-
公开(公告)号:US20150319252A1
公开(公告)日:2015-11-05
申请号:US14490198
申请日:2014-09-18
Applicant: Citrix Systems, Inc.
Inventor: Georgy Momchilov , Gary Barton
CPC classification number: H04L67/141 , H04L41/0803 , H04L41/0806 , H04L41/0893 , H04L67/146 , H04L67/30 , H04L67/34 , H04L67/42
Abstract: Methods and systems for customizing applications in enterprise mobility management systems are described herein. A client agent software application on a mobile device may be customized to embed or make available enterprise server URLs, a session cookie for authentication, and various other data during the device enrollment process. The customization of the client agent may be based on the device, user, and/or enrollment session. After the device is enrolled in the enterprise system, the embedded data may be accessed by the client agent application to support seamless single-sign-on during first-time use. Additional customized applications based on device, user, and/or enrollment session, may be generated and provided to mobile devices during or after device enrollment. Customized applications may be based on application templates, such as packaged web applications or specific implementations of hosted applications.
Abstract translation: 本文描述了在企业移动管理系统中定制应用的方法和系统。 可以定制移动设备上的客户端代理软件应用程序,以在设备注册过程中嵌入或提供可用的企业服务器URL,用于认证的会话cookie以及各种其他数据。 客户端代理的定制可以基于设备,用户和/或注册会话。 设备注册到企业系统后,可以由客户端代理应用程序访问嵌入式数据,以支持首次使用时的无缝单点登录。 基于设备,用户和/或注册会话的其他定制应用可以在设备登记期间或之后生成并提供给移动设备。 定制的应用程序可能基于应用程序模板,例如打包的Web应用程序或托管应用程序的特定实现。
-
公开(公告)号:US20150317478A1
公开(公告)日:2015-11-05
申请号:US14701561
申请日:2015-05-01
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , Brandon Olekas
CPC classification number: G06F21/55 , G06F21/554 , G06F21/629 , G06F21/725 , G06F2221/034 , G06F2221/2135 , G06F2221/2137 , G06F2221/2139 , H04L67/125
Abstract: Methods and systems for preventing clock rollback attacks are described herein. A rollback attack may occur when a user manually sets a system clock to a date/time earlier than the actual present day date and time, thereby tricking any software relying on the system clock to believe it is in fact the earlier date and time rather than the current date and time. According to aspects described herein, a particular application may check and store a record of the system time when an application goes inactive (or at intervals) and again when the application subsequently is activated again. When the application determines that the time has gone backward, the application (or system) may take some remedial measure(s) to prevent further use of the application (or system) until the user reestablishes trust (e.g., by reauthenticating or reestablishing a connection with a trusted time server).
Abstract translation: 本文描述了用于防止时钟回滚攻击的方法和系统。 当用户手动将系统时钟设置为比实际当前日期和时间早的日期/时间时,可能会发生回滚攻击,从而欺骗任何依赖于系统时钟的软件,以相信它实际上是早期的日期和时间,而不是 当前日期和时间。 根据本文描述的方面,特定应用可以检查和存储当应用程序变得不活动(或间隔))并再次当应用程序再次被激活时系统时间的记录。 当应用程序确定时间已经退回时,应用程序(或系统)可能采取一些补救措施,以防止进一步使用应用程序(或系统),直到用户重新建立信任(例如,通过重新验证或重新建立连接 与可信时间服务器)。
-
公开(公告)号:US08931078B2
公开(公告)日:2015-01-06
申请号:US14029096
申请日:2013-09-17
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , Zhongmin Lang , Nitin Desai , James Robert Walker
CPC classification number: H04L63/0272 , H04L63/0807 , H04L63/0884 , H04L63/20 , H04W12/06 , H04W12/08
Abstract: Various aspects of the disclosure relate to providing a per-application policy-controlled virtual private network (VPN) tunnel. In some embodiments, tickets may be used to provide access to an enterprise resource without separate authentication of the application and, in some instances, can be used in such a manner as to provide a seamless experience to the user when reestablishing a per-application policy controlled VPN tunnel during the lifetime of the ticket. Additional aspects relate to an access gateway providing updated policy information and tickets to a mobile device. Other aspects relate to selectively wiping the tickets from a secure container of the mobile device. Yet further aspects relate to operating applications in multiple modes, such as a managed mode and an unmanaged mode, and providing authentication-related services based on one or more of the above aspects.
Abstract translation: 本公开的各个方面涉及提供每应用程序策略控制的虚拟专用网(VPN)隧道。 在一些实施例中,票据可以用于提供对企业资源的访问,而不需要对应用的单独认证,并且在某些情况下可以以这样的方式使用,以便在重新建立每个应用程序策略时向用户提供无缝体验 在票的生命周期内控制VPN隧道。 另外的方面涉及提供对移动设备的更新的策略信息和故障单的接入网关。 其他方面涉及从移动设备的安全容器中选择性地擦拭票据。 另外的方面涉及在诸如管理模式和非托管模式的多种模式中的操作应用,以及基于上述方面中的一个或多个来提供与认证相关的服务。
-
公开(公告)号:US08799994B2
公开(公告)日:2014-08-05
申请号:US14044928
申请日:2013-10-03
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , James Robert Walker , Nitin Desai , Zhongmin Lang
CPC classification number: G06F21/72 , G06F21/6218 , G06F21/629 , G06F2221/2111 , H04L51/08 , H04L63/20 , H04L67/10 , H04W12/06 , H04W12/08
Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.
-
公开(公告)号:US20140096186A1
公开(公告)日:2014-04-03
申请号:US14096418
申请日:2013-12-04
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , James Robert Walker , Nitin Desai , Zhongmin Lang
IPC: H04L29/06
CPC classification number: G06F21/72 , G06F21/6218 , G06F21/629 , G06F2221/2111 , H04L51/08 , H04L63/20 , H04L67/10 , H04W12/0027 , H04W12/00503 , H04W12/06 , H04W12/08
Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.
-
公开(公告)号:US20140040638A1
公开(公告)日:2014-02-06
申请号:US14044919
申请日:2013-10-03
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , James Robert Walker , Nitin Desai , Zhongmin Lang
CPC classification number: H04L63/20 , G06F21/335 , G06F21/54 , G06F21/604 , G06F21/6218 , G06F21/629 , G06F21/72 , G06F2221/2101 , G06F2221/2111 , G06F2221/2137 , G06F2221/2143 , H04L41/00 , H04L41/28 , H04L51/08 , H04L63/0815 , H04L63/0823 , H04L63/0853 , H04L63/10 , H04L63/102 , H04L63/104 , H04L67/10 , H04W12/06 , H04W12/08
Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.
-
公开(公告)号:US10284627B2
公开(公告)日:2019-05-07
申请号:US14021227
申请日:2013-09-09
Applicant: Citrix Systems, Inc.
Inventor: Zhongmin Lang , Gary Barton , Nitin Desai , James R. Walker
Abstract: A method and system for managing an application with multiple modes are described. A device manager that manages a mobile device may monitor the mobile device. The device manager may detect that a first type of application that runs in a managed mode (or in multiple managed modes) and an unmanaged mode is installed on the mobile device. When the application is executed on the device, the application executes in accordance with the selected application mode, e.g., based on location, user, role, industry presence, or other predefined context.
-
公开(公告)号:US10225263B2
公开(公告)日:2019-03-05
申请号:US14967958
申请日:2015-12-14
Applicant: Citrix Systems, Inc.
Inventor: Jason Knight , Nitin Desai , Gary Barton , Sameer Mehta
Abstract: Aspects described herein relate to controlling incoming data processing requests or messages and whether the incoming data processing requests are allowed to reach destination applications unmodified. The destination application may be a secure application operating within a secure application wrapper, and the secure application wrapper may determine whether and how much of the request or message is allowed to pass into a managed partition or through the secure application wrapper to reach the secure application for processing.
-
公开(公告)号:US20180191731A1
公开(公告)日:2018-07-05
申请号:US15910127
申请日:2018-03-02
Applicant: Citrix Systems, Inc.
Inventor: Richard Hayton , Georgy Momchilov , Gary Barton , Andrew Innes
CPC classification number: H04L63/105 , G06F21/10 , G06F21/629 , H04L63/0281 , H04L63/08 , H04W12/06 , H04W12/08
Abstract: Methods and systems are disclosed for providing approaches to anonymous application wrapping on a mobile device. The methods and systems may include receiving, by a controller service, a request to associate a first application executing on a client device with the controller service, and obtaining, by the controller service, a first application identifier associated with the first application. The methods and systems may also include receiving, by the controller service from an application service, a request for a first service and a conditional application identifier, and configuring, by the controller service and based on the request for the first service, the first application with a second set of one or more policy instructions used to control the first application.
-
公开(公告)号:US20170293767A1
公开(公告)日:2017-10-12
申请号:US15634193
申请日:2017-06-27
Applicant: Citrix Systems, Inc.
Inventor: Gary Barton , Richard Hayton , Andrew Carnegie Innes , Georgy Momchilov
CPC classification number: G06F21/606 , G06F9/485 , G06F9/544 , G06F21/41 , H04L63/0272 , H04L63/0428 , H04L67/10
Abstract: Methods and systems for communicating information between mobile applications are presented. In some embodiments, a mobile device may determine that a plurality of applications are running on the mobile device. The mobile device may determine that each application of the plurality of applications uses a shared passcode to encrypt information about a persistent state. The mobile device may generate a beacon that includes encrypted state information. The mobile device may maintain state information across the plurality of applications beyond the lifetime of any one of the plurality of applications by transmitting the beacon from a first application to a second application before the first application's lifetime is completed.
-
-
-
-
-
-
-
-
-