Mobile device management
    11.
    发明授权
    Mobile device management 有权
    移动设备管理

    公开(公告)号:US09027112B2

    公开(公告)日:2015-05-05

    申请号:US13890161

    申请日:2013-05-08

    Applicant: Apple Inc.

    Abstract: Methods and apparatuses that enroll a wireless device into an enterprise service with a management server addressed in a management profile are described. The enrollment may grant a control of configurations of the wireless device to the management server via the management profile. In response to receiving a notification from the management server, a trust of the notification may be verified against the management profile. If the trust is verified, a network session may be established with the management server. The network session may be secured via a certificate in the management profile. Management operations may be performed for management commands received over the secure network session to manage the configurations transparently to a user of the wireless device according to the control.

    Abstract translation: 描述了使用管理简档中寻址的管理服务器将无线设备注册到企业服务中的方法和装置。 注册可以通过管理简档向管理服务器授予对无线设备的配置的控制。 响应于从管理服务器接收到通知,可以针对管理简档来验证通知的信任。 如果信任被验证,则可以与管理服务器建立网络会话。 可以通过管理简档中的证书来保护网络会话。 可以对通过安全网络会话接收的管理命令执行管理操作,以根据该控制向无线设备的用户透明地管理配置。

    SYSTEM AND METHOD FOR WIPING ENCRYPTED DATA ON A DEVICE HAVING FILE-LEVEL CONTENT PROTECTION
    12.
    发明申请
    SYSTEM AND METHOD FOR WIPING ENCRYPTED DATA ON A DEVICE HAVING FILE-LEVEL CONTENT PROTECTION 有权
    用于在具有文件级内容保护的设备上擦写加密数据的系统和方法

    公开(公告)号:US20130339715A1

    公开(公告)日:2013-12-19

    申请号:US13941373

    申请日:2013-07-12

    Applicant: Apple Inc.

    Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

    Abstract translation: 这里公开了用于擦除存储在文件系统中的用户数据的系统,方法和非暂时的计算机可读存储介质。 该方法包括在具有每个文件和每个类基础上加密的文件系统的设备上破坏包含加密密钥的所有密钥袋,擦除和重建与用户数据相关联的文件系统的至少一部分,以及创建新的默认密钥袋, 加密密钥。 本文还公开了一种擦除存储在以每个文件和每个类为基础加密的远程文件系统中的用户数据的方法。 该方法包括向远程设备发送闭塞指令,这导致远程设备破坏包含远程设备上的加密密钥的所有密钥袋,擦除并重建与用户数据相关联的文件系统的至少一部分,并在远程设备上创建 一个包含加密密钥的新的默认密钥袋。

    Mediated data exchange for sandboxed applications
    16.
    发明授权
    Mediated data exchange for sandboxed applications 有权
    介绍沙盒应用程序的数据交换

    公开(公告)号:US09473562B2

    公开(公告)日:2016-10-18

    申请号:US14025696

    申请日:2013-09-12

    Applicant: Apple Inc.

    Abstract: The described embodiments include a computing device that executes a broker application. The broker application performs a mediated data exchange to exchange data between a first sandboxed application and a second application. For example, the broker application can import data from the second application into the first sandboxed application. As another example, the broker application can export data from the first sandboxed application into the second application.

    Abstract translation: 所描述的实施例包括执行代理应用的计算设备。 经纪人应用程序执行中介数据交换以在第一沙盒应用程序和第二应用程序之间交换数据。 例如,代理应用程序可以将数据从第二个应用程序导入第一个沙盒应用程序。 作为另一个例子,代理应用程序可以将数据从第一个沙盒应用程序导出到第二个应用程序。

    Configuring computing devices using a bootstrap configuration
    17.
    发明授权
    Configuring computing devices using a bootstrap configuration 有权
    使用引导配置配置计算设备

    公开(公告)号:US09467334B2

    公开(公告)日:2016-10-11

    申请号:US13913219

    申请日:2013-06-07

    Applicant: Apple Inc.

    Abstract: In the described embodiments, a device configuration file is used to set configuration settings on a computing device during a configuration operation (e.g., an initial configuration or a re-configuration of the computing device). The device configuration file is retrieved from a location where the device configuration file is hosted using a reference to the location from a bootstrap configuration. The bootstrap configuration is provided by a bootstrap configuration server and is retrieved by the computing device from the bootstrap configuration server during the configuration operation.

    Abstract translation: 在所描述的实施例中,在配置操作(例如,计算设备的初始配置或重新配置)期间,使用设备配置文件来在计算设备上设置配置设置。 从设备配置文件的托管位置检索设备配置文件,该引用来自引导配置中的位置。 引导配置由引导配置服务器提供,并且在配置操作期间由计算设备从引导配置服务器检索。

    MEDIATED DATA EXCHANGE FOR SANDBOXED APPLICATIONS
    18.
    发明申请
    MEDIATED DATA EXCHANGE FOR SANDBOXED APPLICATIONS 有权
    用于SANDBOXY应用的介质数据交换

    公开(公告)号:US20150074165A1

    公开(公告)日:2015-03-12

    申请号:US14025696

    申请日:2013-09-12

    Applicant: Apple Inc.

    Abstract: The described embodiments include a computing device that executes a broker application. The broker application performs a mediated data exchange to exchange data between a first sandboxed application and a second application. For example, the broker application can import data from the second application into the first sandboxed application. As another example, the broker application can export data from the first sandboxed application into the second application.

    Abstract translation: 所描述的实施例包括执行代理应用的计算设备。 经纪人应用程序执行中介数据交换以在第一沙盒应用程序和第二应用程序之间交换数据。 例如,代理应用程序可以将数据从第二个应用程序导入第一个沙盒应用程序。 作为另一个例子,代理应用程序可以将数据从第一个沙盒应用程序导出到第二个应用程序。

    System and method for wiping encrypted data on a device having file-level content protection
    19.
    发明授权
    System and method for wiping encrypted data on a device having file-level content protection 有权
    用于在具有文件级内容保护的设备上擦除加密数据的系统和方法

    公开(公告)号:US08756419B2

    公开(公告)日:2014-06-17

    申请号:US13941373

    申请日:2013-07-12

    Applicant: Apple Inc.

    Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for erasing user data stored in a file system. The method includes destroying all key bags containing encryption keys on a device having a file system encrypted on a per file and per class basis, erasing and rebuilding at least part of the file system associated with user data, and creating a new default key bag containing encryption keys. Also disclosed herein is a method of erasing user data stored in a remote file system encrypted on a per file and per class basis. The method includes transmitting obliteration instructions to a remote device, which cause the remote device to destroy all key bags containing encryption keys on the remote device, erase and rebuild at least part of the file system associated with user data, and create on the remote device a new default key bag containing encryption keys.

    Abstract translation: 这里公开了用于擦除存储在文件系统中的用户数据的系统,方法和非暂时的计算机可读存储介质。 该方法包括在具有每个文件和每个类基础上加密的文件系统的设备上破坏包含加密密钥的所有密钥袋,擦除和重建与用户数据相关联的文件系统的至少一部分,以及创建新的默认密钥袋, 加密密钥。 本文还公开了一种擦除存储在以每个文件和每个类为基础加密的远程文件系统中的用户数据的方法。 该方法包括向远程设备发送闭塞指令,这导致远程设备破坏包含远程设备上的加密密钥的所有密钥袋,擦除并重建与用户数据相关联的文件系统的至少一部分,并在远程设备上创建 一个包含加密密钥的新的默认密钥袋。

Patent Agency Ranking