Abstract: A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator, services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked.

Abstract: Some aspects of what is described here relate to managing the use of network resources on a mobile device. User input received at the device indicates whether to allow an application associated with a first perimeter on the device to access a network resource associated with a second perimeter on the device. For example, in some instances user input may indicate whether to allow data from applications associated with a personal perimeter on the device to be transmitted over an enterprise communication system. When outbound data associated with the first perimeter are received, the device determines, according to the indication from the user input, whether to route the outbound data to the network resource associated with the second perimeter.

Abstract: Methods and devices for implementing security policies on a wireless device. The wireless device may include a non-volatile memory comprising a security type hard-coded in the non-volatile memory. Based on the security type, it may be determined whether a received security policy governing behavior of one or more resources designated as personal is applicable to the one or more resources designated as personal. If the security type is determined to indicate that the received security policy is not applicable to the one or more resources designated as personal, the security policy may not be applied to the one or more resources designated as personal.

Abstract: A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator, services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked.

Abstract: In one illustrative example, a wireless device receives a communication policy from a private network. The communication policy includes allowable service provider identifiers (e.g. domain names, realms) corresponding to allowable service providers. The wireless device stores these identifiers in its memory. When roaming, the wireless device encounters a wireless network (“hotspot”) and receives via the wireless network one or more reachable service provider identifiers corresponding to one or more reachable service providers. In a work mode of operation, the wireless device allows a connection to the wireless network based on a match between one of the allowable and reachable service provider identifiers, but otherwise disallows the connection. The communication policy may additionally or alternatively include device types for P2P networks, and/or allowable private network identifiers (e.g. ESSIDs), and/or allowable hotspot aggregator service identifiers or names, for use in the work mode.

Abstract: A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked.

Abstract: In one illustrative example, a wireless device receives a communication policy from a private network. The communication policy includes allowable service provider identifiers (e.g. domain names, realms) corresponding to allowable service providers. The wireless device stores these identifiers in its memory. When roaming, the wireless device encounters a wireless network (“hotspot”) and receives via the wireless network one or more reachable service provider identifiers corresponding to one or more reachable service providers. In a work mode of operation, the wireless device allows a connection to the wireless network based on a match between one of the allowable and reachable service provider identifiers, but otherwise disallows the connection. The communication policy may additionally or alternatively include device types for PP networks, and/or allowable private network identifiers (e.g. ESSIDs), and/or allowable hotspot aggregator service identifiers or names, for use in the work mode.

Abstract: Methods and devices for implementing security policies on a wireless device. The wireless device may include a non-volatile memory comprising a security type hard-coded in the non-volatile memory. Based on the security type, it may be determined whether a received security policy governing behavior of one or more resources designated as personal is applicable to the one or more resources designated as personal. If the security type is determined to indicate that the received security policy is not applicable to the one or more resources designated as personal, the security policy may not be applied to the one or more resources designated as personal.

Abstract: Some aspects of what is described here relate to managing the use of network resources on a mobile device. User input received at the device indicates whether to allow an application associated with a first perimeter on the device to access a network resource associated with a second perimeter on the device. For example, in some instances user input may indicate whether to allow data from applications associated with a personal perimeter on the device to be transmitted over an enterprise communication system. When outbound data associated with the first perimeter are received, the device determines, according to the indication from the user input, whether to route the outbound data to the network resource associated with the second perimeter.

Abstract: The disclosure recites a system and method for selecting a client device for a server device managing communications for a wireless network. The method comprises: identifying a set of wireless devices that are communicating in the network; and identifying a set of client of devices in the set of wireless devices to communicate with the network through the server device by evaluating members in the set wireless for their communication characteristics for the network.

Abstract: A communication device is configured to store one or more aggregator service application modules for use in accessing one or more different aggregator services. Each aggregator service offers access through a plurality of offered wireless networks identified by a plurality of offered wireless network identifiers. The communication device maintains a prioritized list of profiles which include one or more aggregator service profiles associated with the one or more aggregator services. A scanning operation is performed for identifying one or more available wireless networks in a geographic area of the device, for producing a scan list of one or more available wireless network identifiers corresponding to the one or more available wireless networks. One of the aggregator service profiles is selected from the prioritized list, causing one of the aggregator service application modules corresponding to the selected profile to be invoked.