side. The managed terminal device may feed back the executed results to the management side in any of the above four examples. The specific implementation procedures will not be described further.

[0121] Hereinafter the implementing procedures of two methods for managing terminal devices according to embodiments of the present invention are described in an example of managing the use of terminal devices in an enterprise.

[0122] FIG. 3 is a structural diagram of an exemplary system for management and control of terminal devices in an enterprise, which is implemented with the method according to an embodiment of the present invention. A WSI interface shown in FIG. 3 is an interface provided by the DMS to connect an external system. The external system may be a secondary DM Server, a Service Provider (SP) server, a customer service support system, a diagnostics support system, or a Portal, etc. In this embodiment, a management server in the enterprise can be connected to the operator's DMS via the WSI interface. A network between the DMS and the terminal devices in the enterprise may be, but not limited to, a mobile communication network.

[0123] As shown in FIG. 3, the major working procedures of the embodiment are as follows: an administrator of the enterprise submits the management commands, the triggering conditions for triggering execution of the management commands, and information of a target user group to be managed to the DMS at the communication network operator (hereinafter referred to as “operator”) side through the management server in the enterprise. The DMS at the operator side authenticates the management server in the enterprise, and after a successful authentication sends the management commands and the triggering conditions for triggering execution of the management commands to each terminal device in the enterprise in accordance with IDs of users in the target user group. When the triggering conditions are met, each terminal device in the enterprise is triggered, executes the management commands, and reports the executed results of the management commands to the management server in the enterprise through the DMS in accordance with a predetermined report policy.

[0124] FIG. 4 is a flow diagram of registration of users in an enterprise on the management server in the enterprise so as to determine information of target operation group users according to an embodiment of the present invention, based on the system as shown in FIG. 3. For example, when the enterprise expects to control some functions of terminal devices of the employees during work time, the enterprise shall register itself with the DMS at the operator side first, and request the employees to register with the management server in the enterprise.

[0125] As shown in FIG. 4, (1) the administrator in the enterprise maintains the management server in the enterprise, and the employees in the enterprise register themselves with the management server. The content of registration mainly includes user ID, password, user name, and user terminal number, etc. The registration process may involve bidirectional identity authentication procedures; (2) before the management server in the enterprise registers with the DMS at the operator side, bidirectional authentication process may be performed. After a successful authentication, the management server registers with the DMS at the operator side. The content of registration includes user name, password, target operation group, and management authority level, etc.; (3) after the DMS at the operator side accepting the registration of the management server in the enterprise, the DMS at the operator side notifies users in the enterprise to confirm the registration, in order to obtain the permission for management of the target operation group users. The confirmation procedure may be accomplished by short message, telephone, or any other means.

[0126] FIG. 5 is a detailed flow diagram of registration of users in an enterprise on the management server in the enterprise so as to determine target operation group user information according to an embodiment of the present invention, based on FIG. 4. The specific registration procedures are as follows.

[0127] a1. The employees in the enterprise register themselves with the administrator of the enterprise (or the terminal devices in the enterprise register themselves with the management server in the enterprise via network). The content of registration mainly includes user ID, password, user name, and user terminal number, etc.

[0128] a2. The administrator of the enterprise (or the management server in the enterprise) acquires the registration information of the employees.

[0129] a3. The management server in the enterprise sends an identity authentication request to the DMS at the operator side.

[0130] a4. The DMS at the operator side performs identity authentication on the enterprise.

[0131] a5. After a successful identity authentication, the DMS returns an authentication success message to the management server in the enterprise.

[0132] a6. The management server in the enterprise sends a target operation group and operation authorities register request to the DMS.

[0133] a7. The DMS returns an initial registration success message (i.e., the registration has not been confirmed by target operation group users) to the management server in the enterprise.

[0134] a8. The DMS sends a notification message indicating the enterprise's operation authorities for the terminal devices to the terminal devices in the enterprise, in accordance with information of the target operation group users, and waits for the terminal devices in the enterprise to confirm.

[0135] a9. Each of the terminal devices in the enterprise returns a confirmation message to confirm the registration. The DMS processes the confirmation message. If the terminal device in the enterprise returns a rejection message, the DMS will delete the user information from the target operation group users.

[0136] a10. The DMS feeds back the information of the target operation group users to the management server in the enterprise.

[0137] The administrator of the enterprise maintains information of the target operation group users in the management server in the enterprise, so that the management server in the enterprise can maintain and update the information of the target operation group users in the DMS via the WSI interface or by logging in Portal of the DMS, or by other means, whenever the information of the target operation group users changes.

[0138] FIG. 6 is a detailed flow diagram of maintenance of target operation group user information according to an embodiment of the present invention. The specific maintenance procedures are as follows.

[0139] b1. A user in an enterprise submits a change request message to an administrator of the enterprise (or a terminal device submits a change request message to a management server in an enterprise via intranet). The change may be: to add a new target operation user, to delete an existing target operation user, or to modify information of an existing target operation user, etc.

[0140] b2. The management server in the enterprise sends an identity authentication request to a DMS at an operator side.

[0141] b3. The DMS performs identity authentication on the enterprise.

[0142] b4. After a successful identity authentication, the DMS returns an authentication success message to the management server in the enterprise.

[0143] b5. The management server in the enterprise sends a target operation group change request to the DMS.

[0144] b6. The DMS returns an initial change success message.

[0145] b7. The DMS sends a notification message indicating the enterprise's operation authority to the newly-added target operation terminal device, and waits for the newly-added target operation user to confirm.

[0146] b8. The newly-added target operation terminal device, returns a confirmation message.

[0147] b9. The DMS processes the confirmation message. If the newly-added target operation user returns a reject message, the DMS will not add the newly-added target operation user into the target operation group.

[0148] b10. The DMS feeds back information of the target operation group users to the management server in the enterprise.

[0149] If the newly-added target operation terminal device in the enterprise does not send any response, the DMS will proceed in accordance with a default policy.

[0150] For an operation for deleting a target operation user, the DMS sends the notification message to the deleted target operation user in the above process b7, while the subsequent processes b8, b9 and b10 are not performed.

[0151] In addition, the DMS shall send a confirm message to the newly-added target operation user terminal device, or sends a notification message to the target operation user terminal device deleted by the enterprise.

[0152] The management of terminal devices in the enterprise includes, but not limited to: recording the use of additional functions of terminal devices and reporting the recorded results to the enterprise, or controlling use of some additional functions of the terminal devices in the enterprise (e.g., preventing the users from using the camera of their terminal devices to take photographs or communicating by using the infrared interface or Blue Tooth interface communicate during work time, etc), or performing parameter setting on the terminal devices in the enterprise, etc.

[0153] Hereinafter the specific implementing procedures of the two methods according to embodiments of the present invention in an application of management and control of terminal devices in an enterprise are described.

[0154] Method 1: management and control is accomplished by sending management commands through the DMS:

[0155] With the terminal management capability and an external WSI interface of the DMS, the management server in the enterprise accesses the DMS, so as to send management commands to the terminal devices to be managed in the enterprise through the DMS and thereby implement management and control of the terminal devices. The management commands may be: to record the use of additional functions, to disable/enable some additional functions, to query about current states of the terminal devices, or to set some parameters (e.g., tone), etc.

[0156] In addition, the enterprise may install and configure some management function software in the terminal devices in the enterprise through the DMS at the operator side, to implement management and control of the terminal devices. The management function software (e.g., logging software or function control software, etc.) can run in the user terminal devices in the enterprise, to control and manage the use of the terminal devices.

[0157] The enterprise has to apply to the DMS for authority for content and means of management of the user terminal devices in the enterprise. The DMS requests the managed terminal devices to confirm the authority. In addition, during the entire process of sending the management commands or installing and configuring the management function software, the DMS performs identity authentication on the enterprise.

[0158] FIG. 7 is a flow diagram in which an enterprise manages use of user terminal devices in an enterprise with the method according to the first embodiment of the present invention. The specific processing procedures are as follows.

[0159] c1. An enterprise logs in a DMS at the operator side through a management server.

[0160] c2. The DMS at the operator side performs identity authentication on the enterprise.

[0161] c3. After a successful identity authentication, the DMS returns a login success message to the management server.

[0162] c4. The management server in the enterprise submits management commands and information of target operation group users to the DMS at the operator side.

[0163] c5. The DMS at the operator side authenticates authorities of the management commands and the target operation group from the enterprise.

[0164] c6. The DMS at the operator side sends the management commands to or installs management function software in the target user terminal devices corresponding to the information of target operation group users.

[0165] c7. Each of the user terminal devices returns an installation/configuration success message to the DMS if the management function software is installed/configured successfully;

[0166] c8. The DMS at the operator side acquires executed results of the management commands from the user terminal devices.

[0167] c9. The DMS at the operator side returns the executed results to the management server in the enterprise.

[0168] c10. The management function software in the user terminal devices launches the management function to manage additional functions of the terminal devices if the triggering conditions are met.

[0169] c11. If a reported condition is met, each of the user terminal devices reports executed result data of the management to the DMS.

[0170] c12. The DMS at the operator side reports the executed result data to the management server in the enterprise.

[0171] The above executed result data may be retrieved by the DMS actively from the terminal devices or reported by the terminal devices to the DMS actively, and is managed by the DMS centrally. The executed result data acquired by the DMS may be transferred to the management server in the enterprise by the DMS in accordance with a certain policy (e.g., at a certain time interval), or retrieved by the management server in the enterprise from the DMS via the WSI interface.

[0172] Method 2: management and control is accomplished by means of smart card and DMS.

[0173] The enterprise customizes a type of identifiable smart cards for terminal devices in the enterprise, and writes the management function software (e.g., logging software or function control software, etc.), enterprise identity authentication information, and triggering condition for triggering execution of the management function software into the smart cards, respectively. The enterprise may write each management function software and the triggering condition corresponding to the management function software into the smart cards in a form of DM tree, and distributes the smart cards to the employees in the enterprise.

[0174] Furthermore, the management server in the enterprise may perform maintenance and data update on the smart cards installed in the user terminal devices in the enterprise through the DMS at the operator side. The DMS will perform identity authentication on the enterprise by using the authentication information stored in the smart cards before the enterprise maintains the smart cards installed in the terminal devices of the employees through the DMS. The update and maintenance of the smart cards installed in the user terminal devices mainly includes update of the management function software, download of new management function software, removal of old management function software, and sending of new triggering conditions, etc.

[0175] When the smart card is inserted into a user terminal device in the enterprise, a DM agent in the terminal device will identify and execute the management commands written in the smart card. The management commands in the smart card may be management commands existing originally in the card or management commands sent from the enterprise through the DMS. For example, if the triggering condition is met (e.g., it is during work time from 08:00 to 18:00) after the logging software is installed or runs in a terminal device, the recording function corresponding to the above time under the corresponding sub-tree or node of the DM tree in the smart card will be triggered and executed automatically to record the use of the terminal device in the enterprise. If the terminal device determines that the reported condition is met (e.g., when illegal use of a camera is found), it will report to the management server in the enterprise through the DMS at the operator side automatically.

[0176] The executed result data of the management commands executed in the user terminal devices in the enterprise may be retrieved by the DMS actively or reported by the terminal devices to the DMS actively, and is managed by the DMS centrally. The executed result data acquired by the DMS may be transferred to the management server in the enterprise by the DMS in accordance with a certain policy (e.g., at a certain time interval), or retrieved by the management server in the enterprise from the DMS via the WSI interface.

[0177] FIG. 8 is a flow diagram in which an enterprise manages use of user terminal devices in an enterprise with the method according to the second embodiment of the present invention. The specific processing procedures are as follows.

[0178] d1. An administrator of an enterprise manipulates a management server in the enterprise to create smart cards for the enterprise.

[0179] d2. The management server in the enterprise makes enterprise management application.

[0180] d3. The management server in the enterprise copies the enterprise management application into the smart cards.

[0181] d4. The administrator of the enterprise distributes the smart cards to users in the enterprise.

[0182] d5. The users in the enterprise insert the smart cards into their terminal devices.

[0183] d6. The user terminal devices in the enterprise execute the enterprise management application in the smart cards automatically in accordance with triggering conditions.

[0184] d7. If a report condition is met, the user terminal devices in the enterprise report executed result data to the DMS at the operator side in accordance with a preset report policy automatically.

[0185] d8. The DMS at the operator side reports the executed result data to the management server in the enterprise.

[0186] FIG. 9 is a flow diagram in which an enterprise maintains and updates management information in smart cards installed in user terminal devices according to an embodiment of the present invention. The specific processing procedures are as follows.

[0187] e1. An administrator of an enterprise submits a maintenance command to a management server in the enterprise. The maintenance command may be: delete an existing enterprise management application, update the existing enterprise management application, send other enterprise management commands to smart cards, or update triggering conditions in smart cards, etc.

[0188] e2. The management server in the enterprise creates an operating command and information of target operation group in accordance with the maintenance command submitted by the administrator of an enterprise.

[0189] e3. The management server in the enterprise submits an operating command request and information of target operation group users to the DMS at the operator side.

[0190] e4. The DMS at the operator side authenticates the operating command request and checks the information of target operation group users submitted from the management server in the enterprise.

[0191] e5. The DMS sends the operating command to the smart cards installed in the user terminal devices to update the enterprise management application in the smart cards correspondingly, in accordance with the information of target operation group users.

[0192] e6. The terminal devices perform identity authentication on the enterprise in accordance with the authentication information stored in the smart cards.

[0193] e7. The DM agents in the user terminal devices trigger the operating command sent from the enterprise to update the enterprise management application in the smart cards.

[0194] In Method 1 and Method 2 according to the embodiments, the implementations of the interface provided by the DMS include, but not limited to: a message interface (TCP/IP message interface, HTTP message interface, XML message interface, or network protocol message interface, etc.), a file interface, and an API interface (the API can be invoked remotely by means of CORBA, Web Service (SOAP), RMI/IIOP, or DCOM, etc., besides local invocation).

[0195] The management commands are executed under certain triggering conditions. The management of the terminal devices is incomplete. The incompleteness means: the management and control is limited by the prior condition instead of having complete control right unconditionally. For example, the control of camera function on mobile telephones of the employees in an enterprise may be valid only during work time but invalid in other times.

[0196] The triggering conditions for triggering execution of management commands include, but not limited to: a location-based triggering condition and a time-based triggering condition. The location-based triggering condition can be implemented with the location function; for example, a suppression of camera function of the terminal devices shall be triggered only during work time. In this case, there are two triggering conditions: a time-based triggering condition (work time) and a location-based triggering condition (office area).

[0197] The triggering condition can be configured to the management function software installed in the terminal devices or sent as an element in a management tree to the terminal devices through the DMS. When the triggering conditions are met, the terminal device can request for management commands to the management server in the enterprise or launch a management function corresponding to the management commands automatically and report current state of the terminal device to the management server in the enterprise.

[0198] When expecting to change the triggering conditions, the enterprise may update the existing triggering conditions configured in the terminal devices or resend trigger conditions as an element in a management tree through the DMS.

[0199] Hereinafter a detailed example is described:

[0200] An enterprise (a group) wants to suppress the camera function of mobile telephones of its employees (terminal users) only during work time, in order to prevent leakage of information of new products.

[0201] For this, the enterprise informs all employees to register with the management server in the enterprise through a Portal of the enterprise with the following registration command:

[0202] RegisterUser (id, name, passwd, phone_number, phone_type).

[0203] After the registration, the enterprise registers with the DMS at the operator side to request for management authorities for the terminal devices with the following request command:

[0204] ApplyService (op_type, tagetset[ ], op_right).

[0205] To protect lawful rights and interests of the terminal devices in the enterprise, the DMS at the operator side sends a short message to each of the mobile telephone users to describe the case and request the user to confirm by returning a short message (e.g., “88” indicates acceptance, while “00” indicates rejection). If a user doesn't respond to the short message within a specified period, it is deemed that the user accepts by default. The DMS at the operator side acquires information of the mobile telephone users accepting or rejecting management respectively, corrects the information of target operation group users registered by the enterprise on the basis of the acquired information, and returns the information fed back from the users to the management server in the enterprise.

[0206] The enterprise makes a smart card for each of the employees, creates an enterprise management application covering camera function logging software, enterprise identity authentication information, and triggering condition for triggering execution of the logging software, and writes the enterprise management application into the smart cards in a form of a DM tree.

[0207] The employees insert the smart cards into their mobile telephones and power on the mobile telephones. The DM agents in the mobile telephones will identify the smart cards automatically and launch the enterprise management application in the smart cards.

[0208] Once camera function logging software in smart card of an employee's mobile telephone detects the employee is using the camera function illegally in accordance with the triggering condition, it will report the recorded result to the DMS at the operator side automatically with the following report command:

<Alert>
<CmdID>2</CmdID>
<Data>1226</Data> <-- Generic Alert -->
<Item>
<Source><LocURI>./Root/ViolationInfo</LocURI></Source>
<Meta>
<Type>org.openmobilealliance.dm.violationinfo.userrequest</Type>
<Format>chr</Format>
</Meta>
<Data>
<CDATA>...</CDATA> <-- Upload data -->
</Data>
</Item>
</Alert>

[0209] The DMS at the operator side reports the received recorded result to the management server in the enterprise with the following report command:

[0210] SendViolationInfo (phone_IMSI, time, info).

[0211] It is apparent that those skilled in the art can make various variations and modifications to the present invention without departing from the scope of the present invention. If these modifications and variations to the present invention fall into the scope defined by the claims or the scope of any equivalent technique, the present invention is intended to cover these modifications and variations.