Policy Expression and Enforcement for Handheld Devices

Published

April 1, 2003

Author(s)

Wayne Jansen, Tom T. Karygiannis, Vladimir Korolev, Serban I. Gavrila, Michaela Iorga

Abstract

The use of mobile handheld devices, such as Personal Digital Assistants (PDAs) and tablet computers, within the workplace is expanding rapidly. These devices are no longer viewed as coveted gadgets for early technology adopters, but instead have become indispensable tools that offer competitive business advantages for the mobile workforce. While providing productivity benefits, the ability of these devices to store and transmit corporate information through both wired and wireless networks poses potential risks to an organization¿s security. This paper describes a framework for managing user privileges on handheld devices. The approach is aimed at assisting enterprise security officers in administering and enforcing group and individual security policies for PDAs, and helping constrain users to comply automatically with their organization¿s security policy. Details of a proof-of-concept implementation of the framework are also provided.

Citation

NIST Interagency/Internal Report (NISTIR) - 6981

Report Number

6981

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.6981

Keywords

digital certificates, handheld devices, PDA, Personal Digital Assistant, security policy, trust management

Citation

Jansen, W. , Karygiannis, T. , Korolev, V. , Gavrila, S. and Iorga, M. (2003), Policy Expression and Enforcement for Handheld Devices, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.6981 (Accessed January 19, 2025)