Mobile device using shared digital certificate for different managed enterprise applications and related methods

Patent metadata

Field	Value
Publication number	US-10356084-B2
Application number	US-201816016042-A
Country	US
Kind code	B2
Filing date	Jun 22, 2018
Priority date	Nov 21, 2016
Publication date	Jul 16, 2019
Grant date	Jul 16, 2019

Abstract

A mobile device may include at least one memory and a processor-cooperating with the at least one memory to enroll with an enterprise mobility management (EMM) server and store a plurality of different managed enterprise applications in the at least one memory, and receive and store a digital certificate associated with a given one of the managed enterprise applications in a secure shared location within the at least one memory. The processor may further run the plurality of managed enterprise applications to share access to the digital certificate from the secure shared location and generate and send encrypted data to another mobile device via the EMM server with all of the managed enterprise applications using the same digital certificate associated with the given managed enterprise application for encryption so that the EMM server is unable to decrypt the encrypted data.

First claim

That which is claimed is:

1. A mobile device comprising:
at least one memory and a processor cooperating with the at least one memory to
enroll with an enterprise mobility management (EMM) server and store a plurality of different managed enterprise applications in the at least one memory,
receive and store a digital certificate associated with a given one of the managed enterprise applications in a secure shared location within the at least one memory, and
run the plurality of managed enterprise applications to share access to the digital certificate from the secure shared location and generate and send encrypted data to another mobile device via the EMM server with all of the managed enterprise applications using the same digital certificate associated with the given managed enterprise application for encryption so that the EMM server is unable to decrypt the encrypted data.

2. The mobile device of claim 1 wherein one of the plurality of managed enterprise applications comprises a chat application to generate encrypted chat data.

3. The mobile device of claim 1 wherein one of the plurality of managed enterprise applications comprises an electronic mail (email) application to generate encrypted email data.

4. The mobile device of claim 1 wherein one of the plurality of managed enterprise applications comprises a video streaming application to generate encrypted video streaming data.

5. The mobile device of claim 1 wherein the plurality of managed enterprise applications are stored in a secure container.

6. The mobile device of claim 1 wherein the digital certificate comprises at least one public key server (PKS) certificate.

7. The mobile device of claim 1 wherein the digital certificate comprises a Secure/Multipurpose Internet Mail Extensions (S/MIME) certificate.

8. The mobile device of claim 1 wherein the at least one memory and processor further cooperate to receive and store the digital certificate via electronic mail delivery.

9. The mobile device of claim 1 wherein the at least one memory and processor further cooperate to receive and store the digital certificate as a derived credential.

10. The mobile device of claim 1 wherein a smart card is associated with the mobile device; and wherein the at least one memory and processor further cooperate to receive and store the digital certificate via the respective smart card.

11. A method comprising:
enrolling a mobile device with an enterprise mobility management (EMM) server and storing a plurality of different managed enterprise applications in at least one memory of the mobile device;
receiving and storing a digital certificate associated with a given one of the managed enterprise applications in a secure shared location within the at least one memory; and
running the plurality of managed enterprise applications to access the digital certificate from the secure shared location and generate and send encrypted data to another mobile device via the EMM server with all of the managed enterprise applications using the same digital certificate associated with the given managed enterprise application for encryption so that the EMM server is unable to decrypt the encrypted data.

12. The method of claim 11 wherein the given managed enterprise application comprises an electronic mail (email) application to generate encrypted email data.

13. The method of claim 11 wherein one of the plurality of managed enterprise applications comprises a video streaming application to generate encrypted video streaming data.

14. The method of claim 11 wherein storing comprises storing the plurality of managed enterprise applications in a secure container.

15. The method of claim 11 wherein the digital certificate comprises at least one of a public key server (PKS) certificate and a Secure/Multipurpose Internet Mail Extensions (S/MIME) certificate.

16. A non-transitory computer-readable medium for a mobile device comprising at least one memory and having computer executable instructions for causing the mobile device to perform steps comprising:
enrolling with an enterprise mobility management (EMM) server and storing a plurality of different managed enterprise applications in the at least one memory;
receiving and storing a digital certificate associated with a given one of the managed enterprise applications in a secure shared location within the at least one memory; and
running the plurality of managed enterprise applications to access the digital certificate from the secure shared location and generate and send encrypted data to another mobile device via the EMM server with all of the managed enterprise applications using the same digital certificate associated with the given managed enterprise application for encryption so that the EMM server is unable to decrypt the encrypted data.

17. The non-transitory computer-readable medium of claim 16 wherein the given managed enterprise application comprises an electronic mail (email) application to generate encrypted email data.

18. The non-transitory computer-readable medium of claim 16 wherein one of the plurality of managed enterprise applications comprises a video streaming application to generate encrypted video streaming data.

19. The non-transitory computer-readable medium of claim 16 wherein storing comprises storing the plurality of managed enterprise applications in a secure container.

20. The non-transitory computer-readable medium of claim 16 wherein the digital certificate comprises at least one of a public key server (PKS) certificate and a Secure/Multipurpose Internet Mail Extensions (S/MIME) certificate.

Assignees

• Citrix Systems Inc

Inventors

• Mistry Shaunak

Classifications

• G06F21/33

  using certificates · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• H04L2209/80

  Wireless · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title