Dynamic registration of an application with an enterprise system

• US 10,484,462 B2
• Filed: 08/07/2018
• Issued: 11/19/2019
• Est. Priority Date: 05/28/2013
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Xu, Emily Hong
• Primary Examiner(s): Eskandarnia, Arvin
• Application Number:
  US16/056,945
• Publication Number:
  US 20180375925A1
• Time in Patent Office: 469 Days
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/08 Access security

Abstract

A computer-implemented method for automatically registering an application with an enterprise system is disclosed. The method accesses an application utilizable with the enterprise system. Generates an application access template for the application, including: generating information specific to the application that is able to be utilized with the enterprise system, and generating parameters specific to the application that is able to be utilized with the enterprise system. The method defines, in the application access template, a basic authorization protocol information; and utilizes the application access template for a subsequent dynamic registration of the application with the enterprise system.

Claims

1. A computer-implemented method for enabling dynamic registration of an application with an enterprise system, said computer-implemented method comprising:

accessing an application utilizable with the enterprise system;

generating an application access template for the application, the generating comprising;

generating information specific to the application that is able to be utilized with the enterprise system, and

generating parameters specific to the application that is able to be utilized with the enterprise system;

defining, in the application access template, a basic authorization protocol information; and

utilizing the application access template for a subsequent dynamic registration of the application with the enterprise system.

2. The computer-implemented method of claim 1, further comprising:

storing the application access template at an authorization server.

3. The computer-implemented method of claim 2, further comprising:

generating a different application access template for each different application that is utilized with the enterprise system; and

storing each different application access template at the authorization server.

4. The computer-implemented method of claim 2, further comprising:

pre-approving the application for registration with the enterprise system when the application has a corresponding application access template stored at the authorization server,

the pre-approving the application allowing the application to access a resource server within the enterprise system.

5. The computer-implemented method of claim 2, further comprising:

denying the application for registration with the enterprise system when the application does not have a corresponding application access template stored at the authorization server,

the denying stopping the application from accessing a resource server within the enterprise system.

6. The computer-implemented method of claim 1, wherein generating the application access template further comprises:

generating information that facilitates in registering the application with the enterprise system; and

generating information that facilitates in authorizing the application with the enterprise system.

7. The computer-implemented method of claim 1, further comprising:

utilizing an open source authorization protocol that enables a third-party application to obtain access to a Hypertext Transfer Protocol (HTTP) service to define the basic authorization protocol information.

8. The computer-implemented method of claim 7, wherein the open source authorization protocol is OAuth 2.0.

9. The computer-implemented method of claim 1, wherein the application access template includes features selected from the group consisting of:

an application ID, an application name, an application icon, a redirect URL, a resource access scope, and one or more attributes.

10. The computer-implemented method of claim 9, further comprising:

utilizing a unique application ID for the application;

utilizing the redirect URL to identify an endpoint that the application is listening on for receiving responses from the enterprise system; and

utilizing the resource access scope to define a unique access scope for the application.

11. The computer-implemented method of claim 9, wherein the one or more attributes are selected from the group consisting of:

whether to issue a refresh token, whether to access token time to live (TTL), and whether to refresh token TTL.

12. The computer-implemented method of claim 1, further comprising:

utilizing the application access template for a subsequent authorization of the application with the enterprise system.

13. The computer-implemented method of claim 1, further comprising:

utilizing the application access template for a subsequent management of the enterprise system.

14. A computer-implemented method for enabling dynamic registration of an application on a mobile device with an enterprise system, said computer-implemented method comprising:

accessing an application utilizable with the enterprise system

generating an application access template for the application, the generating comprising;

generating information specific to the application that is able to be utilized with the enterprise system, and

generating parameters specific to the application that is able to be utilized with the enterprise system,

defining, in the application access template, a basic authorization protocol information, and

utilizing the application access template for a subsequent dynamic registration, authorization, and enterprise management;

downloading, to the mobile device, the application from an enterprise application store,

the mobile device being a non-enterprise device;

automatically providing, by the mobile device, a registration request to the enterprise system; and

dynamically registering the mobile device with the enterprise system when aspects of the application access template match aspects of the application.

15. The computer-implemented method of claim 14, further comprising:

storing the application access template at an authorization server.

16. The computer-implemented method of claim 15, further comprising:

generating a different application access template for each different application that is utilized with the enterprise system; and

storing each different application access template at the authorization server.

17. The computer-implemented method of claim 15, further comprising:

pre-approving the application for registration with the enterprise system when the application has a corresponding application access template stored at the authorization server,

the pre-approving the application allowing the application to access a resource server within the enterprise system.

18. The computer-implemented method of claim 15, further comprising:

denying the application for registration with the enterprise system when the application does not have a corresponding application access template stored at the authorization server,

the denying stopping the application from accessing a resource server within the enterprise system.

19. The computer-implemented method of claim 14, wherein generating the application access template further comprises:

generating information that facilitates in registering the application with the enterprise system; and

generating information that facilitates in authorizing the application with the enterprise system.

20. The computer-implemented method of claim 14, further comprising:

utilizing an open source authorization protocol that enables a third-party application to obtain access to a Hypertext Transfer Protocol (HTTP) service to define the basic authorization protocol information.

21. The computer-implemented method of claim 20, wherein the open source authorization protocol is OAuth 2.0.

22. The computer-implemented method of claim 14, wherein the application access template includes features selected from the group consisting of:

an application ID, an application name, an application icon, a redirect URL, a resource access scope, and one or more attributes.

23. The computer-implemented method of claim 22, further comprising:

utilizing a unique application ID for the application;

utilizing the redirect URL to identify an endpoint that the application is listening on for receiving responses from the enterprise system; and

utilizing the resource access scope to define a unique access scope for the application.

24. The computer-implemented method of claim 22, further comprising:

dynamically registering the mobile device with the enterprise system when a redirect URL of the application access template matches a redirect URL of the application; and

denying the registering of the mobile device with the enterprise system when the redirect URL of the application access template does not match the redirect URL of the application.

25. The computer-implemented method of claim 22, wherein the one or more attributes are selected from the group consisting of:

whether to issue a refresh token, whether to access token time to live (TTL), and whether to refresh token TTL.

26. The computer-implemented method of claim 25, further comprising:

dynamically registering the mobile device with the enterprise system when the attributes of the application access template match, at least in part, the attributes provided in the registration request.

27. The computer-implemented method of claim 14, wherein automatically requesting registration with the enterprise system is performed in conjunction with an installing of the application on the mobile device.

28. The computer-implemented method of claim 14, wherein automatically requesting registration with the enterprise system is performed in response to an initial execution of the application on the mobile device.

29. The computer-implemented method of claim 14, further comprising:

redirecting a browser on the mobile device to a user login after the dynamic registration.

30. The computer-implemented method of claim 29, further comprising:

redirecting a browser on the mobile device to an application permission page after a successful user login.