Visual privacy systems for enterprise mobility management

• US 10,455,440 B2
• Filed: 05/09/2018
• Issued: 10/22/2019
• Est. Priority Date: 02/10/2016
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Brouillette, Nicholas, Barday, Kabir
• Primary Examiner(s): Miah, Liton
• Application Number:
  US15/974,731
• Publication Number:
  US 20180262932A1
• Time in Patent Office: 531 Days
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports

Abstract

Systems herein allow a user to use their personal user device to perform functions in an enterprise environment in exchange for enrolling at a management server. The management server can provide a privacy component that allows the user to view a privacy profile summarizing data collection activities of the management server. The management server can dynamically build the privacy profile based on device profile and privacy settings stored on the management server. The privacy profile can be dynamically updated based on changes to privacy settings, and can also provide links for a user to see actual data that has been collected at the management server.

Claims

1. A system for displaying information that a management server can collect from a mobile device, comprising:

a non-transitory, computer-readable medium that contains instructions;

a processor that executes the instructions to perform stages at the mobile device, the stages comprising;

installing a privacy component relating to managing the mobile device using the management server;

receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and

based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change.

2. The system of claim 1, the stages further comprising:

receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and

receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change.

3. The system of claim 2, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect.

4. The system of claim 3, wherein the second section of data items includes at least two of application details, mobile device details, and user details.

5. The system of claim 3, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps.

6. The system of claim 3, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server.

7. The system of claim 2, wherein displaying the second information includes presenting an option to unenroll from the management server.

8. A non-transitory, computer-readable medium containing instructions executed by a processor to perform stages for displaying information that a management server can collect from a mobile device, the stages comprising:

installing a privacy component relating to managing the mobile device using the management server;

receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and

based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change.

9. The non-transitory, computer-readable medium of claim 8, the stages further comprising:

receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and

receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change.

10. The non-transitory, computer-readable medium of claim 9, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect.

11. The non-transitory, computer-readable medium of claim 10, wherein the second section of data items includes at least two of application details, mobile device details, and user details.

12. The non-transitory, computer-readable medium of claim 10, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps.

13. The non-transitory, computer-readable medium of claim 10, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server.

14. The non-transitory, computer-readable medium of claim 9, wherein displaying the second information includes presenting an option to unenroll from the management server.

15. A method for displaying information that a management server can collect from a mobile device, comprising:

installing a privacy component relating to managing the mobile device using the management server;

receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and

based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change.

16. The method of claim 15, further comprising:

receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and

receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change.

17. The method of claim 16, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect.

18. The method of claim 17, wherein the second section of data items includes at least two of application details, mobile device details, and user details.

19. The method of claim 17, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps.

20. The method of claim 17, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server.