公开(公告)号：US09521147B2

公开(公告)日：2016-12-13

申请号：US14340096

申请日：2014-07-24

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  James Robert Walker ,  Nitin Desai ,  Zhongmin Lang

IPC: H04L12/24 ,  H04L29/06

CPC classification number: H04L63/20 ,  G06F21/335 ,  G06F21/54 ,  G06F21/604 ,  G06F21/6218 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/2101 ,  G06F2221/2111 ,  G06F2221/2137 ,  G06F2221/2143 ,  H04L41/00 ,  H04L41/28 ,  H04L51/08 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/0853 ,  H04L63/10 ,  H04L63/102 ,  H04L63/104 ,  H04L67/10 ,  H04W12/06 ,  H04W12/08

Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

Abstract translation: 本文描述了用于在移动设备上管理企业应用的改进的技术。 在移动设备上运行的每个企业移动应用都具有与其环境交互的相关策略。 该策略根据企业规定有选择性地阻止或者允许涉及企业应用的活动。 一起，在移动设备上运行的企业应用程序组成一组受管应用程序。 管理应用程序通常被允许与其他受管应用程序交换数据，但被阻止与其他应用程序（例如用户自己的个人应用程序）交换数据。 可以定义政策来管理数据共享，移动资源管理，应用程序特定信息，网络和数据访问解决方案，设备云和传输，双模式应用软件，企业应用商店访问以及虚拟化应用和资源等。

公开(公告)号：US20160173503A1

公开(公告)日：2016-06-16

申请号：US14967958

申请日：2015-12-14

Applicant: Citrix Systems, Inc.

Inventor： Jason Knight ,  Nitin Desai ,  Gary Barton ,  Sameer Mehta

IPC: H04L29/06

CPC classification number: H04L63/105 ,  G06F21/54 ,  G06F21/604 ,  H04L63/12

Abstract: Aspects described herein relate to controlling incoming data processing requests or messages and whether the incoming data processing requests are allowed to reach destination applications unmodified. The destination application may be a secure application operating within a secure application wrapper, and the secure application wrapper may determine whether and how much of the request or message is allowed to pass into a managed partition or through the secure application wrapper to reach the secure application for processing.

Abstract translation: 本文描述的方面涉及控制传入数据处理请求或消息以及是否允许传入数据处理请求未修改地到达目的地应用。 目的地应用程序可以是在安全应用程序包装器内运行的安全应用程序，并且安全应用程序包装器可以确定请求或消息是否允许多少或被允许多少进入托管分区或通过安全应用程序包装器到达安全应用程序 用于处理。

公开(公告)号：US20160057278A1

公开(公告)日：2016-02-25

申请号：US14932293

申请日：2015-11-04

Applicant: Citrix Systems, Inc.

Inventor： Nitin Desai

IPC: H04M1/725 ,  H04W12/08 ,  H04W4/02 ,  H04W12/06

CPC classification number: H04M1/72577 ,  G06F21/60 ,  G06F2221/2111 ,  H04L63/08 ,  H04L63/1408 ,  H04M1/72522 ,  H04M1/72572 ,  H04W4/021 ,  H04W12/06 ,  H04W12/08

Abstract: A method and system for locking a mobile device on an interface are described. A user logs on to a mobile device with a user name. The mobile device then determines a context for the mobile device based on one or more operational parameters and/or the user name. For example, a context for the mobile device may be a current location of the device. Based on the context and user name, the mobile device may run in locked mode. In locked mode, applications are selected to be presented on the mobile device based on the user name and context. The mobile device is locked on a springboard that presents only the selected applications to the user for launching. A user may switch between launched applications on the mobile device, but the user may only switch between launched applications that are presented on the springboard.

Abstract translation: 描述了用于在移动设备上锁定界面的方法和系统。 用户使用用户名登录到移动设备。 然后，移动设备基于一个或多个操作参数和/或用户名来确定移动设备的上下文。 例如，移动设备的上下文可以是设备的当前位置。 基于上下文和用户名，移动设备可以在锁定模式下运行。 在锁定模式下，应用程序被选择为基于用户名和上下文在移动设备上呈现。 移动设备被锁定在仅向用户发送所选应用的跳板上。 用户可以在移动设备上的推出的应用之间进行切换，但是用户可以仅在呈现在跳板上的启动应用之间切换。

公开(公告)号：US09215225B2

公开(公告)日：2015-12-15

申请号：US13886765

申请日：2013-05-03

Applicant: Citrix Systems, Inc.

Inventor： Nitin Desai

IPC: H04L29/06 ,  G06F21/60

CPC classification number: H04M1/72577 ,  G06F21/60 ,  G06F2221/2111 ,  H04L63/08 ,  H04L63/1408 ,  H04M1/72522 ,  H04M1/72572 ,  H04W4/021 ,  H04W12/06 ,  H04W12/08

Abstract: A method and system for locking a mobile device on an interface are described. A user logs on to a mobile device with a user name. The mobile device then determines a context for the mobile device based on one or more operational parameters and/or the user name. For example, a context for the mobile device may be a current location of the device. Based on the context and user name, the mobile device may run in locked mode. In locked mode, applications are selected to be presented on the mobile device based on the user name and context. The mobile device is locked on a springboard that presents only the selected applications to the user for launching. A user may switch between launched applications on the mobile device, but the user may only switch between launched applications that are presented on the springboard.

Abstract translation: 描述了用于在移动设备上锁定界面的方法和系统。 用户使用用户名登录到移动设备。 然后，移动设备基于一个或多个操作参数和/或用户名来确定移动设备的上下文。 例如，移动设备的上下文可以是设备的当前位置。 基于上下文和用户名，移动设备可以在锁定模式下运行。 在锁定模式下，应用程序被选择为基于用户名和上下文在移动设备上呈现。 移动设备被锁定在仅向用户发送所选应用的跳板上。 用户可以在移动设备上的推出的应用之间进行切换，但是用户可以仅在呈现在跳板上的启动应用之间切换。

公开(公告)号：US09213850B2

公开(公告)日：2015-12-15

申请号：US14044919

申请日：2013-10-03

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  James Robert Walker ,  Nitin Desai ,  Zhongmin Lang

IPC: H04L29/06 ,  G06F12/14 ,  G06F7/04 ,  G06F3/00 ,  G06F21/60 ,  H04L12/24 ,  G06F21/62 ,  H04L12/58 ,  G06F21/72 ,  H04W12/08 ,  G06F21/33 ,  G06F21/54 ,  H04W12/06 ,  H04L29/08

CPC classification number: H04L63/20 ,  G06F21/335 ,  G06F21/54 ,  G06F21/604 ,  G06F21/6218 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/2101 ,  G06F2221/2111 ,  G06F2221/2137 ,  G06F2221/2143 ,  H04L41/00 ,  H04L41/28 ,  H04L51/08 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/0853 ,  H04L63/10 ,  H04L63/102 ,  H04L63/104 ,  H04L67/10 ,  H04W12/06 ,  H04W12/08

Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

Abstract translation: 本文描述了用于在移动设备上管理企业应用的改进的技术。 在移动设备上运行的每个企业移动应用都具有与其环境交互的相关策略。 该策略根据企业规定有选择性地阻止或者允许涉及企业应用的活动。 一起，在移动设备上运行的企业应用程序组成一组受管应用程序。 管理应用程序通常被允许与其他受管应用程序交换数据，但被阻止与其他应用程序（例如用户自己的个人应用程序）交换数据。 可以定义政策来管理数据共享，移动资源管理，应用程序特定信息，网络和数据访问解决方案，设备云和传输，双模式应用软件，企业应用商店访问以及虚拟化应用和资源等。

公开(公告)号：US09111105B2

公开(公告)日：2015-08-18

申请号：US14044946

申请日：2013-10-03

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  James Robert Walker ,  Nitin Desai ,  Zhongmin Lang

IPC: G06F15/16 ,  G06F21/60 ,  H04L12/24 ,  H04L29/06 ,  G06F21/62 ,  H04L12/58 ,  G06F21/72 ,  H04W12/08 ,  G06F21/33 ,  G06F21/54 ,  H04W12/06 ,  H04L29/08

CPC classification number: H04L63/20 ,  G06F21/335 ,  G06F21/54 ,  G06F21/604 ,  G06F21/6218 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/2101 ,  G06F2221/2111 ,  G06F2221/2137 ,  G06F2221/2143 ,  H04L41/00 ,  H04L41/28 ,  H04L51/08 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/0853 ,  H04L63/10 ,  H04L63/102 ,  H04L63/104 ,  H04L67/10 ,  H04W12/06 ,  H04W12/08

Abstract: Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

公开(公告)号：US20150199213A1

公开(公告)日：2015-07-16

申请号：US14151972

申请日：2014-01-10

Applicant: Citrix Systems, Inc.

Inventor： Nitin Desai ,  Zhongmin Lang

IPC: G06F9/48

CPC classification number: G06F9/468 ,  G06F9/48 ,  G06F21/60 ,  H04L63/20 ,  H04L67/10 ,  H04L67/141 ,  H04L67/20 ,  H04L67/306 ,  H04W12/08

Abstract: Methods, systems, computer-readable media, and apparatuses for providing mobile application management (MAM) functionalities are presented. In some embodiments, a mobile device may initialize a partially managed application associated with a first managed user account and an unmanaged user account. The mobile device may execute first managed tasks associated with the first managed user account in accordance with a first set of MAM policies provided by a first MAM service provider. The mobile device may execute unmanaged tasks associated with the unmanaged account independent of the first set of MAM policies. In some embodiments, the mobile device may initialize the multi-account managed application associated with a second managed user account.

Abstract translation: 提出了用于提供移动应用管理（MAM）功能的方法，系统，计算机可读介质和装置。 在一些实施例中，移动设备可以初始化与第一被管理用户帐户和非托管用户帐户相关联的部分管理的应用。 根据由第一MAM服务提供商提供的第一组MAM策略，移动设备可以执行与第一被管理用户帐户相关联的第一管理任务。 移动设备可以独立于第一组MAM策略来执行与非托管帐户相关联的非托管任务。 在一些实施例中，移动设备可以初始化与第二管理用户帐户相关联的多帐户管理应用。

公开(公告)号：US20150067769A1

公开(公告)日：2015-03-05

申请号：US14535597

申请日：2014-11-07

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  Zhongmin Lang ,  Nitin Desai ,  James Robert Walker

IPC: H04L29/06

CPC classification number: H04L63/0807 ,  G06F21/31 ,  G06F2221/2105 ,  H04L63/0272 ,  H04L63/029 ,  H04L63/0815 ,  H04L63/20 ,  H04W12/06 ,  H04W12/08

Abstract: Various aspects of the disclosure relate to providing a per-application policy-controlled virtual private network (VPN) tunnel. In some embodiments, tickets may be used to provide access to an enterprise resource without separate authentication of the application and, in some instances, can be used in such a manner as to provide a seamless experience to the user when reestablishing a per-application policy controlled VPN tunnel during the lifetime of the ticket. Additional aspects relate to an access gateway providing updated policy information and tickets to a mobile device. Other aspects relate to selectively wiping the tickets from a secure container of the mobile device. Yet further aspects relate to operating applications in multiple modes, such as a managed mode and an unmanaged mode, and providing authentication-related services based on one or more of the above aspects.

Abstract translation: 本公开的各个方面涉及提供每应用程序策略控制的虚拟专用网（VPN）隧道。 在一些实施例中，票据可以用于提供对企业资源的访问，而不需要对应用的单独认证，并且在某些情况下可以以这样的方式使用，以便在重新建立每个应用程序策略时向用户提供无缝体验 在票的生命周期内控制VPN隧道。 另外的方面涉及提供对移动设备的更新的策略信息和故障单的接入网关。 其他方面涉及从移动设备的安全容器中选择性地擦拭票据。 另外的方面涉及在诸如管理模式和非托管模式的多种模式中的操作应用，以及基于上述方面中的一个或多个来提供与认证相关的服务。

公开(公告)号：US08910239B2

公开(公告)日：2014-12-09

申请号：US14029088

申请日：2013-09-17

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  Zhongmin Lang ,  Nitin Desai ,  James Robert Walker

IPC: G06F17/00 ,  H04L29/06 ,  H04W12/06

CPC classification number: H04L63/0807 ,  G06F21/31 ,  G06F2221/2105 ,  H04L63/0272 ,  H04L63/029 ,  H04L63/0815 ,  H04L63/20 ,  H04W12/06 ,  H04W12/08

Abstract: Various aspects of the disclosure relate to providing a per-application policy-controlled virtual private network (VPN) tunnel. In some embodiments, tickets may be used to provide access to an enterprise resource without separate authentication of the application and, in some instances, can be used in such a manner as to provide a seamless experience to the user when reestablishing a per-application policy controlled VPN tunnel during the lifetime of the ticket. Additional aspects relate to an access gateway providing updated policy information and tickets to a mobile device. Other aspects relate to selectively wiping the tickets from a secure container of the mobile device. Yet further aspects relate to operating applications in multiple modes, such as a managed mode and an unmanaged mode, and providing authentication-related services based on one or more of the above aspects.

公开(公告)号：US20140331285A1

公开(公告)日：2014-11-06

申请号：US13886765

申请日：2013-05-03

Applicant: CITRIX SYSTEMS, INC.

Inventor： Nitin Desai

IPC: H04L29/06

CPC classification number: H04M1/72577 ,  G06F21/60 ,  G06F2221/2111 ,  H04L63/08 ,  H04L63/1408 ,  H04M1/72522 ,  H04M1/72572 ,  H04W4/021 ,  H04W12/06 ,  H04W12/08

Abstract: A method and system for locking a mobile device on an interface are described. A user logs on to a mobile device with a user name. The mobile device then determines a context for the mobile device based on one or more operational parameters and/or the user name. For example, a context for the mobile device may be a current location of the device. Based on the context and user name, the mobile device may run in locked mode. In locked mode, applications are selected to be presented on the mobile device based on the user name and context. The mobile device is locked on a springboard that presents only the selected applications to the user for launching. A user may switch between launched applications on the mobile device, but the user may only switch between launched applications that are presented on the springboard.

Abstract translation: 描述了用于在移动设备上锁定界面的方法和系统。 用户使用用户名登录到移动设备。 然后，移动设备基于一个或多个操作参数和/或用户名来确定移动设备的上下文。 例如，移动设备的上下文可以是设备的当前位置。 基于上下文和用户名，移动设备可以在锁定模式下运行。 在锁定模式下，应用程序被选择为基于用户名和上下文在移动设备上呈现。 移动设备被锁定在仅向用户发送所选应用的跳板上。 用户可以在移动设备上的推出的应用之间进行切换，但是用户可以仅在呈现在跳板上的启动应用之间切换。