APPLICATION CUSTOMIZATION
    11.
    发明申请
    APPLICATION CUSTOMIZATION 审中-公开
    应用定制

    公开(公告)号:US20150319252A1

    公开(公告)日:2015-11-05

    申请号:US14490198

    申请日:2014-09-18

    Abstract: Methods and systems for customizing applications in enterprise mobility management systems are described herein. A client agent software application on a mobile device may be customized to embed or make available enterprise server URLs, a session cookie for authentication, and various other data during the device enrollment process. The customization of the client agent may be based on the device, user, and/or enrollment session. After the device is enrolled in the enterprise system, the embedded data may be accessed by the client agent application to support seamless single-sign-on during first-time use. Additional customized applications based on device, user, and/or enrollment session, may be generated and provided to mobile devices during or after device enrollment. Customized applications may be based on application templates, such as packaged web applications or specific implementations of hosted applications.

    Abstract translation: 本文描述了在企业移动管理系统中定制应用的方法和系统。 可以定制移动设备上的客户端代理软件应用程序,以在设备注册过程中嵌入或提供可用的企业服务器URL,用于认证的会话cookie以及各种其他数据。 客户端代理的定制可以基于设备,用户和/或注册会话。 设备注册到企业系统后,可以由客户端代理应用程序访问嵌入式数据,以支持首次使用时的无缝单点登录。 基于设备,用户和/或注册会话的其他定制应用可以在设备登记期间或之后生成并提供给移动设备。 定制的应用程序可能基于应用程序模板,例如打包的Web应用程序或托管应用程序的特定实现。

    Clock Rollback Security
    12.
    发明申请
    Clock Rollback Security 审中-公开
    时钟回滚安全

    公开(公告)号:US20150317478A1

    公开(公告)日:2015-11-05

    申请号:US14701561

    申请日:2015-05-01

    Abstract: Methods and systems for preventing clock rollback attacks are described herein. A rollback attack may occur when a user manually sets a system clock to a date/time earlier than the actual present day date and time, thereby tricking any software relying on the system clock to believe it is in fact the earlier date and time rather than the current date and time. According to aspects described herein, a particular application may check and store a record of the system time when an application goes inactive (or at intervals) and again when the application subsequently is activated again. When the application determines that the time has gone backward, the application (or system) may take some remedial measure(s) to prevent further use of the application (or system) until the user reestablishes trust (e.g., by reauthenticating or reestablishing a connection with a trusted time server).

    Abstract translation: 本文描述了用于防止时钟回滚攻击的方法和系统。 当用户手动将系统时钟设置为比实际当前日期和时间早的日期/时间时,可能会发生回滚攻击,从而欺骗任何依赖于系统时钟的软件,以相信它实际上是早期的日期和时间,而不是 当前日期和时间。 根据本文描述的方面,特定应用可以检查和存储当应用程序变得不活动(或间隔))并再次当应用程序再次被激活时系统时间的记录。 当应用程序确定时间已经退回时,应用程序(或系统)可能采取一些补救措施,以防止进一步使用应用程序(或系统),直到用户重新建立信任(例如,通过重新验证或重新建立连接 与可信时间服务器)。

    Providing virtualized private network tunnels
    13.
    发明授权
    Providing virtualized private network tunnels 有权
    提供虚拟专用网络隧道

    公开(公告)号:US08931078B2

    公开(公告)日:2015-01-06

    申请号:US14029096

    申请日:2013-09-17

    Abstract: Various aspects of the disclosure relate to providing a per-application policy-controlled virtual private network (VPN) tunnel. In some embodiments, tickets may be used to provide access to an enterprise resource without separate authentication of the application and, in some instances, can be used in such a manner as to provide a seamless experience to the user when reestablishing a per-application policy controlled VPN tunnel during the lifetime of the ticket. Additional aspects relate to an access gateway providing updated policy information and tickets to a mobile device. Other aspects relate to selectively wiping the tickets from a secure container of the mobile device. Yet further aspects relate to operating applications in multiple modes, such as a managed mode and an unmanaged mode, and providing authentication-related services based on one or more of the above aspects.

    Abstract translation: 本公开的各个方面涉及提供每应用程序策略控制的虚拟专用网(VPN)隧道。 在一些实施例中,票据可以用于提供对企业资源的访问,而不需要对应用的单独认证,并且在某些情况下可以以这样的方式使用,以便在重新建立每个应用程序策略时向用户提供无缝体验 在票的生命周期内控制VPN隧道。 另外的方面涉及提供对移动设备的更新的策略信息和故障单的接入网关。 其他方面涉及从移动设备的安全容器中选择性地擦拭票据。 另外的方面涉及在诸如管理模式和非托管模式的多种模式中的操作应用,以及基于上述方面中的一个或多个来提供与认证相关的服务。

    Policy-based application management

    公开(公告)号:US08799994B2

    公开(公告)日:2014-08-05

    申请号:US14044928

    申请日:2013-10-03

    Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

    Policy-Based Application Management
    15.
    发明申请

    公开(公告)号:US20140096186A1

    公开(公告)日:2014-04-03

    申请号:US14096418

    申请日:2013-12-04

    Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

    Controlling incoming data processing requests

    公开(公告)号:US10225263B2

    公开(公告)日:2019-03-05

    申请号:US14967958

    申请日:2015-12-14

    Abstract: Aspects described herein relate to controlling incoming data processing requests or messages and whether the incoming data processing requests are allowed to reach destination applications unmodified. The destination application may be a secure application operating within a secure application wrapper, and the secure application wrapper may determine whether and how much of the request or message is allowed to pass into a managed partition or through the secure application wrapper to reach the secure application for processing.

    Anonymous Application Wrapping
    19.
    发明申请

    公开(公告)号:US20180191731A1

    公开(公告)日:2018-07-05

    申请号:US15910127

    申请日:2018-03-02

    Abstract: Methods and systems are disclosed for providing approaches to anonymous application wrapping on a mobile device. The methods and systems may include receiving, by a controller service, a request to associate a first application executing on a client device with the controller service, and obtaining, by the controller service, a first application identifier associated with the first application. The methods and systems may also include receiving, by the controller service from an application service, a request for a first service and a conditional application identifier, and configuring, by the controller service and based on the request for the first service, the first application with a second set of one or more policy instructions used to control the first application.

Patent Agency Ranking