Multi-persona management and devices

Patent metadata

Field	Value
Publication number	US-11070543-B2
Application number	US-201816158880-A
Country	US
Kind code	B2
Filing date	Oct 12, 2018
Priority date	Sep 16, 2013
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

A method of installing an application on a device configured with a plurality of personas is disclosed. The method includes receiving an indication to engage a first persona of the plurality of personas. The method further includes causing an indication of the first persona to be displayed. The method further includes receiving via an interface associated with the first persona, an indication to install a first application. The method further includes causing the first application to be installed. The method further includes causing the installed first application to be associated with the first persona.

First claim

What is claimed is:

1. A method comprising:
configuring a first end-user environment in a device, wherein the first end-user environment stores data in association with a first subscriber identity module (SIM) persona on the device;
configuring a second end-user environment in the device, wherein the second end-user environment stores data in association with a second SIM persona on the device, and the second end-user environment is remotely managed over a network by a management system, wherein configuring the second end-user environment comprises generating a plurality of compliance rules based on an operating system executed by the second end-user environment;
identifying a trigger event from the device at an instance in which the device is actively operating the first end-user environment;
verifying authorization of the device to access the second end-user environment;
causing the device to switch to the second end-user environment in an instance in which the device has been verified as having the authorization to access the second end-user environment, wherein the second end-user environment is configured to enforce the plurality of compliance rules for the operating system executed by the second end-user environment; and
in response to receiving a request from the device to access a network resource from the device, determining a level of content access that the device has for the network resource based at least in part on an active use of the second end-user environment and based at least in part on an authorization credential associated with the device and associated with a user group, wherein the authorization credential indicates the level of content access for the network resource for a respective member of the user group.

2. The method of claim 1 , further comprising:
determining that the second end-user environment is managed by the management system prior to verifying the authorization of the device to access the second end-user environment.

3. The method of claim 1 , wherein verifying authorization of the device to access the second end-user environment further comprises at least one of performing a biometric scan or detecting a user-gesture on a display of the device.

4. The method of claim 1 , wherein the first SIM persona or the second SIM persona comprises at least one of: a physical SIM card, a virtual SIM card entity, or a virtual entity embedded on the device.

5. The method of claim 1 , wherein the device comprises a first device, and at least one of the first SIM persona or the second SIM persona is transferable to a second device.

6. The method of claim 1 , further comprising:
while actively operating in the first end-user environment, routing email communication received by the device to the second end-user environment based on a detection of a SIM persona address, wherein the email communication is inaccessible from the first end-user environment.

7. The method of claim 1 , further comprising:
causing the device to switch to a third end-user environment that facilitates locating the device in an instance in which the device has deviated from a pattern of locations associated with the device, wherein the deviation from the pattern of locations is determined based on location system data.

8. A system, comprising:
a computing device that comprises a processor and memory; and
program instructions executable in the computing device that, when executed by the computing device, cause the computing device to at least:
configure a first end-user environment in the computing device, wherein the first end-user environment stores data in association with a first subscriber identity module (SIM) persona on the computing device;
configure a second end-user environment in the computing device, wherein the second end-user environment stores data in association with a second SIM persona on the computing device, and the second end-user environment is remotely managed over a network by a management system, wherein configuring the second end-user environment comprises generating a plurality of compliance rules based on an operating system executed by the second end-user environment;
identify a trigger event from the computing device at an instance in which the computing device is actively operating the first end-user environment;
verify authorization of the computing device to access the second end-user environment;
cause the computing device to switch to the second end-user environment at in instance in which the computing device has been verified as having the authorization to access the second end-user environment, wherein the second end-user environment is configured to enforce the plurality of compliance rules for the operating system executed by the second end-user environment; and
in response to receiving a request from the device to access a network resource from the device, determine a level of content access that the device has for the network resource based at least in part on an active use of the second end-user environment and based on an authorization credential associated with the device and associated with a user group, wherein the authorization credential indicates the level of content access for the network resource for a respective member of the user group.

9. The system of claim 8 , wherein the program instructions are further configured to cause the computing device to at least:
determine that the second end-user environment is managed by the management system prior to verifying the authorization of the computing device to access the second end-user environment.

10. The system of claim 8 , wherein the trigger event comprises an incoming phone call received by the computing device.

11. The system of claim 8 , wherein the verification of the authorization comprises performing a biometric scan or detecting a user-gesture on a display of the computing device.

12. The system of claim 8 , wherein the first SIM persona or the second SIM persona comprises at least one of: a physical SIM card, a virtual SIM card entity, or a virtual entity embedded on the computing device.

13. The system of claim 8 , wherein the system comprises a first system, and at least one of the first SIM persona or the second SIM persona is transferable to a second system.

14. The system of claim 8 , wherein the program instructions are further configured to cause the computing device to at least:
route, while actively operating in the first end-user environment, email communication received by the computing device to the second end-user environment based on a detection of an identifier associated with the email communication, wherein the email communication is inaccessible from the first end-user environment.

15. The system of claim 8 , wherein the program instructions are further configured to cause the computing device to at least:
switch to a third end-user environment that facilitates locating the system in an instance in which the system has deviated from a pattern of locations associated with the system, wherein the deviation from the pattern of locations is determined based on location system data.

16. A non-transitory computer-readable medium comprising executable instructions which, when executed by a computing device, cause the computing device to at least:
configure a first end-user environment in the computing device, wherein the first end-user environment stores data in association with a first subscriber identity module (SIM) persona on the computing device;
configure a second end-user environment in the computing device, wherein the second end-user environment stores da

Assignees

• Airwatch Llc

Inventors

• Deweese William
• Brannon Jonathan Blake
• Stuntebeck Erich

Classifications

• G06F9/4451 Primary

  User profiles; Roaming · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• G06F1/1647

  including at least an additional display (G06F1/1692 takes precedence) · CPC title

• H04W12/086

  using security domains · CPC title