Data communications management

• US 9,226,155 B2
• Filed: 09/06/2013
• Issued: 12/29/2015
• Est. Priority Date: 07/25/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Stuntebeck, Erich
• Primary Examiner(s): Batista, Marcos
• Application Number:
  US14/019,667
• Publication Number:
  US 20140004832A1
• Time in Patent Office: 844 Days
• Field of Search: 455/411, 370/338
• US Class Current: 1/1
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 12/145 trading network capacity or selecting route based on tariff
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04M 15/43 Billing software details
• CPC Class Codes: H04M 15/66 Policy and charging system
• CPC Class Codes: H04M 15/80 Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8055 Selecting cheaper transport technology for a given service
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Methods, systems, apparatuses, and/or computer-readable media for providing device management via application modification may be provided. In some embodiments, upon identifying an available wireless network, a determination may be made as to whether the available wireless network comprises an authorized wireless network. In response to determining that the available wireless network comprises the authorized wireless network, a connection may be established with the available wireless network and at least one data communication may be performed via the available wireless network instead of a second network.

Claims

1. A method comprising:

identifying an available wireless network;

determining whether the available wireless network comprises a second network that fails to support a minimum security level that is supported by an authorized wireless network; and

in response to determining that the available wireless network comprises the second network;

determining whether a user associated with a client device is associated with an elevated priority based at least in part upon an amount of time since a previous connection with a compliance server or whether a location of the client device is within a specified location;

causing a connection to be established with the available wireless network in response to the user being associated with the elevated priority; and

causing at least one data communication to be performed through the second network, the at least one data communication comprising a device check-in with the compliance server.

2. The method of claim 1, wherein determining whether the available wireless network comprises the second network comprises determining whether an identifier associated with the available wireless network is not included in a list of authorized wireless network identifiers.

3. The method of claim 2, wherein the list of authorized wireless network identifiers is associated with a master license agreement.

4. The method of claim 1, wherein determining whether the available wireless network comprises the second network comprises determining whether the available wireless network fails to comply with at least one management rule.

5. The method of claim 1, wherein the second network comprises a telephony-based network.

6. The method of claim 1, wherein the second network comprises a cellular data network.

7. The method of claim 1, wherein the available wireless network comprises an 802.11 wireless network.

8. The method of claim 1, wherein causing the at least one data communication to be performed through the second network further comprises modifying the intercepted at least one data communication into a different format.

9. The method of claim 1, wherein causing the at least one data communication to be performed through the second network comprises modifying an application to redirect the at least one data communication.

10. An apparatus comprising:

a memory storage; and

a processor coupled to the memory storage, wherein the processor is configured to;

identify at least one available wireless network;

determine whether the at least one available wireless network comprises a second network that fails to support a minimum security level that is supported by an authorized wireless network; and

in response to determining that the at least one available wireless network comprises the second network;

determine whether a user associated with a client device is associated with an elevated priority based at least in part upon an amount of time since a previous connection with a compliance server or whether a location of the client device is within a specified location;

establish a connection with the at least one available wireless network in response to the user being associated with the elevated priority; and

cause at least one data communication to be performed through the second network, the at least one data communication comprising a device check-in with the compliance server.

11. The apparatus of claim 10, wherein the processor being configured to identify the at least one available wireless network comprises being configured to detect a wireless network access point in communicative range of the apparatus comprising a minimally acceptable signal strength.

12. The apparatus of claim 10, wherein the processor being configured to cause at least one data communication to be performed through the second network comprises the processor being configured to modify at least one application executing on the apparatus to redirect data communications associated with the at least one application to the second network.

13. The apparatus of claim 12, wherein the processor is further configured to display a notification associated with the modification of the at least one application.

14. A non-transitory computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

identifying a plurality of available wireless networks;

determining whether at least one of the plurality of available wireless networks comprises a second network that fails to support a minimum security level that is supported by an authorized wireless network; and

in response to determining that the at least one of the plurality of available wireless network comprises the second network;

determining whether a user associated with a client device is associated with an elevated priority based at least in part upon an amount of time since a previous connection with a compliance server or whether a location of the client device is within a specified location;

causing a connection to be established with the at least one of the plurality of available wireless networks in response to the user being associated with the elevated priority; and

causing at least one data communication to be performed through the second network, the at least one data communication comprising a device check-in with the compliance server.

15. The non-transitory computer-readable medium of claim 14, wherein the method executed by the set of instructions further comprises:

modifying the at least one data communication prior to causing the at least one data communication to be performed via the second network.

16. The non-transitory computer-readable medium of claim 14, wherein identifying the at least one available wireless network comprises being configured to detect a wireless network access point in communicative range at a minimally acceptable signal strength.

17. The non-transitory computer-readable medium of claim 14, wherein causing at least one data communication to be performed through the second network further comprises modifying at least one application executing on the client device to redirect data communications associated with the at least one application to the second network.

18. The non-transitory computer-readable medium of claim 17, wherein the method executed by the set of instructions further comprises displaying a notification associated with the modification of the at least one application.