Gateway for controlling mobile device access to enterprise resources

Non-transitory computer storage that stores a gateway component for controlling mobile device accesses to enterprise resources, said gateway component comprising executable code that directs a computing system to perform a process that comprises:

• receiving a request from a mobile device to access an enterprise resource, the request formatted according to a protocol that includes properties associated with the mobile device;
• determining whether the request has one or more property values that correspond to one or more property values of one or more gateway rules, each gateway rule comprising:
• one or more values of one or more of said properties of the protocol;
• and
• an indication of an action to be taken when the request has one or more property values that correspond to the one or more property values of the gateway rule;
• and
• when the request has one or more property values that correspond to one or more property values of one of the gateway rules, causing the action indicated in the one gateway rule to be taken.

Non-transitory computer storage that stores executable gateway software for an enterprise computing system, said gateway software comprising:

• a gateway configuration service configured to receive gateway rules from one or more gateway rule providers, each gateway rule comprising:
• one or more values of one or more of said properties of the protocol;
• and
• an indication of an action to be taken when a request formatted according to said protocol has one or more property values that match the one or more property values of the gateway rule;
• and
• a gateway filter configured to:
• receive requests from mobile devices to access computer-implemented resources of the enterprise computing system, at least some of the requests formatted according to a protocol that includes properties associated with at least one of the mobile devices, mobile device applications, or mobile device users;
• access the gateway rules received by the gateway configuration service;
• for each of the requests formatted according to said protocol, determine whether the request has one or more property values that match one or more property values of any of the gateway rules;
• and
• for each of the requests having one or more property values that match one or more property values of one of the gateway rules, allow or deny the request based on the instruction of the gateway rule.

A system for controlling mobile device access policies, the system comprising:

• a first machine-readable repository of enterprise access policies defining conditions under which to execute actions related to requests from mobile devices to access computer-implemented resources of an enterprise;
• a second machine-readable repository of attributes of mobile devices associated with the enterprise and/or users associated with the mobile devices;
• and
• a computer system that runs a gateway rule generator that is configured to:
• read the enterprise access policies from the first repository;
• query the attributes of the second repository;
• and
• create gateway rules to enforce the access policies read from the first repository, each of the gateway rules comprising:
• one or more values of one or more properties of a protocol for mobile device requests for accessing computer-implemented enterprise resources, at least some of the properties corresponding to specific mobile devices;
• and
• an indication to take an action associated with a mobile device request formatted according to said protocol, when the request has one or more property values that match the one or more property values of the gateway rule;
• wherein the system is configured to cause transmission of the gateway rules to a gateway configured to receive the mobile device requests for accessing the enterprise resources.

A computer-implemented method of facilitating communication between a mobile device and an enterprise computing system, the method comprising:

• under control of at least one computing device programmed with specific executable instructions:
• monitoring communications between a mobile device and an enterprise resource of an enterprise computing system;
• detecting that a selected one of the communications between the mobile device and the enterprise resource is formatted according to a protocol;
• determining a selected action identified in one or more predefined rules that corresponds to a protocol-specific condition of the protocol, the protocol-specific condition being associated with the selected communication;
• and
• executing the selected action for the selected communication responsive to said determining.