User profile distribution and deployment systems and methods

Patent metadata

Field	Value
Publication number	US-11233876-B2
Application number	US-202016802601-A
Country	US
Kind code	B2
Filing date	Feb 27, 2020
Priority date	Jan 2, 2020
Publication date	Jan 25, 2022
Grant date	Jan 25, 2022

Abstract

A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

First claim

What is claimed is:

1. A method of distributing profiles to user devices, the method comprising:
receiving, at a first server, a request from a user device to enroll in a system;
providing a unique key and a certificate to a user device based on the request, wherein the unique key corresponds to a user group associated with a user of the user device;
encrypting a user profile with the unique key, wherein the user profile is associated with the user group;
sending, by the first server, the user profile and the certificate to a second server; and
sending, by the first server, a notification to the user device through a messaging service, wherein the notification includes access information for the second server and instructions to retrieve the user profile from the second server using the certificate.

2. The method of claim 1 , wherein the notification is sent as a first notification and a second notification, the first notification including a first portion of the second server access information, and the second portion including a second portion of the second server access information.

3. The method of claim 2 , wherein
the second server access information includes a universal resource locator (“URL”) associated with the second server,
the first notification includes a first portion of the URL,
the second notification includes a second portion of the URL and the unique key, and
the user device combines the first and second portions of the URL to provide the second server with the unique key and access the user profile.

4. The method of claim 1 , further comprising:
receiving, at the second server, the a request for the user profile from the user device, wherein the request includes the certificate;
identifying, by the second server, the user profile using the certificate; and
sending, by the second server, the user profile to the user device.

5. The method of claim 4 , wherein the certificate includes a group identifier of the user group associated with the user device, and the identification includes searching one of a storage and a memory of the second server with the group identifier for the associated user profile.

6. The method of claim 4 , further comprising:
verifying, at the second server, that the user device is assigned to the first user group based on the certificate prior to performing the identification.

7. The method of claim 1 , further comprising:
partitioning, by the first server, the user profile into segments;
transmitting each of the segments to a respective designated user device for the user group not including the user device;
transmitting device information corresponding to the designated user devices to the user device; and
transmitting, to the user device, instructions for retrieving the user profile segments from the designated user devices and combining the segments.

8. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, performs stages for distributing profiles to user devices, the stages comprising:
providing a unique key and a certificate to a user device based on the request, wherein the unique key corresponds to a user group associated with a user of the user device;
encrypting a user profile with the unique key, wherein the user profile is associated with the user group;
sending, by the first server, the user profile and the certificate to a second server; and
sending, by the first server, a notification to the user device through a messaging service, wherein the notification includes access information for the second server and instructions to retrieve the user profile from the second server using the certificate.

9. The non-transitory, computer-readable medium of claim 8 , wherein the notification is sent as a first notification and a second notification, the first notification including a first portion of the second server access information, and the second portion including a second portion of the second server access information.

10. The non-transitory, computer-readable medium of claim 9 , wherein
the second server access information includes a universal resource locator (“URL”) associated with the second server,
the first notification includes a first portion of the URL,
the second notification includes a second portion of the URL and the unique key, and
the user device combines the first and second portions of the URL to provide the second server with the unique key and access the user profile.

11. The non-transitory, computer-readable medium of claim 8 , the stages further comprising:
receiving, at the second server, the a request for the user profile from the user device, wherein the request includes the certificate;
identifying, by the second server, the user profile using the certificate; and
sending, by the second server, the user profile to the user device.

12. The non-transitory, computer-readable medium of claim 11 , wherein the certificate includes a group identifier of the user group associated with the user device, and the identification includes searching one of a storage and a memory of the second server with the group identifier for the associated user profile.

13. The non-transitory, computer-readable medium of claim 11 , further comprising:
verifying, at the second server, that the user device is assigned to the first user group based on the certificate prior to performing the identification.

14. The non-transitory, computer-readable medium of claim 11 , the stages further comprising:
partitioning, by the first server, the user profile into segments;
transmitting each of the segments to a respective designated user device for the user group not including the user device;
transmitting device information corresponding to the designated user devices to the user device; and
transmitting, to the user device, instructions for retrieving the user profile segments from the designated user devices and combining the segments.

15. A system for distributing profiles to user devices, comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a computing device including a hardware-based processor that executes the instructions to carry out stages comprising:
providing a unique key and a certificate to a user device based on the request, wherein the unique key corresponds to a user group associated with a user of the user device;
encrypting a user profile with the unique key, wherein the user profile is associated with the user group;
sending, by the first server, the user profile and the certificate to a second server; and
sending, by the first server, a notification to the user device through a messaging service, wherein the notification includes access information for the second server and instructions to retrieve the user profile from the second server using the certificate.

16. The system of claim 15 , wherein
the second server access information includes a universal resource locator (“URL”) associated with the second server,
the first notification includes a first portion of the URL,
the second notification includes a second portion of the URL and the unique key, and
the user device combines the first and second portions of the URL to provide the second server with the unique key and access the user profile.

17. The system of claim 15 , wherein the second server access information includes a first portion of a universal resource locator (“URL”) associated with the second server, and wherein a second portion of the URL is provided to the user dev

Assignees

• Vmware Inc

Inventors

• Aluvala Suman
• Panchapakesan Ramani
• Maheshwari Pushkal
• Kavatage Mahesh Ashok
• Rangain Pavan Rajkumar
• Stuntebeck Erich Peter

Classifications

• H04L67/55

  Push-based network services · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04L67/306 Primary

  User profiles · CPC title

• H04W12/37

  Managing security policies for mobile devices or for controlling mobile applications · CPC title