SYSTEMS AND METHODS FOR ENABLING AN APPLICATION MANAGEMENT SERVICE TO REMOTELY ACCESS ENTERPRISE APPLICATION STORE

• US 20140366080A1
• Filed: 06/05/2013
• Published: 12/11/2014
• Est. Priority Date: 06/05/2013
• Status: Abandoned Application

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Bhushan, Bharat, Kann, Jong, Rafiq, Pierre, Gupta, Punit
• Application Number:
  US13/910,680
• Publication Number:
  US 20140366080A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A method for providing secure remote access to an enterprise application store with enterprise applications for a service running on a mobile device includes receiving an authentication request with user credentials from an access manager on the mobile device. Authentication and a valid session cookie are provided if user credentials are valid. An access token request is received and an access token is provided in response to the token request if the token request includes the valid session cookie. An access request from the service is received and access to the enterprise application store by the service is allowed if the request includes the access token. The service may then download applications or receive applications delivered via the enterprise application store. The application management service can also access a publicly available application store.

Claims

1. A method for providing secure remote access to an enterprise application store from a mobile device, the method comprising:

receiving an access token request from an authenticated access manager on the mobile device,

providing an access token in response to the access token request;

receiving an access request from an application management service on the mobile device, and

allowing access to the enterprise application store by the mobile device if the access request includes the access token.

2. The method of claim 1, wherein the step of providing an access token in response to the access token request further includes providing an access token in response to the access token request if the access token request includes a valid session cookie.

3. The method of claim 1, wherein the application management service is operable to directly interact with a publicly available application store.

4. The method of claim 1, wherein the access request includes a desired URL of an enterprise application store.

5. The method of claim 1, wherein the access request includes one of a HEAD command and a GET command.

6. The method of claim 1, further comprising permitting an application to be delivered to the mobile device via the enterprise application store.

7. The method of claim 1, further comprising permitting an application to be downloaded to the mobile device from the enterprise application store.

8. The method of claim 7, further comprising storing the downloaded application in a secure container on the mobile device.

9. A system for providing secure remote access to enterprise applications, the system comprising:

an access gateway; and

an enterprise application store for delivering one or more enterprise applications to a mobile device via the access gateway;

wherein the access gateway is configured to receive an access token request from an access manager of the mobile device, provide an access token in response to the access token request if the access token request includes a valid session cookie, receive an application access request from an application management service on the mobile device, and allow access to the enterprise management store by the application management service if the access request includes the access token.

10. A mobile device able to remotely access a private enterprise application store in a secure manner, the mobile device comprising:

an application management service operable to access a publicly available application store in a first mode of operation and to access a private enterprise application store in a second mode of operation; and

an access manager operable to authenticate to an access gateway, receive a session cookie in response to authentication, request an access token, and pass one of the session cookie and the access token to the application management service to allow the application management service to operate in the second mode of operation.

11. The mobile device of claim 10, wherein the application management service facilitates downloading of applications from one of the publicly available application store and the private enterprise application store.

12. A method for providing temporary secure remote access to an enterprise application store for an application management service on a mobile device, the method comprising:

receiving an authentication request with user compliance credentials and mobile device compliance credentials from an access manager on the mobile device,

comparing the authentication request with a corporate policy to determine compliance with the corporate policy;

providing authorization to access the private enterprise application store upon verification of compliance,

receiving at the secure private application store, following the authorization, a request from the mobile device to download an application to the mobile device;

delivering the requested application to the requesting mobile device; and

de-authorizing the mobile device from accessing the secure private application store following at least one of a time period, the delivery of the requested application, and a change in the credentials of the requesting device.