Provisioning of applications deployed on client devices

• US 10,180,834 B2
• Filed: 02/29/2016
• Issued: 01/15/2019
• Est. Priority Date: 02/29/2016
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Turner, Stephen, Kelley, Scott
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Murphy, J. Brant
• Application Number:
  US15/056,243
• Publication Number:
  US 20170250977A1
• Time in Patent Office: 1,051 Days
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Disclosed are various examples for deploying applications on client devices through a management service. A client device can be enrolled with a management service. The management service can determine application settings that are associated with an application and generate an application profile for the application. The application profile can be used to deploy the application to client devices and provision the application with the appropriate application settings.

Claims

1. A computer-implemented method comprising:

obtaining, by a management service, an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application, the at least one application setting comprising a reference to a security certificate and a server address;

defining, by the management service, an application profile associated with the application based upon the at least one key-value pair;

associating, by the management service, the application profile with the application;

obtaining, by the management service, a request to deploy the application to a client device associated with a user;

initiating, by the management service, deployment of the security certificate on the client device, wherein the security certificate uniquely identifies a particular user associated with the application; and

initiating, by the management service, deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter identifying the security certificate and a parameter identifying the server address populated within an application setting from the application profile.

2. The computer-implemented method of claim 1, wherein initiating deployment of the security certificate on the client device further comprises instructing a management component executed by the client device to retrieve and install the security certificate.

3. The computer-implemented method of claim 2, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

4. The computer-implemented method of claim 1, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and remotely from the application distribution system.

5. The computer-implemented method of claim 4, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile of the user in the application distribution system.

6. The computer-implemented method of claim 1, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

8. The non-transitory computer-readable medium of claim 1, wherein the program initiates deployment of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

9. The non-transitory computer-readable medium of claim 8, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

7. A non-transitory computer-readable medium embodying a program executed by a computing device, wherein the program is configured to cause the computing device to at least:

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application, the at least one application setting comprising a reference to a security certificate and a server address;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user;

initiate deployment of a security certificate on the client device, wherein the security certificate uniquely identifies a particular user associated with the application; and

initiate deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter identifying the security certificate and a parameter identifying the server address populated within an application setting from the application profile.

10. The non-transitory computer-readable medium of claim 7, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and remotely from the application distribution system.

11. The non-transitory computer-readable medium of claim 10, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile of the user in the application distribution system.

12. The non-transitory computer-readable medium of claim 7, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

13. A system comprising:

at least one computing device; and

a management service executable by the at least one computing device, wherein the management service causes the at least one computing device to at least;

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application, the at least one application setting comprising a reference to a security certificate and a server address;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user;

initiate deployment of the security certificate on the client device, wherein the security certificate uniquely identifies a particular user associated with the application; and

initiate deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter identifying the security certificate and a parameter identifying the server address populated within an application setting from the application profile.

14. The system of claim 13, wherein the management service initiates deployment of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

15. The system of claim 13, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and the application distribution system.

16. The system of claim 15, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile in the application distribution system.

17. The system of claim 13, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.