Systems, devices and processes to support mobile device management of multiple containers in virtualization environment

A process for mobile device management comprising:

• transmitting, by a server, an activation message to a mobile device having a plurality of containers, each container of the plurality of containers isolating data and processes on the mobile device from other containers of the plurality of containers, the activation message activating a first virtual container of the plurality of virtual containers;
• transmitting, by the server, a first container level command for execution by a first agent residing in the first virtual container to control access to resources of the mobile device by only the first virtual container;
• and
• transmitting, by the server, a first device level command for execution by a controller residing on the mobile device to control access to resources of the mobile device by all of the plurality of containers.

A mobile device comprising

• a plurality of containers, each container of the plurality of containers isolating data and processes on the mobile device from other containers of the plurality of containers, the plurality of containers having a first virtual container;
• a physical communication interface to receive a first device level command and a first container level command;
• at least one processor to configure:
• a first agent residing in the first virtual container to execute the first container level command to control access to resources of the mobile device by only the first virtual container;
• and
• a controller residing on the mobile device, the controller for executing the first device level command to control access to the resources of the mobile device by all of the plurality of containers.

A system for mobile device management comprising:

• a first agent residing in a first virtual container of a plurality of containers on a mobile device, each container of the plurality of containers isolating data and processes from other containers of the plurality of containers;
• a controller residing on the mobile device;
• and
• at least one server in secure communication with the mobile device to transmit commands including a first device level command and a first container level command, the first device level command for execution by the controller to control access to the resources of the mobile device by all of the plurality of containers, the first container level command to control access to resources of the mobile device by only the first virtual container.