Infering Management State via Secondary State

• US 20160087863A1
• Filed: 09/19/2014
• Published: 03/24/2016
• Est. Priority Date: 09/19/2014
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Alemu, Alemeshet Yismaw, Jacobson, Neil Adam, Jindal, Meera
• Application Number:
  US14/490,960
• Publication Number:
  US 20160087863A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters

Abstract

Determining whether or not a device is managed. A method includes, as part of running a particular application, determining whether or not certain state and/or data (such as a particular specialized font, a particular certificate chain, or particular xml policy setting) is present on the device. When the certain state and/or data is present on the device, the method includes determining that the device is managed, otherwise, determining that the device is not managed.

Claims

1. In a computing environment, a method of determining whether or not a device is managed, the method comprising:

as part of running a particular application, determining whether or not a particular specialized font is present on the device; and

when the font is present on the device determining that the device is managed, otherwise, determining that the device is not managed.

2. The method of claim 1, wherein when a determination is made that device is not managed, the method further includes wiping the device.

3. The method of claim 1, wherein that the font is pinned to a management profile.

4. The method of claim 1, wherein the application is installed by side loading.

5. The method of claim 1, wherein the application is installed from an app store (instead of being pushed from a managed application repository).

6. The method of claim 1, where the application is installed from a managed application repository.

7. The method of claim 1, further comprising, checking for the font every time the application is run.

8. The method of claim 1, further comprising, checking for the font on a periodic basis.

9. The method of claim 1, wherein determining if font is present occurs at a point later in time than install time for the application.

10. One or more computer-readable storage media, wherein the one or more computer-readable storage media comprise computer-executable instructions that when executed by at least one of the one or more processors cause the system to perform the following method:

as part of running a particular application, determining whether or not a particular certificate chain is present on the device; and

when the certificate chain is present on the device determining that the device is managed, otherwise, determining that the device is not managed.

11. The one or more computer-readable storage media of claim 10, wherein when a determination is made that device is not managed, the method further includes wiping the device.

12. The one or more computer-readable storage media of claim 10, wherein the certificate chain is pinned to a management profile.

13. The one or more computer-readable storage media of claim 10, the method further comprising, checking for the certificate chain every time the application is run.

14. The one or more computer-readable storage media of claim 10, the method further comprising, checking for the certificate chain on a periodic basis.

15. The one or more computer-readable storage media of claim 10, wherein determining if certificate chain is present occurs at a point later in time than install time for the application.

16. In a computing environment, a system for determining whether or not a device is managed the system comprising:

one or more processors; and

one or more computer-readable media, wherein the one or more computer-readable media comprise computer-executable instructions that when executed by at least one of the one or more processors cause the system to perform the following method;

as part of running a particular application, determining whether or not a particular xml policy setting is present on the device; and

when the xml policy setting is present on the device determining that the device is managed, otherwise, determining that the device is not managed.

19. The system of claim 19, the method further comprising, checking for the xml policy setting every time the application is run.

17. The system of claim 19, wherein when a determination is made that device is not managed, the method further includes wiping the device.

18. The system of claim 19, wherein the xml policy setting is pinned to a management profile.

20. The system of claim 19, the method further comprising, checking for the xml policy setting on a periodic basis.