# US 10,455,440 B2 · Visual privacy systems for enterprise mobility management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,455,440 B2 - Document ID: US10455440B2 - Status: Granted - Kind: B2 - Application number: 15/974,731 - Filed: 2018-05-09 - Published: 2018-09-13 - Granted: 2019-10-22 - Earliest claimed: 2016-02-10 - Assignees: AirWatch LLC - Applicants: AirWatch, LLC - Inventors: Nicholas Brouillette; Kabir Barday - Web page: https://patentgrep.com/patent/US10455440B2 ## CPC - H04W 24/08: Testing, {supervising or monitoring} using real traffic - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/082: using revocation of authorisation - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - H04W 24/10: Scheduling measurement reports {; Arrangements for measurement reports} - H04W 12/63: Location-dependent; Proximity-dependent - H04W 12/64: using geofenced areas - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems herein allow a user to use their personal user device to perform functions in an enterprise environment in exchange for enrolling at a management server. The management server can provide a privacy component that allows the user to view a privacy profile summarizing data collection activities of the management server. The management server can dynamically build the privacy profile based on device profile and privacy settings stored on the management server. The privacy profile can be dynamically updated based on changes to privacy settings, and can also provide links for a user to see actual data that has been collected at the management server. ## Claims ### Claim 1 A system for displaying information that a management server can collect from a mobile device, comprising: a non-transitory, computer-readable medium that contains instructions; a processor that executes the instructions to perform stages at the mobile device, the stages comprising: installing a privacy component relating to managing the mobile device using the management server; receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change. ### Claim 2 (depends on 1) The system of claim 1, the stages further comprising: receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change. ### Claim 3 (depends on 2) The system of claim 2, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect. ### Claim 4 (depends on 3) The system of claim 3, wherein the second section of data items includes at least two of application details, mobile device details, and user details. ### Claim 5 (depends on 3) The system of claim 3, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps. ### Claim 6 (depends on 3) The system of claim 3, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server. ### Claim 7 (depends on 2) The system of claim 2, wherein displaying the second information includes presenting an option to unenroll from the management server. ### Claim 8 A non-transitory, computer-readable medium containing instructions executed by a processor to perform stages for displaying information that a management server can collect from a mobile device, the stages comprising: installing a privacy component relating to managing the mobile device using the management server; receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change. ### Claim 9 (depends on 8) The non-transitory, computer-readable medium of claim 8, the stages further comprising: receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change. ### Claim 10 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect. ### Claim 11 (depends on 10) The non-transitory, computer-readable medium of claim 10, wherein the second section of data items includes at least two of application details, mobile device details, and user details. ### Claim 12 (depends on 10) The non-transitory, computer-readable medium of claim 10, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps. ### Claim 13 (depends on 10) The non-transitory, computer-readable medium of claim 10, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server. ### Claim 14 (depends on 9) The non-transitory, computer-readable medium of claim 9, wherein displaying the second information includes presenting an option to unenroll from the management server. ### Claim 15 A method for displaying information that a management server can collect from a mobile device, comprising: installing a privacy component relating to managing the mobile device using the management server; receiving an indication of a privacy change from the management server, wherein the indication is sent automatically to the privacy component from the management server based on the privacy change, wherein the privacy change includes a change in information collected by the management server from the user device as compared to information collected prior to the privacy change; and based on the indication of the privacy change, displaying a badge on an icon of the privacy component to indicate the privacy change. ### Claim 16 (depends on 15) The method of claim 15, further comprising: receiving a first selection of the icon prior to displaying the badge, causing the mobile device to display first information being collected from the mobile device by the management server; and receiving a second selection of the icon after displaying the badge, causing the mobile device to display second information being collected from the mobile device by the management server after the privacy change. ### Claim 17 (depends on 16) The method of claim 16, wherein displaying the second information includes displaying a first section of data items that the management server does not collect and a second section of data items that the management server does collect. ### Claim 18 (depends on 17) The method of claim 17, wherein the second section of data items includes at least two of application details, mobile device details, and user details. ### Claim 19 (depends on 17) The method of claim 17, wherein the first section of data items includes at least two of text messages, personal emails, personal photos, and personal apps. ### Claim 20 (depends on 17) The method of claim 17, wherein displaying the second information includes displaying a third section of functions that can be performed at the mobile device by the management server.