Expedited Device Backup, Wipe, and Enrollment

• US 20160179624A1
• Filed: 12/17/2014
• Published: 06/23/2016
• Est. Priority Date: 12/17/2014
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich Peter, Brannon, Jonathan Blake
• Granted Patent: US 10,152,383 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 16/215 Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

Disclosed are various embodiments for performing a backup a device and/or performing a wipe or removal of data from a device enrolled with a device management service. In various embodiments, a client device may receive a communication generated from a remote computing device that causes performance of a backup of data associated with predefined criteria and performance of a wipe of the data associated with the predefined criteria. The device may perform the backup of the data by communicating the data to the remote computing device over a network. Further, the device may perform the wipe of the data by removing the data associated with the predefined criteria in the request in response to a confirmation that the data has been received by the remote computing device. Data not associated with the predefined criteria may be retained on the client device.

Claims

1. A non-transitory computer-readable medium embodying a program executable in a computing device, the program, when executed by the computing device, being configured to cause the computing device to at least:

receive a communication from a remote computing device to perform a backup of data associated with predefined criteria and to perform a wipe of the data associated with the predefined criteria from the computing device;

perform the backup of the data by communicating the data to the remote computing device over a network; and

perform the wipe of the data by removing the data associated with the predefined criteria in the communication, wherein data not associated with the predefined criteria is retained on the computing device.

2. The non-transitory computer-readable medium of claim 1, wherein the communication is generated in response to an enrollment of another computing device with a remote service or in response to a command defined by an administrator.

3. The non-transitory computer-readable medium of claim 1, wherein the communication is generated in response to a number of a plurality of computing devices permitted by a remote service exceeding a predefined threshold.

4. The non-transitory computer-readable medium of claim 1, wherein the backup or the wipe of the data is performed in response to the computing device failing to comply with at least one compliance rule.

5. The non-transitory computer-readable medium of claim 4, wherein the program, when executed by the computing device, is further configured to at least:

receive the at least one compliance rule generated by a service associated with the remote computing device; and

determine whether the backup or the wipe of the data is necessary based at least in part on the at least one compliance rule, wherein the at least one compliance rule is locally enforced on the computing device by at least one application.

6. The non-transitory computer-readable medium of claim 1, wherein the program, when executed by the computing device, is further configured to at least:

detect a tampering of the computing device during performance of the backup of data associated with the predefined criteria or during performance of the wipe of the data associated with the predefined criteria; and

communicate data associated with the tampering to the remote computing device.

7. The non-transitory computer-readable medium of claim 1, wherein the program, when executed by the computing device, is further configured to at least:

detect a tampering of the computing device during performance of the backup of data associated with the predefined criteria;

identify a tampering level associated with the tampering;

interrupt performance of the backup of data associated with the predefined criteria in response to the tampering level exceeding a predefined threshold; and

perform the wipe of the data associated with the predefined criteria in response to the tampering level exceeding a predefined threshold.

8. The non-transitory computer-readable medium of claim 1, wherein the program, when executed by the computing device, is further configured to at least:

determine whether a network connection is available to the computing device;

in response to the network connection being unavailable, wait for an establishment of the network connection for a predefined period of time; and

in response to an expiration of the predefined period of time, perform the wipe of the data associated with the predefined criteria.

9. A method, comprising:

generating, by at least one computing device, a communication that causes a client application executable on a first client device to perform a backup of data associated with predefined criteria and to perform a wipe of the data associated with the predefined criteria;

communicating, from the at least one computing device, a confirmation to the first client device that confirms receipt of backup data by the at least one computing device, the confirmation causing the wipe of the data to be performed by the client application executable on the first client device; and

communicating, from the at least one computing device, the backup data to a second client device in response to an enrollment of the second client device with a service executable by the at least one computing device.

10. The method of claim 9, wherein the communication is generated in response to the enrollment of the second client device with the service executable by the at least one computing device.

11. The method of claim 9, wherein the communication generated in response to a command performed by an administrator.

12. The method of claim 9, wherein the communication is generated in response to a number of a plurality of computing devices permitted by a remote service exceeding a predefined threshold.

13. The method of claim 9, wherein the communication is generated in response to the first client device failing to comply with at least one compliance rule.

14. The method of claim 9, wherein the service executable by the at least one computing device further comprises a device management service.

15. The method of claim 9, further comprising:

receiving, by the at least one computing device, a confirmation that the wipe of the data associated with the predefined criteria has been performed by the first client device; and

removing, by the at least one computing device, the first client device from a list of enrolled devices.

16. A system, comprising:

at least one client device managed by a remote service; and

program code that, when executed in the at least one client device, causes the at least one client device to at least;

receive a communication from the remote service that causes performance of a backup of data associated with predefined criteria and performance of a wipe of the data associated with the predefined criteria from the at least one client device;

perform the backup of the data by communicating the data to the remote computing device over a network; and

perform the wipe of the data by removing the data associated with the predefined criteria in the communication in response to a confirmation that the data has been received by the remote service, wherein data not associated with the predefined criteria is retained on the at least one client device.

17. The system of claim 16, further comprising program code that, when executed in the at least one client device, causes the at least one client device to at least:

detect a tampering of the computing device during performance of the backup of data associated with the predefined criteria or during performance of the wipe of the data associated with the predefined criteria; and

communicate data associated with the tampering to the remote computing device.

18. The system of claim 16, wherein further comprising program code that, when executed in the at least one client device, causes the at least one client device to at least:

determine whether a network connection is available to the at least one client device;

in response to the network connection being unavailable, wait for an establishment of the network connection for a predefined period of time; and

in response to an expiration of the predefined period of time, perform the wipe of the data associated with the predefined criteria.

19. The system of claim 16, wherein further comprising program code that, when executed in the at least one client device, causes the at least one client device to at least:

detect a tampering of the computing device during performance of the backup of data associated with the predefined criteria;

identify a tampering level associated with the tampering;

interrupt performance of the backup of data associated with the predefined criteria in response to the tampering level exceeding a predefined threshold; and

perform the wipe of the data associated with the predefined criteria in response to the tampering level exceeding a predefined threshold.

20. The system of claim 16, wherein the communication is generated in response to an enrollment of another computing device with a remote service or in response to a command performed by an administrator.

21. The system of claim 16, wherein the communication is generated in response to a number of a plurality of computing devices permitted by a remote service exceeding a predefined threshold.

22. The system of claim 16, further comprising program code that, when executed, causes the client device to at least:

identify at least one compliance rule generated by the remote service set forth in the communication; and

determine whether the backup or the wipe of the data is warranted based at least in part on the at least one compliance rule, wherein the at least one compliance rule is locally enforced on the client device by at least one client application.

23. The system of claim 16, further comprising program code that, when executed, causes the client device to at least place the client device in a locked state, wherein the locked state prevents access to at least a portion of features available on the client device, terminates execution of predefined applications, prevents execution of predefined applications, or any combination thereof.