Location-based configuration profile toggling

Patent metadata

Field	Value
Publication number	US-11204993-B2
Application number	US-201916400816-A
Country	US
Kind code	B2
Filing date	May 1, 2019
Priority date	May 2, 2013
Publication date	Dec 21, 2021
Grant date	Dec 21, 2021

Abstract

Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled an the user devices if the location constraints are satisfied.

First claim

What is claimed is:

1. A method for enforcing a compliance rule associated with a business email configuration profile, comprising:
providing the business email configuration profile from a management server to a mobile computing device, the business email configuration profile including the compliance rule, wherein the compliance rule requires the mobile computing device to be within a threshold distance of a second mobile computing device in order to access a business email account;
causing, by the management server, the mobile computing device to switch from a personal email configuration profile to the business email configuration profile based on the location of the mobile computing device; and
causing the mobile computing device to:
detect a call, by an application of the mobile computing device to an operating system of the mobile computing device, that attempts to access the business email account;
determine a distance between the mobile computing device and the second mobile computing device;
determine whether the distance is within the threshold distance required by the compliance rule;
if the mobile computing device is within the threshold distance of the second mobile computing device, approve the call by the application; and
if the mobile computing device is outside the threshold distance of the second mobile computing device, block the call by the application.

2. The method of claim 1 , wherein the detecting, determining, approving, and blocking are carried out by an agent application installed on the mobile computing device by a management server based on the device enrolling with the management server.

3. The method of claim 1 , further comprising providing an agent application, from a management server to the mobile computing device, wherein the agent application enforces the compliance rule.

4. The method of claim 1 , wherein the business email configuration profile is established be an administrator and applied to a plurality of user devices based on the users of those user devices having a same level of email access privilege.

5. The method of claim 1 , wherein the application of the mobile computing device comprises a web browser.

6. The method of claim 1 , wherein the compliance rule further specifies that the mobile computing device block the call to the operating system if the mobile computing device is not connected to a virtual private network (VPN).

7. The method of claim 1 , further comprising providing the compliance rule from the management server to the second mobile computing device.

8. A non-transitory, computer-readable medium comprising instructions which, when executed by a processor of a management server, causes a mobile computing device to enforce a compliance rule associated with a business email configuration profile by performing stages comprising:
providing the business email configuration profile from the management server to the mobile computing device, the business email configuration profile including the compliance rule, wherein the compliance rule requires the mobile computing device to be within a threshold distance of a second mobile computing device in order to access a business email account;
causing, by the management server, the mobile computing device to switch from a personal email configuration profile to the business email configuration profile based on the location of the mobile computing device; and
causing the mobile computing device to:
detect a call, by an application of the mobile computing device to an operating system of the mobile computing device, that attempts to access the business email account;
determine a distance between the mobile computing device and the second mobile computing device;
determine whether the distance is within the threshold distance required by the compliance rule;
if the mobile computing device is within the threshold distance of the second mobile computing device, approve the call by the application; and
if the mobile computing device is outside the threshold distance of the second mobile computing device, block the call by the application.

9. The non-transitory, computer-readable medium of claim 8 , wherein the detecting, determining, approving, and blocking are carried out by an agent application installed on the mobile computing device by a management server based on the device enrolling with the management server.

10. The non-transitory, computer-readable medium of claim 8 , the stages further comprising providing an agent application, from a management server to the mobile computing device, wherein the agent application enforces the compliance rule.

11. The non-transitory, computer-readable medium of claim 8 , wherein the business email configuration profile is established be an administrator and applied to a plurality of user devices based on the users of those user devices having a same level of email access privilege.

12. The non-transitory, computer-readable medium of claim 8 , wherein the application of the mobile computing device comprises a web browser.

13. The non-transitory, computer-readable medium of claim 8 , wherein the compliance rule further specifies that the mobile computing device block the call to the operating system if the mobile computing device is not connected to a virtual private network (VPN).

14. The non-transitory, computer-readable medium of claim 8 , the stages further comprising providing the compliance rule from the management server to the second mobile computing device.

15. A management system for enforcing a compliance rule associated with a business email configuration profile, comprising:
a management server comprising a processor and a memory store, the memory store comprising non-transitory, computer-readable, instructions that, when executed by
the processor, cause the processor to perform stages comprising:
providing the business email configuration profile from the management server to a mobile computing device, the business email configuration profile including the compliance rule, wherein the compliance rule requires the mobile computing device to be within a threshold distance of a second mobile computing device in order to access a business email account;
causing, by the management server, the mobile computing device to switch from a personal email configuration profile to the business email configuration profile based on the location of the mobile computing device; and
causing the mobile computing device to:
detect a call, by an application of the mobile computing device to an operating system of the mobile computing device, that attempts to access the business email account;
determine a distance between the mobile computing device and the second mobile computing device;
determine whether the distance is within the threshold distance required by the compliance rule;
if the mobile computing device is within the threshold distance of the second mobile computing device, approve the call by the application; and
if the mobile computing device is outside the threshold distance of the second mobile computing device, block the call by the application.

16. The management system of claim 15 , wherein the detecting, determining, approving, and blocking are carried out by an agent application installed on the mobile computing device by a management server based on the device enrolling with the management server.

17. The management system of claim 15 , the stages further comprising providing an agent application, from a management server to the mobile computing device, wherein the agent application enforces the compl

Assignees

• Airwatch Llc

Inventors

• Dabbiere Alan
• Marshall John
• Stuntebeck Erich

Classifications

• G06F21/54 Primary

  by adding security routines or objects to programs · CPC title

• G06Q10/06314 Primary

  Calendaring for a resource · CPC title

• H04L41/0806

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04W8/18

  Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data · CPC title

• G06F2221/033

  Test or assess software · CPC title