Mobile device security, device management, and policy enforcement in a cloud-based system

Patent metadata

Field	Value
Publication number	US-11716359-B2
Application number	US-202217955006-A
Country	US
Kind code	B2
Filing date	Sep 28, 2022
Priority date	Mar 18, 2011
Publication date	Aug 1, 2023
Grant date	Aug 1, 2023

Abstract

Mobile device security, device management, and policy enforcement are described in a cloud-based system where the “cloud” is used to pervasively enforce security and policy and perform device management regardless of device type, platform, location, etc. A method includes receiving one or more mobile profiles for one or more mobile devices each associated with a user from an enterprise; responsive to enrollment of a mobile device of the one or more mobile devices, communicating to the mobile device; determining an associated mobile profile of the one or more mobile profiles for the mobile device; and configuring the mobile device based on the associated mobile profile.

First claim

What is claimed is:

1. A non-transitory computer-readable medium having computer readable code stored thereon for programming a node in a cloud-based system to perform steps of:
receiving one or more mobile profiles for one or more mobile devices each associated with a user from an enterprise;
responsive to enrollment of a mobile device of the one or more mobile devices, communicating to the mobile device;
determining an associated mobile profile of the one or more mobile profiles for the mobile device; and
configuring the mobile device based on the associated mobile profile.

2. The non-transitory computer-readable medium of claim 1 , wherein the configuring performs mobile device management (MDM) functions.

3. The non-transitory computer-readable medium of claim 1 , wherein the enrollment includes installing an application on the mobile device.

4. The non-transitory computer-readable medium of claim 1 , wherein the configuring includes
allowing or disallowing various functions implemented locally on the mobile device based on the associated mobile profile.

5. The non-transitory computer-readable medium of claim 1 , wherein the enterprise is a first enterprise and wherein the cloud-based system is configured to operate with one or more additional enterprises.

6. The non-transitory computer-readable medium of claim 1 , wherein the configuring includes determining password requirement on the mobile device.

7. The non-transitory computer-readable medium of claim 1 , wherein the configuring includes determining synchronization settings on the mobile device.

8. The non-transitory computer-readable medium of claim 1 , wherein the configuring includes determining device settings on the mobile device.

9. The non-transitory computer-readable medium of claim 8 , wherein the device settings include any of removable storage, camera, Wi-Fi, Infrared, sharing, remote desktop, desktop synchronization, and Bluetooth.

10. The non-transitory computer-readable medium of claim 1 , wherein the configuring includes determining application settings on the mobile device.

11. A method comprising steps of:
receiving one or more mobile profiles for one or more mobile devices each associated with a user from an enterprise;
responsive to enrollment of a mobile device of the one or more mobile devices, communicating to the mobile device;
determining an associated mobile profile of the one or more mobile profiles for the mobile device; and
configuring the mobile device based on the associated mobile profile.

12. The method of claim 11 , wherein the configuring performs mobile device management (MDM) functions.

13. The method of claim 11 , wherein the enrollment includes installing an application on the mobile device.

14. The method of claim 11 , wherein the configuring includes
allowing or disallowing various functions implemented locally on the mobile device based on the associated mobile profile.

15. The method of claim 11 , wherein the enterprise is a first enterprise and wherein the cloud-based system is configured to operate with one or more additional enterprises.

16. The method of claim 11 , wherein the configuring includes determining password requirement on the mobile device.

17. The method of claim 11 , wherein the configuring includes determining synchronization settings on the mobile device.

18. The method of claim 11 , wherein the configuring includes determining device settings on the mobile device.

19. The method of claim 18 , wherein the device settings include any of removable storage, camera, Wi-Fi, Infrared, sharing, remote desktop, desktop synchronization, and Bluetooth.

20. The method of claim 11 , wherein the configuring includes determining application settings on the mobile device.

Assignees

• Zscaler Inc

Inventors

• Sinha Amit
• Paul Narinder
• Devarajan Srikanth

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/51 Primary

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F21/56

  Computer malware detection or handling, e.g. anti-virus arrangements · CPC title

• G06F21/567

  using dedicated hardware · CPC title

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title