Dynamic registration of an application with an enterprise system

• US 10,057,335 B2
• Filed: 07/17/2017
• Issued: 08/21/2018
• Est. Priority Date: 05/28/2013
• Status: Active Grant

• Current Assignee: VMware, Inc. (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Xu, Emily Hong
• Primary Examiner(s): Eskandarnia, Arvin
• Application Number:
  US15/651,240
• Publication Number:
  US 20170318079A1
• Time in Patent Office: 400 Days
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/08 Access security

Abstract

A computer-implemented method for automatically registering an application with an enterprise system. The method includes, obtaining the application associated with the enterprise system, wherein the application is pre-configured for subsequent registration with the enterprise system such that the registration establishes a trust relationship between the application and the enterprise system. The method further includes installing the application on a host device, and in conjunction with installing the application, automatically requesting the registration of the application with the enterprise system.

Claims

1. A computer-implemented method for automatically registering an application with an enterprise system, said computer-implemented method comprising:

obtaining said application associated with said enterprise system, wherein said application is pre-configured for subsequent registration with said enterprise system, wherein a request for a registration comprises;

a product identification;

a device identification;

a requested scope of access; and

an application redirect uniform resource locator (URL), such that said registration establishes a trust relationship between said application and said enterprise system;

installing said application on a host device; and

in conjunction with said installing of said application, automatically requesting said registration of said application with said enterprise system.

2. The computer-implemented method of claim 1, wherein said installing said application on a host device further comprises:

installing a mobile application on a mobile device.

3. The computer-implemented method of claim 1, wherein said automatically requesting said registration of said application further comprises:

automatically requesting registration of said application with an authorization server.

4. The computer-implemented method of claim 1, further comprising:

receiving permission to access resources in said enterprise system.

5. The computer-implemented method of claim 1, further comprising:

sending a one-time access code to an authorization server.

6. The computer-implemented method of claim 1, further comprising:

receiving a client identification and client secret from an authorization server.

7. The computer-implemented method of claim 1, further comprising:

providing an access token to access resources in said enterprise system.

8. The computer-implemented method of claim 1, further comprising:

securely accessing resources by a mobile device, wherein said mobile device is outside a firewall of said enterprise system.

9. A computer-implemented method for automatically registering an application with an enterprise system, said computer-implemented method comprising:

receiving an automatically generated request to register said application with said enterprise system, wherein said automatically generated request comprises one or more of;

a product identification, a device identification, a requested scope of access, and an application redirect uniform resource locator (URL), such that a registration establishes a trust relationship between said application and said enterprise system, and said automatically generated request received in conjunction with installation of said application on a host device, wherein said application is pre-configured to automatically generate said automatically generated request to register with said enterprise system; and

registering said application with said enterprise system.

10. The computer-implemented method of claim 9, wherein said receiving an automatically generated request to register said application further comprises:

receiving an automatically generated request to register a mobile application.

11. The computer-implemented method of claim 9, wherein said receiving an automatically generated request to register further comprises one or more of:

product identification, device identification, requested scope of access, and a redirect uniform resource locator (URL).

12. The computer-implemented method of claim 9, wherein said registering said application with said enterprise system further comprises:

registering a mobile application with an authorization server.

13. The computer-implemented method of claim 9, further comprising:

receiving a one-time access code from a mobile application.

14. The computer-implemented method of claim 9, further comprising:

sending a client identification and client secret to a mobile application.

15. The computer-implemented method of claim 9, further comprising:

receiving an access token from said application such that said application is enabled to access resources in said enterprise system.

16. The computer-implemented method of claim 9, further comprising:

securely enabling access to resources by a mobile device, wherein said mobile device is outside a firewall of said enterprise system.

17. A method for reducing manual input associated with registering an application with an enterprise system, said method comprising:

allowing access to an application wherein said application is pre-configured to automatically request registration with said enterprise system in conjunction with installing of said application on a host device, said application pre-populated with registration information such that a user is no longer required to manually enter said registration information, wherein said registration information comprises a product identification, a device identification, a requested scope of access, and an application redirect uniform resource locator (URL), such that a registration establishes a trust relationship between said application and said enterprise system; and

reducing manual input associated with said registering said application based on said user no longer required to manually enter said registration information.

18. The method of claim 17, wherein said allowing access to an application further comprises:

allowing access to a plurality of mobile applications.

19. The method of claim 17, wherein said reducing manual input associated with said registering further comprises:

reducing manual input associated with registering a mobile application installed on a mobile device.

20. A computer-implemented method for scalable management of an enterprise system, said computer-implemented method comprising:

dynamically registering an application and a host device with an enterprise system, wherein a request for registration comprises registration information selected from a group consisting of;

a product identification, a device identification, a requested scope of access, and an application redirect uniform resource locator (URL), such that said registering establishes a trust relationship between said enterprise system and both of said application and said host device, and wherein said application is installed on said host device;

authenticating a user of said host device with said enterprise system; and

associating said application, said host device, and said user, such that said enterprise system is enabled to be scalably managed based on said trust relationship.

21. The computer-implemented method of claim 20, further comprising:

unregistering said host device with said enterprise system by removing said host device from said association.

22. The computer-implemented method of claim 20, further comprising:

unregistering said application with said enterprise system by removing an application access template associated with said application.

23. The computer-implemented method of claim 20, further comprising:

unregistering a user with said enterprise system by removing said user from said association.

24. A computer-implemented method for enabling dynamic registration with an enterprise system, said computer-implemented method comprising:

accessing an application access template configured to define a scope of access of an application to said enterprise system;

registering said application with said enterprise system, wherein a request for said registering comprises;

a product identification;

a device identification;

a requested scope of access; and

an application redirect uniform resource locator (URL), such that said registering establishes a trust relationship between said application and said enterprise system; and

granting said scope of access defined in said application access template to said application.

25. The computer-implemented method of claim 24, wherein said accessing said application access template further comprises:

comparing parameters of said application access template with parameters of an automatic registration request by said application.

26. The computer-implemented method of claim 25, wherein said registering said application further comprises:

registering said application when parameters of said application access template match parameters of said automatic registration request by said application.