User interface for secure virtual document management system

• US 9,830,468 B2
• Filed: 07/23/2015
• Issued: 11/28/2017
• Est. Priority Date: 01/06/2012
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: MobileIron, Inc.
• Inventors: Drewry, John, Sharma, Rahul, Cribb, Gary, Ashwin, Pronob
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US14/807,791
• Publication Number:
  US 20160026818A1
• Time in Patent Office: 859 Days
• CPC Class Codes: G06F 16/168 Details of user interfaces specifically adapted to file systems, e.g. browsing and visualisation, 2d or 3d GUIs query results presentation G06F16/156
• CPC Class Codes: G06F 16/188 Virtual file systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 9/451 Execution arrangements for user interfaces
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A user interface for a virtual file management system that provides user access to managed content on mobile devices. The system comprises storage domains storing the managed content distributively using file systems, and a data infrastructure that organizes the managed content into a virtual file system. The data infrastructure includes a component that maintains policies defining controls for permissible operations on the managed content, the permissible operations including the file system primitives. A client application including a user interface is hosted on the mobile devices and is coupled to the data infrastructure and the storage domains and includes an enforcement component that retrieves and enforces the policies by applying the controls on the mobile devices.

Claims

1. A method comprising:

obtaining, by a client application running on a mobile device, one or more policies from a data infrastructure that organizes managed content into a virtual file system, wherein the managed content comprises content distributively stored across a plurality of storage domains using one or more file systems, and wherein the one or more policies define controls for operations on the managed content;

providing, by the client application running on the mobile device, access to the managed content through a user interface;

enforcing, by the client application running on the mobile device, the one or more policies that define controls for operations on the managed content; and

retrieving, by the client application, information of the virtual file system, wherein the client application provides the access to the managed content by processing data requests using permissible operations, and wherein the client application exposes the permissible operations and the information of the virtual file system to one or more mobile applications that run on the mobile device.

2. The method of claim 1, wherein the client application provides access to the managed content stored on one or more of the plurality of storage domains such that a corresponding access operation is transmitted from the mobile device directly to the one or more of the plurality of storage domains.

3. The method of claim 2, wherein the corresponding access operation transmitted from the mobile device is transmitted such that the corresponding access operation is intercepted by the data infrastructure.

4. The method of claim 1, further comprising:

displaying, by the user interface, a plurality of icons respectively associated with one of the one or more file systems.

5. The method of claim 1, wherein the client application includes a search feature for performing a global search across a plurality of the one or more file systems.

6. The method of claim 1, further comprising:

receiving, by the user interface, an input associated with a search query; and

in response to the input associated with the search query being received, performing, by the client application, a global search across a plurality of the one or more file systems according to the search query.

7. The method of claim 1, further comprising:

managing the one or more policies received from the data infrastructure.

8. The method of claim 7, wherein the managing of the one or more policies received from the data infrastructure comprises:

in response to receiving a predefined input from a user, displaying, by the client application, a list of current policies configured for the user.

9. The method of claim 1, wherein the one or more policies are defined in relation to an enterprise domain, wherein the plurality of storage domains include one or more third-party storage domains, and wherein the one or more policies are enforced by the client application so as to extend controls for permissible operations to operations associating with accessing content stored on the one or more third-party storage domains.

10. A device, comprising:

one or more processors configured to;

obtain, by a client application running on the device, one or more policies from a data infrastructure that organizes managed content into a virtual file system, wherein the managed content comprises content distributively stored across a plurality of storage domains using one or more file systems, and wherein the one or more policies define controls for operations on the managed content;

provide, by the client application running on the device, access to the managed content through a user interface;

enforce, by the client application running on the device, the one or more policies that define controls for operations on the managed content; and

retrieve information of the virtual file system, wherein access to the managed content is provided by processing data requests using permissible operations, and wherein permissible operations and the information of the virtual file system are exposed to one or more mobile applications running on the device; and

a memory coupled to the one or more processors and configured to provide the one or more processors with instructions.

11. The device of claim 10, wherein the one or more processors are further configured to provide access to the managed content stored on one or more of the plurality of storage domains such that a corresponding access operation is transmitted from the device directly to the one or more of the plurality of storage domains.

12. The device of claim 11, wherein the one or more processors are configured to transmit the corresponding access operation such that the corresponding access operation is intercepted by the data infrastructure.

13. The device of claim 10, wherein the one or more processors are further configured to:

display, on the user interface, a plurality of icons respectively associated with one of the one or more file systems.

14. The device of claim 10, wherein the one or more processors are further configured to:

receive an input associated with a search query that is input to the user interface; and

in response to the input associated with the search query being received, perform a global search across a plurality of the one or more file systems according to the search query.

15. The device of claim 10, wherein the one or more processors are further configured to manage one or more policies received from the data infrastructure.

16. The device of claim 10, wherein the one or more processors are further configured to manage the one or more policies so as to display a list of current policies configured for a user in response to receiving a predefined input from the user.

17. The device of claim 10, wherein the one or more policies are defined in relation to an enterprise domain, wherein the plurality of storage domains include one or more third-party storage domains, and wherein the one or more processors are further configured to enforce the one or more policies so as to extend controls for permissible operations to operations associating with accessing content stored on the one or more third-party storage domains.

18. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

obtaining, by a client application running on a mobile device, one or more policies from a data infrastructure that organizes managed content into a virtual file system, wherein the managed content comprises content distributively stored across a plurality of storage domains using one or more file systems, and wherein the one or more policies define controls for operations on the managed content;

providing, by the client application running on the mobile device, access to the managed content through a user interface;

enforcing, by the client application running on the mobile device, wherein the one or more policies that define controls for operations on the managed content; and

retrieving, by the client application, information of the virtual file system, wherein the client application provides the access to the managed content by processing data requests using permissible operations, and wherein the client application exposes the permissible operations and the information of the virtual file system to one or more mobile applications that run on the mobile device.