US 9,754,089 B2 · Enterprise application management with enrollment tokens

Abstract

Embodiments of the disclosure provide application management capabilities to enterprises. A computing device of a user, associated with the enterprise, receives an enrollment token signed with a certificate. The enrollment token includes an enterprise identifier associated with the enterprise. The computing device receives a package containing one or more applications. The package also includes an enterprise identifier. Installation and execution of one or more applications from the received package is accepted or rejected based on a comparison of the enterprise identifier from the enrollment token with the enterprise identifier from the received package or application. A web service provides validation services by monitoring the installation and execution of applications on the computing devices associated with the enterprise.

Claims19

Dependent claims

A system for managing execution of applications associated with an enterprise, said system comprising:

a mobile computing device comprising:
a memory;
and
one or more processors programmed to:
enroll the mobile computing device with the enterprise, the enrolling authorizing the enterprise to send applications to the mobile computing device;
upon enrolling the mobile computing device with the enterprise, receive an enrollment token from the enterprise, the enrollment token comprising a first enterprise identifier;
store the enrollment token in the memory;
receive, from the enterprise, an application having a second enterprise identifier associated therewith;
receive a request from a user of the mobile computing device to execute the application;
based on the received request, compare the first enterprise identifier with the second enterprise identifier;
and
based at least on a determination that the first enterprise identifier matches the second enterprise identifier, determine the application is associated with the enterprise that has authorization to send applications to the mobile computing device;
and
upon determining the application is associated with the enterprise, install the application.

11 more elements

One or more computer storage media having executable instructions that cause at least one processor to perform operations comprising:

enrolling a mobile computing device with an enterprise, the enrolling authorizing the enterprise to send applications to the mobile computing device;
upon enrolling the mobile computing device with the enterprise, receiving an enrollment token from the enterprise, the enrollment token comprising a first enterprise identifier;
receiving, from the enterprise, a package comprising an application and a second enterprise identifier;
causing the computing device to compare the first enterprise identifier from the enrollment token with the second enterprise identifier from the package;
and
upon determining that the first enterprise identifier matches the second enterprise identifier;
determining the application is associated with the enterprise that has authorization to send applications to the mobile computing device;
and
based on determining the application is associated with the enterprise, installing the application on the mobile computing device.

6 more elements

Dependencies are inferred from the claim text.

Enterprise application management with enrollment tokens

Life of this patent

Enterprise application management with enrollment tokens

Life of this patent

Abstract

Claims19