PROVISIONING OF APPLICATIONS DEPLOYED ON CLIENT DEVICES

• US 20170250977A1
• Filed: 02/29/2016
• Published: 08/31/2017
• Est. Priority Date: 02/29/2016
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Turner, Stephen, Kelley, Scott
• Granted Patent: US 10,180,834 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Disclosed are various examples for deploying applications on client devices through a management service. A client device can be enrolled with a management service. The management service can determine application settings that are associated with an application and generate an application profile for the application. The application profile can be used to deploy the application to client devices and provision the application with the appropriate application settings.

Claims

1. A non-transitory computer-readable medium embodying a program executed by a computing device, wherein the program is configured to cause the computing device to at least:

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user; and

initiate deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter associated with the user populated within an application setting from the application profile.

2. The non-transitory computer-readable medium of claim 1, wherein the application setting comprises a reference to a security certificate associated with the user.

3. The non-transitory computer-readable medium of claim 2, wherein the program further causes the computing device to at least initiate installation of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

4. The non-transitory computer-readable medium of claim 3, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

5. The non-transitory computer-readable medium of claim 1, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and remotely from the application distribution system.

6. The non-transitory computer-readable medium of claim 5, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile of the user in the application distribution system.

7. The non-transitory computer-readable medium of claim 1, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

8. A method comprising:

obtaining, by a management service, an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application;

defining, by the management service, an application profile associated with the application based upon the at least one key-value pair;

associating, by the management service, the application profile with the application;

obtaining, by the management service, a request to deploy the application to a client device associated with a user; and

initiating, by the management service, deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter associated with the user populated within an application setting from the application profile.

9. The method of claim 8, wherein the application setting comprises a reference to a security certificate associated with the user.

10. The method of claim 9, further comprising initiating, by the management service, installation of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

11. The method of claim 10, wherein the security certificate authenticates a user identity of the user to at least one of the application or a service accessible by the application.

12. The method of claim 8, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and remotely from the application distribution system.

13. The method of claim 12, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile of the user in the application distribution system.

14. The method of claim 8, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.

15. A system comprising:

at least one computing device; and

a management service executable by the at least one computing device, wherein the management service causes the at least one computing device to at least;

obtain an application from an application distribution system, the application associated with at least one key-value pair identifying at least one application setting of the application;

define an application profile associated with the application based upon the at least one key-value pair;

associate the application profile with the application;

obtain a request to deploy the application to a client device associated with a user; and

initiate deployment of the application to a particular workspace of the client device, wherein the application is deployed with a parameter associated with the user populated within an application setting from the application profile.

16. The system of claim 15, wherein the application setting comprises a reference to a security certificate associated with the user.

17. The system of claim 16, wherein the management service further causes the at least one computing device to at least initiate installation of the security certificate on the client device by instructing a management component executed by the client device to retrieve and install the security certificate.

18. The system of claim 15, wherein deployment of the application is initiated by a management service that is executed remotely from the client device and the application distribution system.

19. The system of claim 18, wherein the parameter associated with the user is based upon a user profile accessible by the management service, wherein the user profile is separate from a respective user profile in the application distribution system.

20. The system of claim 15, wherein the particular workspace of the client device is managed by a management service and the client device is associated with another workspace that is not managed by the management service.