Network access by applications in an enterprise managed device system
AssigneeVMware, Inc.
InventorsGaurav Verma, Suchit Shivashankar, Don Joy
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for enforcing network access permissions on applications that are installed on a client device. A network whitelist or network blacklist can be deployed by a management service onto a managed client device. A management component can facilitate enforcement of the whitelist and/or blacklist to enforce network access rules on installed applications.
Claims20
A system, comprising:
- a client device;
- and
- a management component executable in the client device that, when executed, causes the at least one computing device to:
- initiate enrollment of the client device with a management service based upon a user credential associated with a user account accessible to the management service;
- obtain a network whitelist associated with the user account, the network whitelist identifying an application and a respective network permission associated with the application, the respective network permission specifying at least one condition under which the application is permitted to access a network connection;
- determine a current network status of the client device;
- determine that the application is disallowed from accessing the network connection based upon the current network status;
- and
- modify an operating system network permission associated with the application based upon the determination that the application is disallowed from accessing the network connection.
A method implemented by a management component installed on a client device, comprising:
- initiating enrollment of the client device with a management service based upon a user credential associated with a user account accessible to the management service;
- obtaining a network whitelist associated with the user account, the network whitelist identifying an application and a respective network permission associated with the application, the respective network permission specifying at least one condition under which the application is permitted to access a network connection;
- determining a current network status of the client device;
- determining that the application is disallowed from accessing the network connection based upon the current network status;
- and
- modifying an operating system network permission associated with the application based upon the determination that the application is disallowed from accessing the network connection.
A non-transitory computer-readable medium embodying a management component executable in a client device that, when executed, causes the client device to:
- initiate enrollment of the client device with a management service based upon a user credential associated with a user account accessible to the management service;
- obtain a network whitelist associated with the user account, the network whitelist identifying an application and a respective network permission associated with the application, the respective network permission specifying at least one condition under which the application is permitted to access a network connection;
- determine a current network status of the client device;
- determine that the application is disallowed from accessing the network connection based upon the current network status;
- and
- modify an operating system network permission associated with the application based upon the determination that the application is disallowed from accessing the network connection.
Dependencies are inferred from the claim text.