APPLICATION CUSTOMIZATION

• US 20150319252A1
• Filed: 09/18/2014
• Published: 11/05/2015
• Est. Priority Date: 05/05/2014
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Momchilov, Georgy, Barton, Gary
• Granted Patent: US 10,924,554 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Methods and systems for customizing applications in enterprise mobility management systems are described herein. A client agent software application on a mobile device may be customized to embed or make available enterprise server URLs, a session cookie for authentication, and various other data during the device enrollment process. The customization of the client agent may be based on the device, user, and/or enrollment session. After the device is enrolled in the enterprise system, the embedded data may be accessed by the client agent application to support seamless single-sign-on during first-time use. Additional customized applications based on device, user, and/or enrollment session, may be generated and provided to mobile devices during or after device enrollment. Customized applications may be based on application templates, such as packaged web applications or specific implementations of hosted applications.

Claims

1. A method, comprising:

receiving, by a computing device, an enrollment request from a mobile device to enroll in a mobile device management (MDM) system;

generating, by the computing device, a session cookie based on a device identifier of the mobile device and based on an identifier of the MDM system; and

providing, by the computing device, the session cookie to the mobile device.

2. The method of claim 1, wherein the session cookie is unique to an enrollment session of the mobile device into the MDM system.

3. The method of claim 1, wherein providing the session cookie to the mobile device comprises transmitting the session cookie to the mobile device using an MDM protocol.

4. The method of claim 1, wherein providing the session cookie to the mobile device comprises:

embedding the session cookie into a client agent application;

building the client agent application comprising the session cookie; and

transmitting the client agent application to the mobile device.

5. The method of claim 1, further comprising:

in response to the enrollment request, providing one or more enterprise uniform resource locators (URLs) to the mobile device, the enterprise URLs corresponding to one or more enterprise resources of the MDM system, wherein providing the enterprise URLs comprises at least one of;

transmitting the enterprise URLs to the mobile device using an MDM protocol;

or

embedding the enterprise URLs into at least one of a client agent application or a managed line-of-business (LOB) application to be transmitted to the mobile device.

6. The method of claim 1, further comprising:

in response to the enrollment request, embedding one or more first-time use policies into at least one of a client agent application or a managed line-of-business (LOB) application, wherein the first-time use policies are determined based on at least one of the device identifier of the mobile device or an identity of the user of the mobile device;

building the at least one of the client agent application or the managed LOB application comprising the embedded first-time use policies; and

transmitting the at least one of the client agent application or the managed LOB application comprising the embedded first-time use policies to the mobile device.

7. The method of claim 1, further comprising:

after providing the session cookie to the mobile device, receiving from the mobile device a communication containing the session cookie;

retrieving an expiration time associated with the session cookie; and

determining whether the session cookie is valid based on the expiration time.

8. The method of claim 1, further comprising:

identifying at least one of a user, a device, or an enrollment session associated with the enrollment request;

determining a set of customized application parameters based on the user, the device, or the enrollment session;

generating a customized application using the set of customized application parameters and an application template; and

transmitting the customized application to the mobile device in response to the enrollment request.

9. The method of claim 8, wherein determining the set of customized application parameters and generating the customized application comprises:

receiving a first set of customization parameters based on enterprise policies for customizing the application;

performing a first customization process on an application template, using the first set of customization parameters, to create a first customized application;

receiving a second set of customization parameters based on the user, the device, or the enrollment session; and

performing a second customization process on the first customized application, using the second set of customization parameters, to create the customized application.

10. An apparatus, comprising:

a processor; and

memory storing executable instructions that, when executed by the processor, cause the apparatus to;

receive an enrollment request from a mobile device to enroll in a mobile device management (MDM) system;

generate a session cookie based on a device identifier of the mobile device and based on an identifier of the MDM system; and

provide the session cookie to the mobile device.

11. The apparatus of claim 10, wherein the session cookie is unique to an enrollment session of the mobile device into the MDM system.

12. The apparatus of claim 10, wherein providing the session cookie to the mobile device comprises transmitting the session cookie to the mobile device using an MDM protocol.

13. The apparatus of claim 10, wherein providing the session cookie to the mobile device comprises:

embedding the session cookie into a client agent application; and

building the client agent application comprising the session cookie; and

transmitting the client agent application to the mobile device.

14. The apparatus of claim 10, the memory storing further executable instructions that, when executed by the processor, cause the apparatus to:

provide one or more enterprise uniform resource locators (URLs) to the mobile device in response to the enrollment request, the enterprise URLs corresponding to one or more enterprise resources of the MDM system, wherein providing the enterprise URLs comprises at least one of;

transmitting the enterprise URLs to the mobile device using an MDM protocol;

or

embedding the enterprise URLs into at least one of a client agent application or a managed line-of-business (LOB) application to be transmitted to the mobile device.

15. The apparatus of claim 10, the memory storing further executable instructions that, when executed by the processor, cause the apparatus to:

embed one or more first-time use policies into at least one of a client agent application or a managed line-of-business (LOB) application in response to the enrollment request, wherein the first-time use policies are determined based on the device identifier of the mobile device or an identity of the user of the mobile device;

build the at least one of the client agent application or the managed LOB application comprising the embedded first-time use policies; and

transmit the at least one of the client agent application or the managed LOB application comprising the embedded first-time use policies to the mobile device.

16. The apparatus of claim 10, the memory storing further executable instructions that, when executed by the processor, cause the apparatus to:

receive a communication containing the session cookie from the mobile device, after providing the session cookie to the mobile device;

retrieve an expiration time associated with the session cookie; and

determine whether the session cookie is valid based on the expiration time.

17. The apparatus of claim 10, the memory storing further executable instructions that, when executed by the processor, cause the apparatus to:

identify at least one of a user, a device, or an enrollment session associated with the enrollment request;

determine a set of customized application parameters based on the user, the device, or the enrollment session;

generate a customized application using the set of customized application parameters and an application template; and

transmit the customized application to the mobile device in response to the enrollment request.

18. A system, comprising:

a mobile device management (MDM) system server; and

one or more mobile devices,

wherein each of said mobile devices comprises a processor and memory storing executable instructions that, when executed by the processor, cause the mobile device to;

transmit an enrollment request to the MDM system server, said enrollment request comprising a device identifier of the mobile device;

receive a session cookie from the MDM system server in response to the enrollment request; and

use the session cookie to establish communication with the MDM system,

wherein the MDM system server comprises a processor and memory storing executable instructions that, when executed by the processor, cause the MDM system server to;

receive enrollment requests from the one or more mobile devices, each said enrollment request comprising a device identifier of a corresponding mobile device;

generate session cookies based on the received enrollment requests, using said device identifiers; and

provide the session cookies to the one or more mobile devices.

19. The system of claim 18, wherein each of said session cookies is uniquely generated for a single enrollment session of a single mobile device.

20. The system of claim 18, wherein the MDM system server comprises memory storing further executable instructions that, when executed by the processor, cause the MDM system server to:

for each received enrollment request, identify at least one of a user, a device, or an enrollment session associated with the enrollment request;

determine a set of customized application parameters based on the user, the device, or the enrollment session;

generate a customized application using the set of customized application parameters and an application template; and

transmit the customized application to the mobile device in response to the enrollment request.