MOBILE APPLICATION MANAGEMENT SYSTEMS AND METHODS THEREOF

• US 20130298185A1
• Filed: 05/02/2012
• Published: 11/07/2013
• Est. Priority Date: 05/02/2012
• Status: Active Grant

• Current Assignee: Kony, Inc. (Temenos AG)
• Original Assignee: Kony Solutions Incorporated
• Inventors: KONERU, RAJ KUMAR, DASARI, PATTABHI RAMA RAO, DESHPANDE, PRAJAKT, IYER, VIVEK, KOMANDUR, RAJENDRA, PERUMAL, ARAVIND, RAMANATHAN, SRIRAM, TERRY, MATTHEW, VAGVALA, VAMSI KRISHNA, VENNAPUSALA, SATHYANARAYANA
• Granted Patent: US 9,405,723 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 15/173 using an interconnection network, e.g. matrix, shuffle, pyramid, star, snowflake
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine

Abstract

A mobile application management through policy inclusion using centralized enforcement libraries is disclosed. The method includes storing independently developed mobile applications on at least one server. The method further includes storing independently developed policies associated with each of the independently developed mobile applications on the at least one server. The method further includes associating a policy of the stored independently developed policies with any of the mobile applications of the independently developed mobile applications. The method further includes providing the associated policy and mobile application to a mobile device where the enforcement libraries restrict the app as instructed by the policy.

Claims

1. A method comprising:

storing independently developed mobile applications on at least one server;

storing independently developed policies associated with each of the independently developed mobile applications on the at least one server;

associating a policy of the stored independently developed policies with any of the mobile applications of the independently developed mobile applications; and

providing the associated policy and mobile application to a mobile device.

2. The method of claim 1, wherein:

the independently developed policies are provided in a reusable library of application policy enforcements that are combined with any enterprise mobile application of the independently developed mobile applications, and

the independently developed mobile applications continue to use existing application program interfaces (API) of an operating system of the mobile device.

3. The method of claim 2, wherein:

the independently developed policies are a security layer between runtime code of the independently developed mobile applications and the operating system of the mobile device; and

the policy runs on the API of the operating system of the mobile device and independent of the mobile application.

4. The method of claim 3, wherein the policy running on the operating system of the mobile device provides instructions to the operating system, prior to running the associated mobile application.

5. The method of claim 2, wherein:

the policy is updated at run time of the mobile application; and

the policy is updated by one of a pull operation and push operation from the at least one server and is combined with any of the independently developed mobile applications based on predetermined factors.

6. The method of claim 5, wherein the predetermined factors include at least one of application ID, device platform, specific DeviceID, specific userid, device characteristics and user group information.

7. The method of claim 1, further comprising providing a unique policy for a userID and/or DeviceID to wipe and lock each mobile application that contains the unique policy.

8. The method of claim 2, further comprising:

receiving a query for an updated policy;

determining that the updated policy exists; and

providing the updated policy to the mobile device.

9. The method of claim 8, further providing a time stamp of a last update of the policy.

10. The method of claim 1, wherein the steps of claim 1 are implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions operable to perform the steps of claim 1.

11. A system implementing policies on a mobile device and associated with at least one mobile application, comprising:

a mobile application management server, comprising;

a portal for receiving independently developed mobile applications and one or more policies;

a repository for storing the independently developed mobile applications;

a repository for storing the one or more policies associated with any of the independently developed mobile applications; and

a service component to provide a policy of the stored policies and an associated mobile application of the mobile applications to a mobile device.

12. The system of claim 11, wherein the mobile application management server updates the policy and any subsequent updated policies by one of a pull operation and push operation at run time of the mobile application.

13. The system of claim 11, further comprising a component operable to:

receive a query for an updated policy;

determine that the updated policy exists; and

provide an updated policy by uploaded on the mobile device.

14. The system of claim 13, wherein the updated policy is based on at least one of application ID, device platform, specific DeviceID, specific userid, device characteristics and user group information.

15. The system of claim 11, wherein the mobile application management server provides a unique policy for at least one of a userID and DeviceID to wipe and lock each mobile application that contains the unique policy.

16. The system of claim 11, wherein the one or more policies are provided in a reusable library of application policy enforcements that are combined with any enterprise mobile application of the independently developed mobile applications.

17. The system of claim 16, wherein:

the one or more policies are provided in a policy enforcement layer between an operating system of the mobile device and the independently developed mobile applications; and

the policy enforcement layer runs on an application program interface of the mobile device and independent of the mobile application.

18. The system of claim 11, wherein the mobile application management server is a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions.

19. A computer system for sending and receiving policies and mobile applications, the system comprising:

a CPU, a computer readable memory and a computer readable storage media;

first program instructions to retrieve independently developed mobile applications, which run on existing APIs of a mobile device;

second program instructions to retrieve independently developed one or more policies, which run through existing APIs of an operating system of the mobile device; and

third program instructions to provide a policy of the one or more policies and a mobile application to be independently executed on a mobile device, by having the policy run on the existing API of the operating system of the mobile device and independent of the mobile application,

wherein the first, second and third program instructions are stored on the computer readable storage media for execution by the CPU via the computer readable memory.

20. The computer system of claim 19, further comprising fourth program instructions to provide updated policies to the mobile device using either a push operation or a pull operation.

21. The computer system of claim 19, further comprising fourth program instructions to wipe and lock a mobile application residing on the mobile device.

22. The computer system of claim 19, further comprising a fourth program instructions to receive a request for an updated policy, determine there is an updated policy for the mobile application or mobile device and sending the updated policy to the mobile device.

23. The computer system of claim 19, further comprising a fourth program instructions to request an updated policy, receive the updated policy from a server and execute the updated policy on the mobile device.

24. The computer system of claim 19, wherein:

the independently developed policies are provided in a reusable library of application policy enforcements that are combined with any enterprise mobile application of the independently developed mobile applications;

the independently developed policies provide a security layer between the operating system of the mobile device and the independently developed mobile applications when running on the mobile device; and

the policy runs on the API of an operating system of the mobile device and independent of the mobile application.

25. A method, comprising:

receiving a mobile application;

receiving a policy associated with the mobile application; and

executing the policy through an application program interface (API) of an operating system of the mobile application, prior to the mobile application, wherein;

the policy is retrieved from a reusable library of application policy enforcements that are combined with any enterprise mobile application;

the policy provides a security layer between the mobile application and an operating system of the mobile device;

the policy runs independent of the mobile application; and

the policy runs through the operating system of the mobile device, prior to the mobile application, to apply enforcement rules for the mobile application.