Provisioning of applications deployed on client devices

• US 10,592,226 B2
• Filed: 01/02/2019
• Issued: 03/17/2020
• Est. Priority Date: 02/29/2016
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Turner, Stephen, Kelley, Scott
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Murphy, J. Brant
• Application Number:
  US16/237,916
• Publication Number:
  US 20190138285A1
• Time in Patent Office: 440 Days
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Disclosed are various examples for deploying applications on client devices through a management service. A client device can be enrolled with a management service. The management service can determine application settings that are associated with an application and generate an application profile for the application. The application profile can be used to deploy the application to client devices and provision the application with the appropriate application settings.

Claims

1. A computer-implemented method comprising:

obtaining, by a management service, an application from an application distribution system, the application associated with at least one key-value pair identifying at least one configuration parameter of the application;

defining, by the management service, an application profile associated with the application based upon the at least one key-value pair;

associating, by the management service, the application profile with the application;

obtaining, by the management service, a request to deploy the application to a client device associated with a user;

identifying, by the management service, a portion of an application manifest associated with the application that corresponds to respective application settings associated with the application; and

embedding, by the management service, the at least one configuration parameter into the portion of the application manifest that corresponds to the respective application settings associated with the application; and

initiating, by the management service, deployment of the application to the client device, wherein the application is deployed with the application manifest containing the at least one configuration parameter.

2. The method of claim 1, wherein the at least one configuration parameter comprises at least one of:

a username, a reference to a security certificate, or a server address.

3. The computer-implemented method of claim 2, further comprising initiating deployment of the security certificate on the client device further comprises instructing a management component executed by the client device to retrieve and install the security certificate.

4. The computer-implemented method of claim 3, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

5. The computer-implemented method of claim 1, wherein deployment of the application is initiated by a management service that is executed remotely from the client device.

6. The computer-implemented method of claim 1, wherein the user is associated with a user profile that is separate from a respective user profile of the user in the application distribution system.

7. The computer-implemented method of claim 1, wherein the application is deployed on a particular workspace of the client device that is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

8. A non-transitory computer-readable medium embodying a program executed by a computing device, wherein the program is configured to cause the computing device to at least:

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one configuration parameter of the application;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user;

identify a portion of an application manifest associated with the application that corresponds to respective application settings associated with the application;

embed the at least one configuration parameter into the portion of the application manifest that corresponds to the respective application settings associated with the application; and

initiate deployment of the application to the client device, wherein the application is deployed with the application manifest containing the at least one configuration parameter.

9. The non-transitory computer-readable medium of claim 8, wherein the at least one configuration parameter comprises at least one of:

a username, a reference to a security certificate, or a server address.

10. The non-transitory computer-readable medium of claim 9, wherein the program initiates deployment of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

11. The non-transitory computer-readable medium of claim 10, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

12. The non-transitory computer-readable medium of claim 8, wherein deployment of the application is initiated by a management service that is executed remotely from the client device.

13. The non-transitory computer-readable medium of claim 8, wherein the user is associated with a user profile that is separate from a respective user profile of the user in the application distribution system.

14. The non-transitory computer-readable medium of claim 8, wherein the application is deployed to a particular workspace of the client device that is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

15. A system comprising:

at least one computing device; and

a management service executable by the at least one computing device, wherein the management service causes the at least one computing device to at least;

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one configuration parameter of the application;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user;

identify a portion of an application manifest associated with the application that corresponds to respective application settings associated with the application;

embed the at least one configuration parameter into the portion of the application manifest that corresponds to the respective application settings associated with the application; and

initiate deployment of the application to the client device, wherein the application is deployed with the application manifest containing the at least one configuration parameter.

16. The system of claim 15, wherein the at least one configuration parameter comprises at least one of:

a username, a reference to a security certificate, or a server address.

17. The system of claim 16, wherein the management service initiates deployment of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

18. The system of claim 15, wherein deployment of the application is initiated by a management service that is executed remotely from the client device.

19. The system of claim 18, wherein the parameter associated with the user is based upon a user profile accessible by the management service, and the user profile is separate from a respective user profile in the application distribution system.

20. The system of claim 15, wherein the application is deployed on a particular workspace of the client device that is managed by a management service and the client device is associated with another workspace that is not managed by the management service.