Data management for an application with multiple operation modes

• US 10,284,627 B2
• Filed: 09/09/2013
• Issued: 05/07/2019
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Lang, Zhongmin, Barton, Gary, Desai, Nitin, Walker, James R.
• Primary Examiner(s): Keller, Michael A
• Assistant Examiner(s): Moreau, Austin J
• Application Number:
  US14/021,227
• Publication Number:
  US 20140297825A1
• Time in Patent Office: 2,066 Days
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A method and system for managing an application with multiple modes are described. A device manager that manages a mobile device may monitor the mobile device. The device manager may detect that a first type of application that runs in a managed mode (or in multiple managed modes) and an unmanaged mode is installed on the mobile device. When the application is executed on the device, the application executes in accordance with the selected application mode, e.g., based on location, user, role, industry presence, or other predefined context.

Claims

1. A method comprising:

receiving, by an application store and from a mobile device, a request for a list of downloadable applications;

determining, whether the mobile device is configured with an application management framework capable of executing an application in both an unmanaged mode and a managed mode by detecting whether the mobile device is capable of running in the managed mode and the unmanaged mode and whether a client agent is installed on the mobile device, wherein the client agent enforces policies of the application management framework, and wherein;

in the managed mode, the mobile device is managed by a device manager associated with the application management framework, the client agent is running on the mobile device and the device manager is configured to communicate with the client agent to monitor an operating state of the mobile device,

in the unmanaged mode, the client agent is not running on the mobile device and the mobile device is not managed by the device manager configured to communicate with the client agent to monitor the operating state of the mobile device; and

sending, to the mobile device, a list of downloadable applications, wherein;

in response to the determining and when the mobile device is determined to be capable, and after detecting that the client agent is installed on the mobile device, sending, from the application store and to the mobile device, the list of downloadable applications comprising a first version of the application executable in both the unmanaged mode and the managed mode, and

in response to the determining and when the mobile device is determined not to be capable, and after detecting that the client agent is not installed on the mobile device, sending, from the application store and to the mobile device, the list of downloadable applications excluding the first version of the application and including a second version of the application executable in the unmanaged mode and not executable in the managed mode.

2. The method of claim 1, wherein determining whether the mobile device is configured with an application management framework capable of executing an application in both the unmanaged mode and the managed mode further comprises detecting that a managed application associated with an application management framework is installed on the mobile device.

3. The method of claim 1, wherein the first version of the application is associated with the application management framework.

4. The method of claim 3, wherein sending, to the mobile device, a list of downloadable applications further comprises:

selecting the first version of the application from a plurality of versions of the application executable in both the unmanaged mode and the managed mode, wherein the first version of the application is selected based on the association with the application management framework.

5. The method of claim 1, wherein the first version of the application is associated with the device manager.

6. The method of claim 5, wherein sending, to the mobile device, a list of downloadable applications further comprises:

selecting the first version of the application from a plurality of versions of the application executable in both the unmanaged mode and the managed mode, wherein the first version of the application is selected based on the association with the device manager.

7. The method of claim 1, wherein the first version of the application comprises an unmanaged application modified by an enterprise employing a user of the mobile device to operate as a managed application.

8. The method of claim 1, further comprising:

provisioning a resource to communicate with the application when the second version of the application is installed on the mobile device and executed in the unmanaged mode.

9. A computing device comprising:

a processor, wherein the computing device is configured to at least;

receive, from a mobile device, a request for a list of downloadable applications;

determine whether the mobile device is configured with an application management framework capable of executing an application in both an unmanaged mode and a managed mode by detecting whether the mobile device is capable of running in the managed mode and the unmanaged mode and whether a client agent is installed on the mobile device, wherein the client agent enforces policies of the application management framework, and wherein;

in the managed mode, the mobile device is managed by a device manager associated with the application management framework, the client agent is running on the mobile device and the device manager is configured to communicate with the client agent to monitor an operating state of the mobile device;

in the unmanaged mode, the client agent is not running on the mobile device and the mobile device is not managed by the device manager configured to communicate with the client agent to monitor the operating state of the mobile device; and

send, to the mobile device, a list of downloadable applications, wherein;

in response to the determining and when the mobile device is determined to be capable, and after detecting that the client agent is installed in the mobile device, send, to the mobile device, the list of downloadable applications comprising a first version of the application executable in both the unmanaged mode and the managed mode, and

in response to the determining and when the mobile device is determined not to be capable, and after detecting that the client agent is not installed on the mobile device, the list excludes the first version of the application and includes a second version of the application executable in the unmanaged mode and not executable in the managed mode.

10. The computing device of claim 9, wherein determining whether the mobile device is configured with an application management framework capable of executing an application in both the unmanaged mode and the managed mode further comprises detecting that a managed application associated with an application management framework is installed on the mobile device.

11. The computing device of claim 9, wherein the first version of the application is associated with the application management framework.

12. The computing device of claim 11, wherein sending, to the mobile device, a list of downloadable applications further comprises:

selecting the first version of the application from a plurality of versions of the application executable in both the unmanaged mode and the managed mode, wherein the first version of the application is selected based on the association with the application management framework.

13. The computing device of claim 9, wherein the first version of the application is associated with the device manager.

14. The computing device of claim 13, wherein sending, to the mobile device, a list of downloadable applications further comprises:

selecting the first version of the application from a plurality of versions of the application executable in both the unmanaged mode and the managed mode, wherein the first version of the application is selected based on the association with the device manager.

15. The computing device of claim 9, wherein the first version of the application comprises an unmanaged application modified by an enterprise employing a user of the mobile device to operate as a managed application.

16. The computing device of claim 9, wherein the computing device is further configured to:

provision a resource to communicate with the application when the second version of the application is installed on the mobile device and executed in the unmanaged mode.

17. One or more non-transitory computer-readable storage media storing computer-executable instructions that, when executed by one or more processors of a data processing system, cause the system to perform:

receive, by an application store and from a mobile device, a request for a list of downloadable applications;

determine whether the mobile device is configured with an application management framework capable of executing an application in both an unmanaged mode and a managed mode by detecting whether the mobile device is capable of running in the managed mode and the unmanaged mode and whether a client agent is installed on the mobile device, wherein the client agent enforces policies of the application management framework, and wherein;

in the managed mode, the mobile device is managed by a device manager associated with the application management framework, the client agent is running on the mobile device and the device manager is configured to communicate with the client agent to monitor an operating state of the mobile device;

in the unmanaged mode, the client agent is not running on the mobile device and the mobile device is not managed by the device manager configured to communicate with the client agent to monitor the operating state of the mobile device; and

send, to the mobile device, a list of downloadable applications, wherein;

in response to the determining and when the mobile device is determined to be capable, and after detecting that the client agent is installed on the mobile device, send, from the application store and to the mobile device, the list of downloadable applications comprising a first version of the application executable in both the unmanaged mode and the managed mode, and

in response to the determining and when the mobile device is determined not to be capable, and after detecting that the client agent is not installed on the mobile device, send, from the application store and to the mobile device, the list of downloadable applications excluding the first version of the application and including a second version of the application executable in the unmanaged mode and not executable in the managed mode.

18. The computer-readable storage media of claim 17, wherein determining whether the mobile device is configured with an application management framework capable of executing an application in both the unmanaged mode and the managed mode further comprises detecting that a managed application associated with an application management framework is installed on the mobile device.

19. The computer-readable storage media of claim 18, wherein the first version of the application is associated with the application management framework.

20. The computer-readable storage media of claim 19, wherein sending, to the mobile device, a list of downloadable applications further comprises:

selecting the first version of the application from a plurality of versions of the application executable in both the unmanaged mode and the managed mode, wherein the first version of the application is selected based on the association with the application management framework.