Providing mobile device management functionalities

• US 8,813,179 B1
• Filed: 09/20/2013
• Issued: 08/19/2014
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Qureshi, Waheed
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US14/032,706
• Time in Patent Office: 333 Days
• Field of Search: 726/1
• US Class Current: 726/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements

Abstract

Methods, systems, computer-readable media, and apparatuses for providing mobile device management functionalities are presented. In various embodiments, a mobile device management agent may monitor state information associated with a mobile computing device. The monitored state information may be analyzed on the mobile computing device and/or by one or more policy management servers. In some instances, the one or more policy management servers may provide management information to the mobile computing device, and the management information may include one or more commands (which may, e.g., cause the mobile computing device to enforce one or more policies) and/or one or more policy updates. Subsequently, one or more policies may be enforced on the mobile computing device based on the monitored state information and/or based on the management information.

Claims

1. A method, comprising:

receiving, by a first computing device, a request to initiate a device cloud with a second computing device;

determining, by the first computing device, based on one or more policies and device state information, whether the device cloud can be initiated with the second computing device, wherein determining whether the device cloud can be initiated includes providing state information to one or more policy management servers and receiving management information from the one or more policy management servers; and

in response to determining that the device cloud can be initiated with the second computing device, establishing, by the first computing device, a connection to the second computing device to initiate the device cloud,

wherein at least one policy of the one or more policies is received from a policy management server,

wherein the device cloud extends functionality of the second computing device to the first computing device to enable the first computing device and the second computing device to be used in combination to perform a single function,

wherein an orchestration engine executing on the first computing device manages interactions between the first computing device and the second computing device after the device cloud is initiated,

wherein the first computing device is located within a predetermined distance of the second computing device,

wherein the device cloud is configured to dynamically link functionalities of the first computing device and the second computing device,

wherein the device cloud is configured to provide at least one function that is not supported by the first computing device, the at least one function being supported by the second computing device,

wherein the management information includes one or more commands generated by the one or more policy management servers, for execution by the first computing device, based on the state information provided by the first computing device to the one or more policy management servers, and

wherein the state information provided by the first computing device to the one or more policy management servers includes state information obtained from the second computing device.

2. The method of claim 1, further comprising:

in response to determining that the device cloud cannot be initiated with the second computing device, generating, by the first computing device, a notification message.

3. The method of claim 1,

wherein the first computing device is configured to execute a mobile device management agent that is configured to monitor state information associated with the first computing device, and

wherein determining whether the device cloud can be initiated with the second computing device is based on at least some of the state information monitored by the mobile device management agent.

4. The method of claim 1, wherein the management information includes one or more policy updates.

5. The method of claim 1, further comprising:

configuring, by the first computing device, the second computing device based on the one or more policies and the device state information.

6. The method of claim 1, further comprising:

enforcing, by the first computing device, at least one policy of the one or more policies on the device cloud.

7. The method of claim 6, wherein enforcing the at least one policy includes allowing at least a portion of an application being executed on the first computing device to be executed on the second computing device.

8. The method of claim 6, wherein enforcing the at least one policy includes restricting at least a portion of an application being executed on the first computing device to being executed on the second computing device.

9. The method of claim 1,

wherein the device cloud is configured to dynamically link the functionalities of the first computing device and the second computing device to provide a video conference.

10. The method of claim 1, wherein the one or more commands include information indicating that the first computing device is permitted to initiate the device cloud with the second computing device.

11. The method of claim 1, wherein the at least one policy of the one or more policies received from the policy management server defines specific circumstances in which the device cloud is permitted to be initiated.

12. A first computing device, comprising:

at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the first computing device to;

receive a request to initiate a device cloud with a second computing device;

determine, based on one or more policies and device state information, whether the device cloud can be initiated with the second computing device, wherein determining whether the device cloud can be initiated includes providing state information to one or more policy management servers and receiving management information from the one or more policy management servers; and

in response to determining that the device cloud can be initiated with the second computing device, establish a connection to the second computing device to initiate the device cloud,

wherein at least one policy of the one or more policies is received from a policy management server,

wherein the device cloud extends functionality of the second computing device to the first computing device to enable the first computing device and the second computing device to be used in combination to perform a single function,

wherein an orchestration engine executing on the first computing device manages interactions between the first computing device and the second computing device after the device cloud is initiated,

wherein the first computing device is located within a predetermined distance of the second computing device,

wherein the device cloud is configured to dynamically link functionalities of the first computing device and the second computing device,

wherein the device cloud is configured to provide at least one function that is not supported by the first computing device, the at least one function being supported by the second computing device,

wherein the management information includes one or more commands generated by the one or more policy management servers, for execution by the first computing device, based on the state information provided by the first computing device to the one or more policy management servers, and

wherein the state information provided by the first computing device to the one or more policy management servers includes state information obtained from the second computing device.

13. The computing device of claim 12, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the first computing device to:

configure the second computing device based on the one or more policies and the device state information, wherein configuring the second computing device includes imposing one or more restrictions on at least one network connection that is usable by the second computing device during the device cloud.

14. The computing device of claim 12, wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, further cause the first computing device to:

enforce at least one policy of the one or more policies on the device cloud, wherein enforcing the at least one policy includes allocating a first role to the first computing device and allocating a second role to the second computing device, the second role being different from the first role.

15. The computing device of claim 14, wherein enforcing the at least one policy includes allowing at least a portion of an application being executed on the first computing device to be executed on the second computing device.

16. The computing device of claim 14, wherein enforcing the at least one policy includes restricting at least a portion of an application being executed on the first computing device to being executed on the second computing device.

17. One or more non-transitory computer-readable media having instructions stored thereon that, when executed, cause a first computing device to:

receive a request to initiate a device cloud with a second computing device;

determine, based on one or more policies and device state information, whether the device cloud can be initiated with the second computing device, wherein determining whether the device cloud can be initiated includes providing state information to one or more policy management servers and receiving management information from the one or more policy management servers; and

in response to determining that the device cloud can be initiated with the second computing device, establish a connection to the second computing device to initiate the device cloud,

wherein at least one policy of the one or more policies is received from a policy management server,

wherein the device cloud extends functionality of the second computing device to the first computing device to enable the first computing device and the second computing device to be used in combination to perform a single function,

wherein an orchestration engine executing on the first computing device manages interactions between the first computing device and the second computing device after the device cloud is initiated,

wherein the first computing device is located within a predetermined distance of the second computing device,

wherein the device cloud is configured to dynamically link functionalities of the first computing device and the second computing device,

wherein the device cloud is configured to provide at least one function that is not supported by the first computing device, the at least one function being supported by the second computing device,

wherein the management information includes one or more commands generated by the one or more policy management servers, for execution by the first computing device, based on the state information provided by the first computing device to the one or more policy management servers, and

wherein the state information provided by the first computing device to the one or more policy management servers includes state information obtained from the second computing device.