Time-based configuration profile toggling

• US 9,703,949 B2
• Filed: 12/17/2015
• Issued: 07/11/2017
• Est. Priority Date: 05/02/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Marshall, John, Dabbiere, Alan, Stuntebeck, Erich
• Primary Examiner(s): Nguyen, Quang N
• Application Number:
  US14/972,536
• Publication Number:
  US 20160105447A1
• Time in Patent Office: 572 Days
• Field of Search: 1 1, 455406, 709221, 710104, 726 19
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06Q 10/06314 Calendaring for a resource
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Time-based configuration profile toggling of a client device can be provided. A computing device in data communication with a client device over a network can be configured to identify an enterprise configuration profile associated with a client device stored in a memory. Further, the computing device can determine whether a current time associated with the client device complies with a compliance rule that specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile. In response to the current time associated with the client device complying with the compliance rule, the computing device can remotely enable the enterprise configuration profile on the client device.

Claims

1. A non-transitory computer-readable medium having program instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to:

maintain a personal configuration profile and an enterprise configuration profile in memory for a client device in remote communication with the at least one computing device over a network, wherein the personal configuration profile or the enterprise configuration profile specifies at least one authorized function that can be performed on the client device in compliance with a compliance rule in place of an unauthorized function on the client device;

identify that the personal configuration profile is enabled on the client device;

cause the client device to toggle between the personal configuration profile to the enterprise configuration profile by;

determining a current time for the client device;

identifying that the client device is authorized to enable the enterprise configuration profile on the client device based at least in part on the current time determined for the client device complying with the compliance rule, wherein the compliance rules specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile;

in response to the current time associated with the client device complying with the compliance rule, enabling the enterprise configuration profile on the client device; and

in response to the enterprise configuration profile being enabled on the client device, disabling the personal configuration profile on the client device.

2. The non-transitory computer-readable medium of claim 1, wherein the enterprise configuration profile associated with the client device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

3. The non-transitory computer-readable medium of claim 1, wherein the enterprise configuration profile is predefined by an administrator on the at least one computing device through a device management application.

4. The non-transitory computer-readable medium of claim 1, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device by making at least one application programming interface (API) call to an operating system of the client device.

5. The non-transitory computer-readable medium of claim 1, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device in response to a communication transmitted remotely to the client device from the at least one computing device over a network.

6. The non-transitory computer-readable medium of claim 1, wherein the current time is determined based at least in part on a current location of the client device, the current location being determined through wireless fidelity (Wi-Fi), a global positioning system (GPS), or cellular network triangulation.

7. The non-transitory computer-readable medium of claim 1, wherein, in response to an attempt to perform the unauthorized function on the client device, the at least one authorized function is performed on the client device in compliance with the compliance rule.

8. A computer-implemented method comprising:

maintaining, by at least one computing device comprising at least one hardware processor, a personal configuration profile and an enterprise configuration profile in memory for a client device in remote communication with the at least one computing device over a network, wherein the personal configuration profile or the enterprise configuration profile specifies at least one authorized function that can be performed on the client device in compliance with a compliance rule in place of an unauthorized function on the client device;

identifying, by the at least one computing device, that the personal configuration profile is enabled on the client device;

causing, by the at least one computing device, the client device to toggle between the personal configuration profile to the enterprise configuration profile by;

determining, by the at least one computing device, a current time for the client device;

identifying, by the at least one computing device, that the client device is authorized to enable the enterprise configuration profile on the client device based at least in part on a current time determined for the client device complying with the compliance rule that specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile;

in response to the current time associated with the client device complying with the compliance rule, causing, by the at least one computing device, a client application executable on the client device to enable the enterprise configuration profile on the client device; and

in response to the enterprise configuration profile being enabled on the client device, causing, by the at least one computing device, the client application to disable the personal configuration profile on the client device.

9. The computer-implemented method of claim 8, wherein the enterprise configuration profile associated with the client device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

10. The computer-implemented method of claim 8, wherein the enterprise configuration profile is predefined by an administrator on the at least one computing device through a device management application.

11. The computer-implemented method of claim 8, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device by making at least one application programming interface (API) call to an operating system of the client device.

12. The computer-implemented method of claim 8, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device in response to a communication transmitted remotely to the client device from the at least one computing device over a network.

13. The computer-implemented method of claim 8, wherein the current time is determined based at least in part on a current location of the client device, the current location being determined through wireless fidelity (Wi-Fi), a global positioning system (GPS), or cellular network triangulation.

14. The computer-implemented method of claim 8, wherein, in response to an attempt to perform the unauthorized function on the client device, the at least one authorized function is performed on the client device in compliance with the compliance rule.

15. A system comprising:

at least one computing device coupled to at least one memory device; and

program instructions that, when executed by the at least one computing device, cause the at least one computing device to;

maintain a personal configuration profile and an enterprise configuration profile in the at least one memory device for a client device in remote communication with the at least one computing device over a network, wherein the personal configuration profile or the enterprise configuration profile specifies at least one authorized function that can be performed on the client device in compliance with a compliance rule in place of an unauthorized function on the client device;

identify an enterprise configuration profile associated with a client device;

cause the client device to toggle between the personal configuration profile to the enterprise configuration profile by;

determining a current time for the client device;

identifying that the client device is authorized to enable the enterprise configuration profile on the client device based at least in part on the current time determined for the client device complying with the compliance rule that specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile;

in response to the current time associated with the client device complying with the compliance rule, enabling the enterprise configuration profile on the client device; and

in response to the enterprise configuration profile being enabled on the client device, disabling the personal configuration profile on the client device.

16. The system of claim 15, wherein the enterprise configuration profile associated with the client device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

17. The system of claim 15, wherein the enterprise configuration profile is predefined by an administrator on the at least one computing device through a device management application.

18. The system of claim 15, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device by making at least one application programming interface (API) call to an operating system of the client device.

19. The system of claim 15, wherein a client application executable on the client device is configured to enable the enterprise configuration profile on the client device in response to a communication transmitted remotely to the client device from the at least one computing device over a network.

20. The system of claim 15, wherein, in response to an attempt to perform the unauthorized function on the client device, the at least one authorized function is performed on the client device in compliance with the compliance rule.