Managed clone applications

• US 9,785,425 B2
• Filed: 09/30/2014
• Issued: 10/10/2017
• Est. Priority Date: 09/30/2014
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Stuntebeck, Erich Peter, Tse, Kar Fai
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): STEINLE, ANDREW J
• Application Number:
  US14/501,888
• Publication Number:
  US 20160094538A1
• Time in Patent Office: 1,106 Days
• Field of Search: None
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

Disclosed are various embodiments relating to managed clones of applications. In one embodiment, an application is received. If it is determined that the application should be managed, a managed clone of the application is generated. The managed clone of the application is configured for coexistence along with the application upon a client device under management. The managed clone of the application may then be deployed to the client device under management.

Claims

1. A non-transitory computer-readable medium embodying a program executable in at least one computing device, comprising:

code that receives an application, the application being publicly available via an application distribution environment;

code that generates a managed clone of the application by at least;

generating a different package name for the managed clone of the application, the different package name differing from an original package name of the application;

adding a management wrapper to the application to enforce a restriction; and

repackaging the application to use the different package name;

code that deploys the managed clone of the application to a mobile client device;

code that instructs the mobile client device executing a single mobile operating system to install the managed clone of the application on the single mobile operating system, without uninstalling the application from the single mobile operating system; and

code that instructs the mobile client device on when to switch between executing the application and the managed clone of the application based on one or more compliance rules established remotely by an administrator and provided to the mobile client device.

2. The non-transitory computer-readable medium of claim 1, wherein the code that generates the managed clone of the application further comprises:

code that generates a different database name for the managed clone of the application, the different database name differing from an original database name of the application, wherein the application is repackaged to use the different database name; and

code that generates a different account name for the managed clone of the application, the different account name differing from an original account name of the application, wherein the application is repackaged to use the different account name.

3. The non-transitory computer-readable medium of claim 1, wherein the code that generates the managed clone of the application further comprises:

code that modifies a manifest file of the application; and

code that modifies binary code of the application.

4. The non-transitory computer-readable medium of claim 1, further comprising code that determines whether to create the managed clone of the application based at least in part on application usage data associated with a plurality of users in an organization.

5. A method, comprising:

receiving an application, the application being publicly available via an application distribution environment;

generating a managed clone of the application by at least;

generating a different package name for the managed clone of the application, the different package name differing from an original package name of the application;

adding a management wrapper to the application to enforce a restriction; and

repackaging the application to use the different package name;

deploying the managed clone of the application to a mobile client device;

instructing the mobile client device executing a single mobile operating system to install the managed clone of the application on the single mobile operating system, without uninstalling the application from the single mobile operating system; and

instructing the mobile client device on when to switch between executing the application and the managed clone of the application based on one or more compliance rules established remotely by an administrator and provided to the mobile client device.

6. The method of claim 5, wherein generating the managed clone of the application further comprises:

generating a different database name for the managed clone of the application, the different database name differing from an original database name of the application, wherein the application is repackaged to use the different database name; and

generating a different account name for the managed clone of the application, the different account name differing from an original account name of the application, wherein the application is repackaged to use the different account name.

7. The method of claim 5, wherein generating the managed clone of the application further comprises:

modifying a manifest file of the application; and

modifying binary code of the application.

8. The method of claim 5, further comprising determining whether to create the managed clone of the application based at least in part on application usage data associated with a plurality of users in an organization.

9. A system comprising a processor and a memory, the system being configured to at least:

receive, using the processor and the memory, an application, the application being publicly available via an application distribution environment;

generate, using the processor and the memory, a managed clone of the application by at least;

generating, using the processor and the memory, a different package name for the managed clone of the application, the different package name differing from an original package name of the application;

adding, using the processor and the memory, a management wrapper to the application to enforce a restriction; and

repackaging, using the processor and the memory, the application to use the different package name;

deploy, using the processor and the memory, the managed clone of the application to a mobile client device;

instruct the mobile client device executing a single mobile operating system to install the managed clone of the application on the single mobile operating system, without uninstalling the application from the single mobile operating system; and

instruct the mobile client device on when to switch between executing the application and the managed clone of the application based on one or more compliance rules established remotely by an administrator and provided to the mobile client device.

10. The system of claim 9, wherein the processor and the memory are further configured to:

generate a different database name for the managed clone of the application, the different database name differing from an original database name of the application, wherein the application is repackaged to use the different database name; and

generate a different account name for the managed clone of the application, the different account name differing from an original account name of the application, wherein the application is repackaged to use the different account name.

11. The system of claim 9, wherein the processor and the memory are further configured to:

modify a manifest file of the application; and

modify binary code of the application.

12. The system of claim 11, where the processor and the memory are further configured to determine whether to create the managed clone of the application based at least in part on application usage data associated with a plurality of users in an organization.