Mobile application management

Patent metadata

Field	Value
Publication number	US-11157616-B2
Application number	US-201816138904-A
Country	US
Kind code	B2
Filing date	Sep 21, 2018
Priority date	Oct 19, 2012
Publication date	Oct 26, 2021
Grant date	Oct 26, 2021

Abstract

Code of a particular application is analyzed against a semantic model of a software development kit of a particular platform. The semantic model associates a plurality of application behaviors with respective application programming interface (API) calls of the particular platform. A set of behaviors of the particular application is identified based on the analysis of the code and a particular one of the set of behaviors is identified as an undesired behavior. The particular application can be automatically modified to remediate the undesired behavior. The particular application can be assigned to one of a plurality of device modes, and access to the particular application on a user device can be based on which of the plurality of device modes is active on the user device.

First claim

The invention claimed is:

1. At least one non-transitory machine-readable storage medium having instructions stored thereon, the instructions when executed on at least one processor, cause the at least one processor to:
receive a crowdsourced shared usage mode, wherein the shared usage mode is based on crowdsourced information about a plurality of devices, and shared across a plurality of devices of an enterprise;
identify a received user input;
cause selection of a particular mode of a plurality of modes defined for a particular user device based on the received user input, the plurality of modes including at least an unrestricted mode associated with an owner of the device and a shared usage mode associated with a non-owner of the device; and
after selecting the shared usage mode, cause access to be restricted, at the particular user device, from one or more restricted applications installed on the particular user device, wherein the one or more restricted applications are accessible in the unrestricted mode, and wherein the restriction is based, at least in part, on the crowdsourced information.

2. The at least one non-transitory machine-readable storage medium of claim 1 , wherein the particular mode is activated based on the particular user device receiving an input of a particular passcode, wherein the plurality of modes are associated with a respective passcodes.

3. The at least one non-transitory machine-readable storage medium of claim 2 , wherein activation of the particular mode comprises:
identifying the particular mode from the plurality of modes based on the input of the particular passcode; and
authenticating access to the particular mode based on the input of the particular passcode.

4. The at least one non-transitory machine-readable storage medium of claim 1 , wherein one or more of the plurality of modes are user-defined modes.

5. The at least one non-transitory machine-readable storage medium of claim 1 , wherein the plurality of modes comprises an administrative mode allowing for modification of the plurality of modes.

6. The at least one non-transitory machine-readable storage medium of claim 1 , wherein at least one of the plurality of modes is an instance of a mode downloadable from a mode sharing service remote from the particular user device.

7. The at least one non-transitory machine-readable storage medium of claim 1 , wherein the particular mode is activated automatically based at least in part on a detection of a particular context using functionality of the particular user device.

8. The at least one non-transitory machine-readable storage medium of claim 7 , wherein the particular context is detected by a sensor of the particular user device.

9. The at least one non-transitory machine-readable storage medium of claim 8 , wherein the sensor comprises one or more of an accelerometer, a camera, a gyroscope, a global positioning system, a battery status sensor, and a biometric sensor.

10. The at least one non-transitory machine-readable storage medium of claim 1 , wherein at least a particular application of the one or more restricted applications is restricted based on a defined rule for the particular mode.

11. The at least one non-transitory machine-readable storage medium of claim 1 , wherein the particular user device comprises a plurality of applications installed on the particular user device, and
wherein causing access to be restricted from the one or more restricted applications installed on the particular user device comprises the instructions, when executed on the at least one processor, cause the at least one processor to:
allow, at the particular user device, access to a first subset of the plurality of applications; and

prohibit, at the particular user device, access to a second subset of the plurality of applications, the second subset comprising the restricted applications.

12. A method comprising:
receiving crowdsourced usage information about a plurality of devices to define for an enterprise or group a plurality of modes according to the crowdsourced usage information, including at least a shared usage mode with associated usage restrictions;
identifying a user input on a user device;
causing, on the user device, selection of a particular mode of the plurality of modes based on the user input, the plurality of modes including at least an unrestricted mode associated with an owner of the device and the shared usage mode associated with a non-owner of the device; and
after selecting the shared usage mode, causing access to be restricted, at the user device, according to the associated usage restrictions of the shared usage mode, wherein one or more restricted applications accessible in the unrestricted mode.

13. The method of claim 12 , further comprising applying an alternate device configuration to the user device while the particular mode is active.

14. The method of claim 13 , wherein the alternate device configuration restricts access to one or more subsystems of the user device.

15. The method of claim 14 , wherein the alternate device configuration is a particular one of a plurality of alternate device configurations that may be applied during activation of a respective one of the plurality of modes.

16. The method of claim 14 , wherein the one or more subsystems comprise one or more of a camera, an email client, a WiFi adapter, a telephone module, a universal serial bus (USB) port, and a short messaging service (SMS) module.

17. The method of claim 12 , wherein the user input is received at a device remote from the user device.

18. A system comprising:
at least one processor device;
at least one memory element; and
instructions stored on the at least one memory element to instruct the at least one processor device to:
receive from an enterprise service a plurality of modes crowdsourced from usage information about a plurality of devices, including associated usage restrictions for at least a shared usage mode selected from the plurality of modes;
identify a user input;
cause selection of a particular mode of the plurality of modes defined for the system based on the user input, the plurality of modes including at least an unrestricted mode associated with an owner of the device and the shared usage mode, associated with a non-owner of the device; and
after selecting the shared usage mode, cause access to be restricted, on the system, from one or more restricted applications installed on the system, according to the associated usage restrictions.

19. The system of claim 18 , further comprising instructions to:
analyze code of a particular application of the one or more restricted applications against a semantic model of a software development kit of a particular platform, the semantic model associating a plurality of application behaviors with respective application programming interface (API) calls of the particular platform;
detect, based on the analysis of the code, a subset of the plurality of application behaviors of the particular application; and
identify that a particular application behavior of the subset is an undesired behavior.

20. The system of claim 19 , wherein access to the particular application is restricted using the particular mode based at least in part on the undesired behavior.

Assignees

• Mcafee Llc

Inventors

• Nalluri Srikanth
• Kulkarni Dattatraya
• Sinha Raja
• Krishnapur Venkatasubrahmanyam
• Dhruw Kaushal Kumar
• Halder Kamlesh

Classifications

• G06F8/436 Primary

  Semantic checking · CPC title

• G06F2221/2149

  Restricted operating environment · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/563 Primary

  by source code analysis · CPC title