Providing mobile device management functionalities

• US 8,849,979 B1
• Filed: 09/20/2013
• Issued: 09/30/2014
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Qureshi, Waheed
• Primary Examiner(s): Serrao, Ranodhi
• Application Number:
  US14/032,756
• Publication Number:
  US 20140297839A1
• Time in Patent Office: 375 Days
• Field of Search: None
• US Class Current: 709/223
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2876 Handling of subscriber policies group policies management H04L41/0893
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/34 Signalling channels for network management communication
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/37 : Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/63 : Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 : using geofenced areas
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring

Abstract

Methods, systems, computer-readable media, and apparatuses for providing mobile device management functionalities are presented. In various embodiments, a mobile device management agent may monitor state information associated with a mobile computing device. The monitored state information may be analyzed on the mobile computing device and/or by one or more policy management servers. In some instances, the one or more policy management servers may provide management information to the mobile computing device, and the management information may include one or more commands (which may, e.g., cause the mobile computing device to enforce one or more policies) and/or one or more policy updates. Subsequently, one or more policies may be enforced on the mobile computing device based on the monitored state information and/or based on the management information.

Claims

1. A method, comprising:

monitoring, by a mobile device management agent, state information associated with a mobile computing device;

providing, by the mobile device management agent, at least some of the monitored state information to one or more policy management servers;

receiving management information from the one or more policy management servers, the management information including one or more commands specifying that at least one mode of the multi-mode application should be disabled;

selectively disabling one or more modes of a multi-mode application based on the management information received from the one or more policy management servers; and

prior to selectively disabling the one or more modes of the multi-mode application;

evaluating a current usage mode of the mobile computing device based on the monitored state information; and

based on the evaluating, determining to selectively disable at least one mode of the multi-mode application,

wherein the multi-mode application is a dual-mode application having a managed mode that is configured to provide access to enterprise data and an unmanaged mode that is configured to limit access to non-enterprise data.

2. The method of claim 1, wherein monitoring the state information includes identifying one or more applications that are present on the mobile computing device.

3. The method of claim 1, wherein monitoring the state information includes identifying one or more network connections that are used by the mobile computing device.

4. The method of claim 1, wherein monitoring the state information includes determining current location information for the mobile computing device.

5. A mobile computing device, comprising:

at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the mobile computing device to;

monitor, via a mobile device management agent, state information associated with the mobile computing device;

provide, by the mobile device management agent, at least some of the monitored state information to one or more policy management servers;

receive management information from the one or more policy management servers, the management information including one or more commands specifying that at least one mode of the multi-mode application should be disabled;

selectively disable one or more modes of a multi-mode application based on the management information received from the one or more policy management servers; and

prior to selectively disabling the one or more modes of the multi-mode application;

evaluate a current usage mode of the mobile computing device based on the monitored state information; and

based on the evaluating, determine to selectively disable at least one mode of the multi-mode application,

wherein the multi-mode application is a dual-mode application having a managed mode that is configured to provide access to enterprise data and an unmanaged mode that is configured to limit access to non-enterprise data.

6. The mobile computing device of claim 5, wherein monitoring the state information includes identifying one or more applications that are present on the mobile computing device.

7. The mobile computing device of claim 5, wherein monitoring the state information includes identifying one or more network connections that are used by the mobile computing device.

8. The mobile computing device of claim 5, wherein monitoring the state information includes determining current location information for the mobile computing device.

9. One or more non-transitory computer-readable media having instructions stored thereon that, when executed, cause a mobile computing device to:

monitor, via a mobile device management agent, state information associated with the mobile computing device;

provide, by the mobile device management agent, at least some of the monitored state information to one or more policy management servers;

receive management information from the one or more policy management servers, the management information including one or more commands specifying that at least one mode of the multi-mode application should be disabled;

selectively disable one or more modes of a multi-mode application based on the management information received from the one or more policy management servers; and

prior to selectively disabling the one or more modes of the multi-mode application;

evaluate a current usage mode of the mobile computing device based on the monitored state information; and

based on the evaluating, determine to selectively disable at least one mode of the multi-mode application,

wherein the multi-mode application is a dual-mode application having a managed mode that is configured to provide access to enterprise data and an unmanaged mode that is configured to limit access to non-enterprise data.

10. The one or more non-transitory computer-readable media of claim 9, wherein monitoring the state information includes identifying one or more applications that are present on the mobile computing device.

11. The one or more non-transitory computer-readable media of claim 9, wherein monitoring the state information includes identifying one or more network connections that are used by the mobile computing device.

12. The one or more non-transitory computer-readable media of claim 9, wherein monitoring the state information includes determining current location information for the mobile computing device.