System for managing devices and method of operation of same

• US 8,615,581 B2
• Filed: 07/09/2011
• Issued: 12/24/2013
• Est. Priority Date: 12/19/2008
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: OpenPeak Inc.
• Inventors: Kacherov, Vadim, Dare, Robert M., Gittleman, Daniel, Krzyzanowski, Paul
• Primary Examiner(s): LIN, WEN TAI
• Application Number:
  US13/179,513
• Publication Number:
  US 20120036552A1
• Time in Patent Office: 899 Days
• Field of Search: None
• US Class Current: 709/224
• CPC Class Codes: H04L 41/0253 using browsers or web-pages for accessing management information
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A managed services platform and method of operation of same are described herein. The platform can include a device management service (DMS) server in which the DMS server can act as a gateway for communications with one or more computing devices, and the computing devices are associated with a first entity. The platform can also include an application service (AS) server in which the AS server is communicatively coupled with the DMS server. When a first computing device contacts the DMS server, the DMS server is operable to provide a bundle to the first computing device. As an example, the bundle contains content that at least includes one or more configuration messages and an application set that contains one or more predefined applications. The content of the bundle can be determined at least in part by the first entity.

Claims

1. A managed services portal, comprising:

one or more user interface elements configured to enable a user to make selections associated with the management of services for one or more portable computing devices; and

a processor that is communicatively coupled to the user interface elements, wherein the processor is operable to;

receive a request to determine a status of one or more of the portable computing devices or to cause an action to occur on one or more of the portable computing devices; and

provide the status of the one or more portable computing devices or to effect the action on the one or more portable computing devices;

wherein the processor is further operable to provide the status of the one or more portable computing devices or to effect the action on the one or more portable computing devices on an individual basis, a group basis or a global basis;

wherein the processor is further operable to cause the presentation of one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information includes configuration settings and applications and at least some of the applications are default applications and the processor is further operable to enable an application to be designated as a default application for a bundle;

wherein at least some of the default applications are selected from an application repository that is associated with and under the control of a first enterprise and the user of the portable computing device is associated with the first enterprise;

wherein the first enterprise controls the application repository by at least determining which default applications are to be published in the application repository.

2. The managed services portal according to claim 1, wherein a display is one of the user interface elements and the processor is further operable to cause the presentation of at least some of the portable computing devices on the display.

3. The managed services portal according to claim 1, further comprising a searching module that is configured to enable the portable computing devices to be searched individually or by groups.

4. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by generating a message for transmission to the portable computing devices and causing the delivery of the message to the portable computing devices.

5. The managed services portal according to claim 1, wherein the processor is further operable to provide the status of the one or more portable computing devices by causing the presentation of a listing that includes applications that are installed on a portable computing device or a listing that includes applications that are available to be installed on the portable computing device.

6. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by causing the installation of applications on the portable computing devices or causing the removal of applications from the portable computing devices.

7. The managed services portal according to claim 6, wherein the installation of applications and the removal of applications are executed in real-time or in accordance with a delivery schedule.

8. The managed services portal according to claim 1, wherein the processor is further operable to provide the status of the one or more portable computing devices by providing location information of the portable computing devices.

9. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by causing one or more of the following:

locking at least a portion of a portable computing device;

unlocking at least a portion of a portable computing device;

logging a user in a portable computing device;

logging a user out of a portable computing device;

wiping at least a portion of the data on a portable computing device;

restoring at least a portion of the data on a portable computing device that has been deleted from the portable computing device;

resetting a portable computing device to one or more default settings;

adding a user to a portable computing device;

removing a user from a portable computing device;

or

ringing a portable computing device.

10. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by causing the delivery of content to the one or more portable computing devices.

11. The managed services portal according to claim 10, wherein the content includes one or more configuration settings or a firmware package.

12. The managed services portal according to claim 10, wherein the delivery of content is executed in real-time or in accordance with a delivery schedule.

13. The managed services portal according to claim 1, wherein the processor is further operable to provide the status of the one or more portable computing devices by causing the presentation of user identifications that are associated with the portable computing devices.

14. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by controlling access to a portable computing device that is associated with one or more of the user identifications.

15. The managed services portal according to claim 1, wherein the processor is further operable to provide the status of the one or more portable computing devices by presenting the one or more portable computing devices as available portable computing devices or as provisioned portable computing devices.

16. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by causing an available portable computing device to become a provisioned portable computing device.

17. The managed services portal according to claim 1, wherein the processor is further operable to effect the action on the one or more portable computing devices by causing the delivery of a bundle to the portable computing devices.

18. The managed services portal according to claim 17, wherein the processor is further operable to effect the action on the one or more portable computing devices by generating a modification signal in response to the information contained in a bundle being edited such that modifications of such information may be dynamically effected on portable computing devices that have already received the bundle.

19. The managed services portal according to claim 1, wherein the configuration settings include one or more of the following:

a password profile;

a wireless protocol profile;

a virtual private network (VPN) profile;

a hardware profile;

or

a certificate profile.

20. The managed services portal according to claim 1, wherein the configuration settings include one or more policies and the policies define one or more actions to be executed in response to a detected event.

21. The managed services portal according to claim 20, wherein the policies include one or more of the following:

a VPN policy;

a proxy policy;

a blacklist policy;

a whitelist policy;

or

a report policy.

22. The managed services portal according to claim 21, wherein the policy is the VPN policy and the action includes the implementation of one or more VPN settings.

23. The managed services portal according to claim 21, wherein the policy is the proxy policy and the action includes the enablement of a proxy.

24. The managed services portal according to claim 21, wherein the policy is the blacklist policy and the action includes blocking the download or installation of an application.

25. The managed services portal according to claim 24, wherein the policy is the whitelist policy and the action includes allowing the download or installation of an application.

26. The managed services portal according to claim 24, wherein the policy is the report policy and the action includes reporting a characteristic of the portable computing device.

27. The managed services portal according to claim 1, wherein the processor is further operable to cause the presentation of user identifications.

28. The managed services portal according to claim 27, wherein the processor is further operable to manage user identifications by at least controlling the access of the user identifications.

29. A method for managing services, comprising:

enabling a user to make selections associated with the management of services for one or more portable computing devices;

receiving a request to determine a status of one or more of the portable computing devices or to cause an action to occur on one or more of the portable computing devices;

providing the status of the one or more portable computing devices or to effecting the action on the one or more portable computing devices;

wherein the status of the one or more portable computing devices is provided or the action on the one or more portable computing devices is effected on an individual basis, a group basis or a global basis;

presenting one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information of the bundles includes configuration settings and applications and at least some of the applications are designated as default applications for the bundles; and

selecting at least some of the default applications from an application repository that is associated with and under the control of a first enterprise and the user of the portable computing device is associated with the first enterprise;

wherein the first enterprise controls the application repository by at least determining which default applications are to be published in the application repository.

30. The method according to claim 29, further comprising presenting at least some of the portable computing devices on the display.

31. The method according to claim 29, further comprising enabling the portable computing devices to be searched individually or by groups.

32. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by:

generating a message for transmission to the portable computing devices; and

causing the message to be sent to the portable computing devices.

33. The method according to claim 29, wherein the status of the one or more portable computing devices is provided by presenting of a listing that includes applications that are installed on a portable computing device or a listing that includes applications that are available to be installed on the portable computing device.

34. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by:

selectively causing the installation of applications on the portable computing devices;

or

selectively causing the removal of applications from the portable computing devices.

35. The method according to claim 34, wherein causing the installation of applications and the removal of applications is such that the installation and removal are executed in real-time or in accordance with a delivery schedule.

36. The method according to claim 29, wherein the status of the one or more portable computing devices is provided by providing location information of the portable computing devices.

37. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by one or more of the following:

locking at least a portion of a portable computing device;

unlocking at least a portion of a portable computing device;

logging a user in a portable computing device;

logging a user out of a portable computing device;

wiping at least a portion of the data on a portable computing device;

restoring at least a portion of the data on a portable computing device that has been deleted from the portable computing device;

resetting a portable computing device to one or more default settings;

adding a user to a portable computing device;

removing a user from a portable computing device;

or

ringing a portable computing device.

38. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by delivering content to the one or more portable computing devices.

39. The method according to claim 38, wherein the content includes one or more configuration settings or a firmware package.

40. The method according to claim 38, further comprising executing the delivery of content in real-time or in accordance with a delivery schedule.

41. The method according to claim 29, wherein the status of the one or more portable computing devices is provided by causing the presentation of user identifications that are associated with the portable computing devices.

42. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by controlling access to a portable computing device that is associated with one or more of the user identifications.

43. The method according to claim 29, wherein the status of the one or more portable computing devices is provided by presenting the one or more portable computing devices as available portable computing devices or as provisioned portable computing devices.

44. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by causing an available portable computing device to become a provisioned portable computing device.

45. The method according to claim 29, wherein the action on the one or more portable computing devices is effected by causing a bundle to be sent to the portable computing devices.

46. The method according to claim 45, wherein the action on the one or more portable computing devices is effected by generating a modification signal in response to the information contained in a bundle being edited such that modifications of such information may be dynamically effected on portable computing devices that have already received the bundle.

47. The method according to claim 29, wherein the configuration settings include one or more of the following:

a password profile;

a wireless protocol profile;

a virtual private network (VPN) profile;

a hardware profile;

or

a certificate profile.

48. The method according to claim 29, wherein the configuration settings include one or more policies and the policies define one or more actions to be executed in response to a detected event.

49. The method according to claim 48, wherein the policies include one or more of the following:

a VPN policy;

a proxy policy;

a blacklist policy;

a whitelist policy;

or

a report policy.

50. The method according to claim 49, wherein the policy is the VPN policy and the action includes the implementation of one or more VPN settings.

51. The method according to claim 49, wherein the policy is the proxy policy and the action includes the enablement of a proxy.

52. The method according to claim 49, wherein the policy is the blacklist policy and the action includes blocking the download or installation of an application.

53. The method according to claim 49, wherein the policy is the whitelist policy and the action includes allowing the download or installation of an application.

54. The method according to claim 49, wherein the policy is the report policy and the action includes reporting a characteristic of the portable computing device.

55. The method according to claim 29, further comprising presenting user identifications.

56. The method according to claim 55, further comprising managing user identifications by at least controlling the access of the user identifications.

57. A managed services portal, comprising:

one or more user interface elements configured to enable a user to make selections associated with the management of services for a first set of portable computing devices and to enable a user to make selections associated with the management of services for a second set of portable computing devices; and

a processor that is communicatively coupled to the user interface elements, wherein the processor is operable to;

receive a first request to determine a status of one or more of the portable computing devices of the first set or to cause an action to occur on one or more of the portable computing devices of the first set;

provide the status of the one or more portable computing devices of the first set or to effect the action on the one or more portable computing devices of the first set;

wherein the processor is further operable to provide the status of the one or more portable computing devices of the first set or to effect the action on the one or more portable computing devices of the first set on an individual basis, a group basis or a global basis;

receive a second request to determine a status of one or more of the portable computing devices of the second set or to cause an action to occur on one or more of the portable computing devices of the second set;

if authorized, provide the status of the one or more portable computing devices of the second set or to effect the action on the one or more portable computing devices of the second set;

wherein the processor is further operable to provide the status of the one or more portable computing devices of the second set or to effect the action on the one or more portable computing devices of the second set on an individual basis, a group basis or a global basis;

wherein the processor is further operable to cause the presentation of one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information includes configuration settings and applications and the applications are default applications and the processor is further operable to enable the applications to be designated as default applications for a bundle;

wherein at least some of the default applications are selected from a first application repository that is associated with and under the control of a first enterprise and a user of one of the portable computing devices from the first set of portable computing devices is associated with the first enterprise;

wherein at least some of the default applications are selected from a second application repository that is associated with and under the control of a second enterprise and a user of one of the portable computing devices from the second set of portable computing devices is associated with the second enterprise;

wherein the first enterprise controls the first application repository by at least determining which default applications are to be published in the first application repository;

wherein the second enterprise controls the second application repository by at least determining which default applications are to be published in the second application repository.

58. The managed services portal according to claim 57, wherein the first set of portable computing devices is associated with a first entity and the second set of portable computing devices is associated with a second entity.

59. The managed services portal according to claim 58, wherein the first entity is a managing entity responsible for operating the managed services portal.

60. The managed services portal according to claim 57, wherein a display is one of the user interface elements and the processor is further operable to cause the presentation of at least some of the portable computing devices of the second set on the display.

61. The managed services portal according to claim 57, further comprising a searching module that is configured to enable the portable computing devices of the second set to be searched individually or by groups.

62. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by generating a message for transmission to the portable computing devices and causing the delivery of the message to the portable computing devices.

63. The managed services portal according to claim 57, wherein the processor is further operable to provide the status of the one or more portable computing devices of the second set by causing the presentation of a listing that includes applications that are installed on a portable computing device of the second set or a listing that includes applications that are available to be installed on the portable computing device of the second set.

64. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by causing the installation of applications on the portable computing devices of the second set or causing the removal of applications from the portable computing devices of the second set.

65. The managed services portal according to claim 64, wherein the installation of applications and the removal of applications are executed in real-time or in accordance with a delivery schedule.

66. The managed services portal according to claim 57, wherein the processor is further operable to provide the status of the one or more portable computing devices of the second set by providing location information of the portable computing devices of the second set.

67. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by causing one or more of the following:

locking at least a portion of a portable computing device of the second set;

unlocking at least a portion of a portable computing device of the second set;

logging a user in a portable computing device of the second set;

logging a user out of a portable computing device of the second set;

wiping at least a portion of the data on a portable computing device of the second set;

restoring at least a portion of the data on a portable computing device of the second set that has been deleted from the portable computing device of the second set;

resetting a portable computing device of the second set to one or more default settings;

adding a user to a portable computing device of the second set;

removing a user from a portable computing device of the second set;

or

ringing a portable computing device of the second set.

68. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by causing the delivery of content to the one or more portable computing devices of the second set.

69. The managed services portal according to claim 68, wherein the content includes one or more configuration settings or a firmware package.

70. The managed services portal according to claim 68, wherein the delivery of content is executed in real-time or in accordance with a delivery schedule.

71. The managed services portal according to claim 57, wherein the processor is further operable to provide the status of the one or more portable computing devices of the second set by causing the presentation of user identifications that are associated with the portable computing devices of the second set.

72. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by controlling access to a portable computing device of the second set that is associated with one or more of the user identifications.

73. The managed services portal according to claim 57, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by causing the delivery of a bundle to the portable computing devices of the second set.

74. The managed services portal according to claim 73, wherein the processor is further operable to effect the action on the one or more portable computing devices of the second set by generating a modification signal in response to the information contained in a bundle being edited such that modifications of such information may be dynamically effected on portable computing devices of the second set that have already received the bundle.

75. The managed services portal according to claim 57, wherein the configuration settings include one or more of the following:

a password profile;

a wireless protocol profile;

a virtual private network (VPN) profile;

a hardware profile;

or

a certificate profile.

76. The managed services portal according to claim 57, wherein the configuration settings include one or more policies and the policies define one or more actions to be executed in response to a detected event.

77. The managed services portal according to claim 76, wherein the policies include one or more of the following:

a VPN policy;

a proxy policy;

a blacklist policy;

a whitelist policy;

or

a report policy.

78. The managed services portal according to claim 77, wherein the policy is the VPN policy and the action includes the implementation of one or more VPN settings;

wherein the policy is the proxy policy and the action includes the enablement of a proxy;

wherein the policy is the blacklist policy and the action includes blocking the download or installation of an application;

wherein the policy is the whitelist policy and the action includes allowing the download or installation of an application;

or

wherein the policy is the report policy and the action includes reporting a characteristic of the portable computing device.

79. The managed services portal according to claim 57, wherein the processor is further operable to cause the presentation of user identifications.

80. The managed services portal according to claim 79, wherein the processor is further operable to manage user identifications by at least controlling the access of the user identifications.

81. A method for managing services, comprising:

enabling a user to make selections associated with the management of services for one or more portable computing devices of a first set;

enabling the user to make selections associated with the management of services for one or more portable computing devices of a second set;

receiving a request to determine a status of one or more of the portable computing devices of the first set or to cause an action to occur on one or more of the portable computing devices of the first set;

providing the status of the one or more portable computing devices of the first set or effecting the action on the one or more portable computing devices of the first set;

wherein the status of the one or more portable computing devices of the first set is provided or the action on the one or more portable computing devices of the first set is effected on an individual basis, a group basis or a global basis;

receiving a second request to determine a status of one or more portable computing devices of the second set or to cause an action to occur on one or more of the portable computing devices of the second set;

if authorized, providing the status of the one or more portable computing devices of the second set or effecting the action on the one or more portable computing devices of the second set;

wherein the status of the one or more portable computing devices of the second set is provided or the action on the one or more portable computing devices of the second set is effected on an individual basis, a group basis or a global basis;

presenting one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information of the bundles includes configuration settings and applications and at least some of the applications are designated as default applications for the bundles; and

wherein at least some of the default applications are selected from a first application repository that is associated with and under the control of a first enterprise and a user of one of the portable computing devices from the first set of portable computing devices is an employee of the first enterprise;

wherein at least some of the default applications are selected from a second application repository that is associated with and under the control of a second enterprise and a user of one of the portable computing devices from the second set of portable computing devices is an employee of the second enterprise;

wherein the first enterprise controls the first application repository by at least determining which default applications are to be published in the first application repository;

wherein the second enterprise controls the second application repository by at least determining which default applications are to be published in the second application repository.

82. The method according to claim 81, wherein the first set of portable computing devices is associated with a first entity and the second set of portable computing devices is associated with a second entity.

83. The method according to claim 82, wherein the first entity is a managing entity responsible for operating the managed services portal.

84. The method according to claim 81, further comprising presenting at least some of the portable computing devices of the second set on the display.

85. The method according to claim 81, further comprising enabling the portable computing devices of the second set to be searched individually or by groups.

86. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by:

generating a message for transmission to the portable computing devices of the second set; and

causing the message to be sent to the portable computing devices of the second set.

87. The method according to claim 81, wherein the status of the one or more portable computing devices of the second set is provided by presenting of a listing that includes applications that are installed on a portable computing device of the second set or a listing that includes applications that are available to be installed on the portable computing device of the second set.

88. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by:

selectively causing the installation of applications on the portable computing devices of the second set;

or

selectively causing the removal of applications from the portable computing devices of the second set.

89. The method according to claim 88, wherein causing the installation of applications and the removal of applications is such that the installation and removal are executed in real-time or in accordance with a delivery schedule.

90. The method according to claim 81, wherein the status of the one or more portable computing devices of the second set is provided by providing location information of the portable computing devices of the second set.

91. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by one or more of the following:

locking at least a portion of a portable computing device of the second set;

unlocking at least a portion of a portable computing device of the second set;

logging a user in a portable computing device of the second set;

logging a user out of a portable computing device of the second set;

wiping at least a portion of the data on a portable computing device of the second set;

restoring at least a portion of the data on a portable computing device of the second set that has been deleted from the portable computing device of the second set;

resetting a portable computing device of the second set to one or more default settings;

adding a user to a portable computing device of the second set;

removing a user from a portable computing device of the second set;

or

ringing a portable computing device of the second set.

92. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by delivering content to the one or more portable computing devices of the second set.

93. The method according to claim 92, wherein the content includes one or more configuration settings or a firmware package.

94. The method according to claim 92, further comprising executing the delivery of content in real-time or in accordance with a delivery schedule.

95. The method according to claim 81, wherein the status of the one or more portable computing devices of the second set is provided by causing the presentation of user identifications that are associated with the portable computing devices of the second set.

96. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by controlling access to a portable computing device of the second set that is associated with one or more of the user identifications.

97. The method according to claim 81, wherein the action on the one or more portable computing devices of the second set is effected by causing a bundle to be sent to the portable computing devices of the second set.

98. The method according to claim 97, wherein the action on the one or more portable computing devices of the second set is effected by generating a modification signal in response to the information contained in a bundle being edited such that modifications of such information may be dynamically effected on portable computing devices of the second set that have already received the bundle.

99. The method according to claim 81, wherein the configuration settings include one or more of the following:

a password profile;

a wireless protocol profile;

a virtual private network (VPN) profile;

a hardware profile;

or

a certificate profile.

100. The method according to claim 81, wherein the configuration settings include one or more policies and the policies define one or more actions to be executed in response to a detected event.

101. The method according to claim 100, wherein the policies include one or more of the following:

a VPN policy;

a proxy policy;

a blacklist policy;

a whitelist policy;

or

a report policy.

102. The method according to claim 101, wherein the policy is the VPN policy and the action includes the implementation of one or more VPN settings;

wherein the policy is the proxy policy and the action includes the enablement of a proxy;

wherein the policy is the blacklist policy and the action includes blocking the download or installation of an application;

wherein the policy is the whitelist policy and the action includes allowing the download or installation of an application;

or

wherein the policy is the report policy and the action includes reporting a characteristic of the portable computing device.

103. The method according to claim 81, further comprising presenting user identifications.

104. The method according to claim 103, further comprising managing user identifications by at least controlling the access of the user identifications.

105. A managed services portal that is operated by a first entity, comprising:

one or more user interface elements configured to enable the first entity to make selections associated with the management of services for portable computing devices associated with a second entity; and

a processor that is communicatively coupled to the user interface elements, wherein the processor is operable to;

receive a request to determine a status of one or more of the portable computing devices of the second entity or to cause an action to occur on one or more of the portable computing devices of the second entity;

if authorized, provide the status of the one or more portable computing devices of the second entity or to effect the action on the one or more portable computing devices of the second entity;

wherein the processor is further operable to provide the status of the one or more portable computing devices of the second entity or to effect the action on the one or more portable computing devices of the second entity on an individual basis, a group basis or a global basis;

wherein the processor is further operable to cause the presentation of one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information includes configuration settings and applications and at least some of the applications are default applications and the processor is further operable to enable an application to be designated as a default application for a bundle;

wherein at least some of the default applications are selected from an application repository that is associated with and under the control of the second entity and the user of the portable computing device is associated with the second entity;

wherein the second entity controls the application repository by at least determining which default applications are to be published in the application repository.

106. A method for managing services, comprising:

enabling a management entity to make selections associated with the management of services for one or more portable computing devices associated with a second entity;

receiving a request from the management entity to determine a status of one or more of the portable computing devices of the second entity or to cause an action to occur on one or more of the portable computing devices of the second entity;

if authorized and in response to the request, providing the status of the one or more portable computing devices of the second entity or effecting the action on the one or more portable computing devices of the second entity;

wherein the status of the one or more portable computing devices of the second entity is provided or the action on the one or more portable computing devices of the second entity is effected on an individual basis, a group basis or a global basis;

presenting one or more bundles, wherein the bundles are assigned to one or more performance functions and the bundles contain information that is based on the assigned performance functions;

wherein the information of the bundles includes configuration settings and applications and at least some of the applications are designated as default applications; and

selecting at least some of the default applications from an application repository that is associated with and under the control of the second entity and the user of the portable computing device is associated with the second entity;

wherein the second entity controls the application repository by at least determining which default applications are to be published in the application repository.