PROVIDING AN ENTERPRISE APPLICATION STORE

• US 20140298401A1
• Filed: 08/30/2013
• Published: 10/02/2014
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Batson, Kevin, Hayton, Richard
• Granted Patent: US 9,369,449 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Methods, systems, and computer-readable media for providing an application store are presented. In some embodiments, authentication credentials of an administrative user of an application store may be received at the application store. Based on validating the authentication credentials of the administrative user, a mobile service management interface may be provided via the application store. In addition, the mobile service management interface may include at least one control that is configured to allow the administrative user to define one or more policies to be applied to at least one application that is available in the application store.

Claims

1. A method, comprising:

receiving, at an application store, authentication credentials of an administrative user of the application store; and

based on validating the authentication credentials of the administrative user, providing a mobile service management interface via the application store,

wherein the mobile service management interface comprises at least one control configured to allow the administrative user to define one or more policies to be applied to at least one application available in the application store, and

wherein the one or more policies are configured to control functionalities of the at least one application during execution of the at least one application on at least one mobile device.

2. The method of claim 1, wherein the at least one control is further configured to allow the administrative user to define different policies for different users of the at least one application.

3. The method of claim 2, wherein the different policies are defined for different user roles.

4. The method of claim 1, further comprising:

receiving a policy change for a first application via the mobile service management interface; and

providing, by the application store, information associated with the policy change to at least one mobile device having the first application.

5. The method of claim 1, further comprising:

receiving, at the application store, authentication credentials of a non-administrative user of the application store; and

based on validating the authentication credentials of the non-administrative user, providing an application download interface for the at least one application via the application store,

wherein the application download interface comprises at least one indicator corresponding to one or more policies defined by the administrative user.

6. The method of claim 1, wherein the mobile service management interface is provided in response to receiving the at least one application at the application store.

7. The method of claim 1, further comprising:

after validating the authentication credentials of the administrative user, receiving a new application at the application store from the administrative user;

prompting the administrative user to define one or more policies to be applied to the new application; and

receiving at least one policy to be applied to the new application at the application store from the administrative user.

8. The method of claim 7, wherein prompting the administrative user to define one or more policies to be applied to the new application includes:

identifying one or more relevant policies for the new application; and

updating the mobile service management interface to include at least one control configured to allow the administrative user to manage the one or more identified policies.

9. An apparatus, comprising:

at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to;

receive, at an application store, authentication credentials of an administrative user of the application store; and

based on validating the authentication credentials of the administrative user, provide a mobile service management interface via the application store,

wherein the mobile service management interface comprises at least one control configured to allow the administrative user to define one or more policies to be applied to at least one application available in the application store, and

wherein the one or more policies are configured to control functionalities of the at least one application during execution of the at least one application on at least one mobile device.

10. The apparatus of claim 9, wherein the at least one control is further configured to allow the administrative user to define different policies for different users of the at least one application.

11. The apparatus of claim 10, wherein the different policies are defined for different user roles.

12. The apparatus of claim 9, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the apparatus to:

receive a policy change for a first application via the mobile service management interface; and

provide, by the application store, information associated with the policy change to at least one mobile device having the first application.

13. The apparatus of claim 9, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the apparatus to:

receive, at the application store, authentication credentials of a non-administrative user of the application store; and

based on validating the authentication credentials of the non-administrative user, provide an application download interface for the at least one application via the application store,

wherein the application download interface comprises at least one indicator corresponding to one or more policies defined by the administrative user.

14. The apparatus of claim 9, wherein the mobile service management interface is provided in response to receiving the at least one application at the application store.

15. The apparatus of claim 9, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the apparatus to:

after validating the authentication credentials of the administrative user, receive a new application at the application store from the administrative user;

prompt the administrative user to define one or more policies to be applied to the new application; and

receive at least one policy to be applied to the new application at the application store from the administrative user.

16. The apparatus of claim 15, wherein prompting the administrative user to define one or more policies to be applied to the new application includes:

identifying one or more relevant policies for the new application; and

updating the mobile service management interface to include at least one control configured to allow the administrative user to manage the one or more identified policies.

17. One or more non-transitory computer-readable media storing instructions that, when executed, cause at least one computing device to:

receive, at an application store, authentication credentials of an administrative user of the application store; and

based on validating the authentication credentials of the administrative user, provide a mobile service management interface via the application store,

wherein the mobile service management interface comprises at least one control configured to allow the administrative user to define one or more policies to be applied to at least one application available in the application store, and

wherein the one or more policies are configured to control functionalities of the at least one application during execution of the at least one application on at least one mobile device.

18. The one or more non-transitory computer-readable media of claim 17, having additional instructions stored thereon that, when executed, further cause the at least one computing device to:

receive a policy change for a first application via the mobile service management interface; and

provide, by the application store, information associated with the policy change to at least one mobile device having the first application.