Mobile device management

• US 8,903,365 B2
• Filed: 08/20/2007
• Issued: 12/02/2014
• Est. Priority Date: 08/18/2006
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Stricklen, Michael, McHale, Thomas, Caminetsky, Marc, Reddy, Venkat
• Primary Examiner(s): Hu, Jinsong
• Assistant Examiner(s): Hong, Dung
• Application Number:
  US11/841,256
• Publication Number:
  US 20080070495A1
• Time in Patent Office: 2,661 Days
• Field of Search: 455418-420, 455/414.2, 455/456.1, 455/456.6
• US Class Current: 455/418
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

The invention provides systems and methods for managing mobile devices of supported by different platforms. In some embodiments, the invention provides this management capability by utilizing one or more agents or modules native to the platforms themselves to provide interaction with individual mobile. In some embodiments, the invention provides an abstraction layer by which management tasks or other functions relating to mobile devices of different types may be generally defined and translated for application to mobile devices supported by different platforms. In some embodiments, the invention utilizes existing organizational structure of an enterprise or organization to define management permission for mobile device administrators and end users as well as to define policy configuration schemes for mobile devices. In some embodiments, the invention tracks the lifecycle of mobile devices within an enterprise or organization as assets within the organization.

Claims

1. A system to manage a plurality of mobile devices of an organization via a common interface, the system comprising:

a processing device configured to;

receive an identifier for each of the plurality of mobile devices, wherein each identifier indicates a platform operating on its respective mobile device from the plurality of mobile devices,

receive, for at least two of the plurality of mobile devices, end user information regarding at least one end user, wherein the end user information comprises enterprise role information regarding the at least one end user'"'"'s role within the organization, and wherein the enterprise role information is defined from an existing directory of the organization,

formulate a management task definition based at least in part on the enterprise role information, wherein the management task definition defines a management task to be performed on the at least two of the plurality of mobile devices, and

determine, using the received identifiers from the at least two mobile devices, a first platform operating on at least a first of the at least two mobile devices and a second platform operating on at least a second of the at least two mobile devices,

wherein a first platform server formulates instructions, specific to the first platform, to perform the management task on the at least a first device, and

wherein a second platform server formulates instructions, specific to the second platform, to perform the management task on the at least a second device.

2. The system of claim 1, wherein the management task comprises applying a policy to the at least two mobile devices, the policy comprising one or more configuration sets specifying configuration information for the at least two mobile devices.

3. The system of claim 2, wherein the number of configuration sets in the policy equals the number of different platforms operating on one or more of the at least two mobile devices.

4. The system of claim 1, wherein the management task comprises retrieving status information from the at least two mobile devices.

5. The system of claim 4, wherein the status information includes at least a logical state of each of the at least two mobile devices, the logical state including an indication of the use of each of the at least two mobile devices as an asset within the organization, wherein assets within the organization are tracked by an asset inventory application.

6. The system of claim 1, wherein the processing device is further configured to receive, from the first platform server, a response regarding performance of the management task on the at least a first device and to receive, from the second platform server, a response regarding performance of the management task on the at least a second device, each of the responses indicating a status of the management task.

7. The system of claim 6, wherein the status of the management task comprises one of:

an indication that the management task has been successfully performed, an indication that the management task has not been successfully performed, or an indication that the device is not reachable.

8. The system of claim 1, wherein the management task definition is based on authentication or authorization information stored in the existing directory.

9. The system of claim 1, wherein the first platform server communicates the instructions specific to the first platform using, at least in part, wireless communication with the at least a first device, and the second platform server communicates the instructions specific to the second platform using, at least in part, wireless communication with the at least a second device.

10. A method of managing a plurality of mobile devices of an organization via a common interface, the method comprising:

receiving an identifier for each of the plurality of mobile devices, wherein each identifier indicates a platform operating on its respective mobile device from the plurality of mobile devices;

formulating a management task definition for a management task to be performed on at least two of the plurality of mobile devices;

determining, using the received identifiers from the at least two mobile devices, a first platform operating on at least a first of the at least two mobile devices and a second platform operating on at least a second of the at least two mobile devices;

receiving, for the at least two mobile devices, end user information regarding at least one end user, wherein the end user information comprises enterprise role information regarding the at least one end user'"'"'s role within the organization, and wherein the enterprise role information is defined from an existing directory of the organization,

wherein a first platform server formulates instructions, specific to the first platform, to perform the management task on the at least a first device; and

wherein a second platform server formulates instructions, specific to the second platform, to perform the management task on the at least a second device.

11. The method of claim 10, wherein the management task comprises applying a policy to the at least two mobile devices, the policy comprising one or more configuration sets specifying configuration information for the at least two mobile devices.

12. The method of claim 11, wherein the number of configuration sets in the policy equals the number of different platforms operating on one or more of the at least two mobile devices.

13. The method of claim 10, wherein the management task comprises retrieving status information from the at least two mobile devices.

14. The method of claim 10, further comprising receiving, from the first platform server, a response regarding performance of the management task on the first device and receiving, from the second platform server, a response regarding performance of the management task on the second device, each of the responses indicating a status of the management task.

15. The method of claim 14, wherein the status of the management task comprises one of:

an indication that the management task of the management task definition has been successfully performed, an indication that the management task has not been successfully performed, or an indication that the device is not reachable.

16. The method of claim 10, wherein the management task definition is based on authentication or authorization information stored in the existing directory.

17. The method of claim 10, wherein the first platform server communicates the instructions specific to the first platform using, at least in part, wireless communication with the at least a first device, and the second platform server communicates the instructions specific to the second platform using, at least in part, wireless communication with the at least a second device.

18. The method of claim 10, further comprising receiving location information regarding end user information within the existing directory and wherein the receiving the end user information is based on the location information.

19. The method of claim 18, wherein the location information includes a path name for the enterprise directory.

20. The method of claim 10, wherein the enterprise role information includes information that is used to determine the at least one end user'"'"'s data permissions within the organization.

21. The method of claim 10, wherein employees of the organization are associated with one or more departments of the organization and wherein enterprise role information includes information regarding one or more departments associated with the at least one end user.

22. A non-transitory computer-readable medium having computer-executable instructions thereon to manage a plurality of mobile devices of an organization via a common interface, the instructions, when executed by a processing device, causing the processing device to perform a plurality of operations comprising:

receiving an identifier for each of the plurality of mobile devices, wherein each identifier indicates a platform operating on its respective mobile device from the plurality of mobile devices;

formulating a management task definition for a management task to be performed on at least two of the plurality of mobile devices;

determining, using the received identifiers from the at least two mobile devices, a first platform operating on at least a first of the at least two mobile devices and a second platform operating on at least a second of the at least two mobile devices;

receiving, for the at least two mobile devices, end user information regarding at least one end user, wherein the end user information comprises enterprise role information regarding the at least one end user'"'"'s role within the organization, and wherein the enterprise role information is defined from an existing directory of the organization;

wherein a first platform server formulates instructions, specific to the first platform, to perform the management task on the at least a first device; and

wherein a second platform server formulates instructions, specific to the second platform, to perform the management task on the at least a second device.

23. The non-transitory computer-readable medium of claim 22, wherein the management task comprises applying a policy to the at least two mobile devices, the policy comprising one or more configuration sets specifying configuration information for the at least two mobile devices.

24. The non-transitory computer-readable medium of claim 23, wherein the number of configuration sets in the policy equals the number of different platforms operating on one or more of the at least two mobile devices.

25. The non-transitory computer-readable medium of claim 22, wherein the management task comprises retrieving status information from the at least two mobile devices.

26. The non-transitory computer-readable medium of claim 22, further comprising computer-executable instructions thereon, the computer-executable instructions, when executed by the processing device, causing the processing device to perform an operation comprising:

receiving, from the first platform server, a response regarding performance of the management task on the first device and receiving, from the second platform server, a response regarding performance of the management task on the second device, each of the responses indicating a status of the management task.

27. The non-transitory computer-readable medium of claim 26, wherein the status of the management task comprises one of:

an indication that the management task of the management task definition has been successfully performed, an indication that the management task has not been successfully performed, or an indication that the device is not reachable.

28. The non-transitory computer-readable medium of claim 22, wherein the management task definition is based on authentication or authorization information stored in the existing directory.

29. The non-transitory computer-readable medium of claim 22, wherein the first platform server communicates the instructions specific to the first platform using, at least in part, wireless communication with the at least a first device, and the second platform server communicates the instructions specific to the second platform using, at least in part, wireless communication with the at least a second device.

30. The non-transitory computer-readable medium of claim 22, further comprising computer-executable instructions thereon, the computer-executable instructions, when executed by the processing device, causing the processing device to receive location information regarding end user information within the existing directory, and

wherein the receiving the end user information is based on the location information.

31. The non-transitory computer-readable medium of claim 30, wherein the location information includes a path name for the enterprise directory.

32. The non-transitory computer-readable medium of claim 22, wherein the enterprise role information includes information that is used to determine the at least one end user'"'"'s data permissions within the organization.

33. The non-transitory computer-readable medium of claim 22, wherein employees of the organization are associated with one or more departments of the organization and wherein enterprise role information includes information regarding one or more departments associated with the at least one end user.

34. A method of managing a plurality of mobile devices of an organization via a common interface, the method comprising:

receiving an identifier for each of the plurality of mobile devices, wherein each identifier indicates a platform operating on its respective mobile device from the plurality of mobile devices;

formulating a management task definition for a management task to be performed on at least two of the plurality of mobile devices;

determining, using the received identifiers from the at least two mobile devices, a first platform operating on at least a first of the at least two mobile devices and a second platform operating on at least a second of the at least two mobile devices;

receiving, for the at least two mobile devices, end user information regarding at least one end user, wherein the end user information comprises enterprise role information regarding the at least one end user'"'"'s role within the organization, and wherein the enterprise role information is defined from an existing directory of the organization,

wherein a first platform server formulates instructions, specific to the first platform, to perform the management task on the at least a first device, and

wherein a second platform server formulates instructions, specific to the second platform, to perform the management task on the at least a second device; and

retrieving status information from the at least two mobile devices, the status information comprising at least a logical state of each of the at least two mobile devices, the logical state comprising an indication of the use of each of the at least two mobile devices as an asset within the organization, wherein assets within the organization are tracked by an asset inventory application.

35. A non-transitory computer-readable medium having computer-executable instructions thereon to manage a plurality of mobile devices of an organization via a common interface, the instructions, when executed by a processing device, causing the processing device to perform a plurality of operations comprising:

receiving an identifier for each of the plurality of mobile devices, wherein each identifier indicates a platform operating on its respective mobile device from the plurality of mobile devices;

formulating a management task definition, for a management task to be performed on at least two of the plurality of mobile devices;

determining, using the received identifiers from the at least two mobile devices, a first platform operating on at least a first of the at least two mobile devices and a second platform operating on at least a second of the at least two mobile devices;

receiving, for the at least two mobile devices, end user information regarding at least one end user, wherein the end user information comprises enterprise role information regarding the at least one end user'"'"'s role within the organization, and wherein the enterprise role information is defined from an existing directory of the organization,

wherein a first platform server formulates instructions, specific to the first platform, to perform the management task on the at least a first device, and

wherein a second platform server formulates instructions, specific to the second platform, to perform the management task on the at least a second device; and

retrieving status information from the at least two mobile devices, the status information comprising at least a logical state of each of the at least two mobile devices, the logical state comprising an indication of the use of each of the at least two mobile devices as an asset within the organization, wherein assets within the organization are tracked by an asset inventory application.