Management of actions initiated by applications in client devices

• US 10,362,065 B2
• Filed: 12/21/2017
• Issued: 07/23/2019
• Est. Priority Date: 12/17/2014
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/850,945
• Publication Number:
  US 20180139244A1
• Time in Patent Office: 579 Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A client device identifies an action being performed using a first application in the client device. The client device identifies that the first application is not authorized to be used to perform the action. In response, the client device identifies a second application that is authorized to perform the action. The client device also facilitates the second application being used to perform the action.

Claims

1. A non-transitory computer-readable medium embodying program instructions executable in a client device, wherein the program instructions, when executed, cause the client device to at least:

identify content associated with an action being performed using a first application in the client device;

determine that the content is associated with an enterprise;

determine, in response to identifying that the content is associated with the enterprise, that the first application is not authorized to perform the action; and

in response to determining that the first application is not authorized to perform the action, facilitate a second application to perform the action by copying the content from the first application to the second application.

2. The non-transitory computer-readable medium of claim 1, wherein the program instructions, when executed, further cause the client device to at least:

prior to facilitating the second application being used to perform the action, identify that the second application is authorized to be used to perform the action.

3. The non-transitory computer-readable medium of claim 1, wherein the action is identified using a keyboard application that is provided by the enterprise.

4. The non-transitory computer-readable medium of claim 1, wherein the program instructions, when executed, further cause the client device to determine whether the first application is authorized to be used to perform the action by at least determining whether a compliance rule indicates that the first application is authorized to be used to perform the action.

5. The non-transitory computer-readable medium of claim 1, wherein the action comprises composing a message, and wherein the program instructions, when executed, further cause the client device to identify that the action is associated with the enterprise by at least identifying that an intended recipient of the message comprises an enterprise contact.

6. The non-transitory computer-readable medium of claim 1, wherein the action comprises processing a message, and wherein the program instructions, when executed, further cause the client device to identify that the action is associated with the enterprise by at least identifying that an attachment of the message comprises enterprise data.

7. The non-transitory computer-readable medium of claim 1, wherein the program instructions, when executed, further cause the client device to render a message that prompts a user to activate the second application.

8. A method, comprising:

identifying, using a client device, content being provided to a first network site using an application in the client device;

determining, using the client device, that the content is associated with an enterprise;

determining, using the client device, that the client device is not authorized to provide the content to the first network site based on the content being associated with the enterprise;

identifying, using the client device, a second network site to which the client device is authorized to provide the content; and

in response to identifying the second network site, copying, using the client device, the content from the first network site to the second network site.

9. The method of claim 8, further comprising identifying, using the client device, that the client device is authorized to provide the content to the second network site.

10. The method of claim 8,

wherein the enterprise operates a management system associated with the client device.

11. The method of claim 10, wherein identifying that the content is associated with the enterprise further comprises comparing the content to a list that comprises a plurality of words associated with the enterprise.

12. The method of claim 8, further comprising identifying that the first network site comprises a social networking site.

13. The method of claim 8, further comprising transmitting, from the client device, a notification to a management system for the client device, wherein the notification indicates that the client device is being used to provide the content to the first network site.

14. A system comprising:

a client device;

instructions executable on the client device, wherein the instructions, when executed, cause the client device to at least;

identify content associated with an action being performed using a first application in the client device;

determine that the content is associated with an enterprise;

determine, in response to identifying that the content is associated with the enterprise, that the first application is not authorized to perform the action; and

in response to determining that the first application is not authorized to perform the action, facilitate a second application to perform the action by copying the content from the first application to the second application.

15. The system of claim 14, wherein the instructions, when executed, further cause the client device to at least:

prior to facilitating the second application being used to perform the action, identify that the second application is authorized to be used to perform the action.

16. The system of claim 14, wherein the action is identified using a keyboard application that is provided by the enterprise.

17. The system of claim 14, wherein the instructions, when executed, further cause the client device to determine whether the application is authorized to be used to perform the action by at least determining whether a compliance rule indicates that the application is authorized to be used to perform the action.

18. The system of claim 14, wherein the action comprises composing a message, and wherein the instructions, when executed, further cause the client device to identify that the action is associated with the enterprise by at least identifying that an intended recipient of the message comprises an enterprise contact.

19. The system of claim 14, wherein the action comprises processing a message, and wherein the application further causes the client device to identify that the action is associated with the enterprise by at least identifying that an attachment of the message comprises enterprise data.

20. The system of claim 14, wherein the instructions, when executed, further cause the client device to render a message that prompts a user to activate the second application.