Mobile information management methods and systems

• US 9,280,660 B2
• Filed: 03/13/2014
• Issued: 03/08/2016
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Cognizant Business Services Ltd. (Cognizant Technology Solutions Corp.)
• Original Assignee: Cognizant Business Services Ltd. (Cognizant Technology Solutions Corp.)
• Inventors: Velammal, Parasu Pillai Iyappan, Sridharan, Narayn, Nageswar, Mathangi, Ganapathy, HariPrashanth
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US14/209,307
• Publication Number:
  US 20140282853A1
• Time in Patent Office: 726 Days
• Field of Search: 726/1
• US Class Current: 1/1
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A system and method are disclosed for mobile information management using a code injection approach. The method for information management of applications includes the steps of: receiving, by a computer, one or more compiled applications, and receiving, by a computer, one or more security policies, wherein each security policy indicates one or more use cases and one or more security actions associated with each use case. The method also includes the step of associating the received applications with the one or more received security policies. Additionally, the method includes the step of automatically wrapping the received applications with the associated security policy using a code injection script.

Claims

1. An application information management security system comprising:

a governance console configured to store one or more security policies, wherein each security policy;

corresponds to one or more applications intended for one or more computing devices, and

indicates one or more potential use cases and one or more corresponding security actions;

a security console configured to;

receive, by a computer, compiled applications;

automatically wrap each of the received compiled applications with one or more security policies using a code injection script, wherein the code injection script comprises computer readable program code that causes the security console to inject one or more skeleton code snippets into at least one of a native file and a manifest file of the one or more received applications.

2. The application information management security system of claim 1 further comprising an application distribution console configured to distribute the one or more wrapped applications onto one or more computing devices.

3. The application information management security system of claim 2, wherein at run time of one or more wrapped applications distributed to one or more computing devices by the application distribution console, the one or more wrapped distributed applications optionally download a stream of behavior, transaction, and/or security instructions from the security console.

4. The application information management security system of claim 1, wherein the governance console further comprises an admin portal user interface for setting, managing, monitoring, and viewing the one or more stored security policies corresponding to the one or more received applications.

5. The application information management security system of claim 1, wherein the code injection script comprises computer readable program code that causes the security console to inject one or more dynamic headers into the one or more received applications.

6. The application information management security system of claim 2, wherein the security console is further configured to detect relevant events from computing devices executing one or more of the compiled applications wrapped with the one or more security policies, wherein the events comprise one or more functionalities being employed on the computing device, location of the computing device, time of use of the device, and receipt of appropriate security credentials.

7. The application information management security system of claim 6, wherein the security console is further configured to compare the detected relevant event to the one or more stored security policies and take one or more appropriate actions if the relevant event matches a specified number of conditions specified by one or more of the stored security policies.

8. The application information management security system of claim 2, wherein the security console is further configured to update an existing security policy for one or more of the received applications and the application distribution console is configured to deploy the new security policy.

9. The application information management security system of claim 1, wherein the one or more security actions and/or potential use cases comprise one or more of the following:

geographic fencing, data security, disable features, encryption, jail-break detection, time-based restriction, and date based restriction.

10. A method for information management of applications, the method comprising:

receiving, by a computer, one or more compiled applications;

receiving, by a computer, one or more security policies, wherein each security policy indicates one or more use cases and one or more security actions associated with each use case;

associating the received applications with the one or more received security policies; and

,

automatically wrapping the received applications with the associated security policy using a code injection script, wherein the automatically wrapping step further comprises injecting one or more skeleton code snippets into at least one of a native file and a manifest file of the one or more received applications.

11. The method of claim 10 further comprising distributing one or more of the wrapped applications onto one or more computing devices.

12. The method of claim 11, further comprising transmitting a stream of behavior, transaction, and/or security instructions to the one or more computing devices executing the one or more distributed wrapped applications.

13. The method of claim 10, further comprising setting, managing, monitoring, and viewing the one or more received security policies and the one or more received applications associated with the received security policies.

14. The method of claim 10, wherein the automatically wrapping step further comprises injecting one or more dynamic headers into the one or more received applications.

15. The method of claim 11, further comprising detecting relevant events from the computing devices executing one or more of the distributed wrapped applications, wherein the events comprise one or more functionalities being employed on the computing device, location of the computing device, time of use of the device, and receipt of appropriate security credentials.

16. The method of claim 15, further comprising comparing the detected relevant event to the one or more stored security policies and taking one or more appropriate actions if the relevant event matches a specified number of conditions specified by one or more of the stored security policies.

17. The method of claim 11, further comprising updating an existing security policy for one or more of the distributed wrapped applications.

18. The method of claim 10, wherein the one or more security actions and/or potential use cases comprise one or more of the following:

geographic fencing, data security, disable features, encryption, jail-break detection, time-based restriction, and date based restriction.