User profile distribution and deployment systems and methods

Patent metadata

Field	Value
Publication number	US-11805182-B2
Application number	US-202217581232-A
Country	US
Kind code	B2
Filing date	Jan 21, 2022
Priority date	Jan 2, 2020
Publication date	Oct 31, 2023
Grant date	Oct 31, 2023

Abstract

A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

First claim

What is claimed is:

1. A method of distributing profiles to user devices, the method comprising:
partitioning a first user profile into a first profile segment and a second profile segment;
encrypting the first and second profile segments using a unique key;
transmitting the encrypted first profile segment to a first user device;
transmitting the encrypted second profile segment to a second user device;
receiving a request for the first user profile from an enrolling user device; and
transmitting profile information to the enrolling user device, wherein the profile information identifies the first and second user devices and provides instructions for obtaining the encrypted first and second profile segments from the first and second user devices,
wherein the instructions in the profile information instruct the enrolling user device to:
retrieve the encrypted first profile segment from the first user device;
retrieve the encrypted second profile segment from the second user device;
decrypt the first and second profile segments using the unique key; and
combine the first and second profile segments to obtain the first user profile.

2. The method of claim 1 , wherein the request for the first user profile from the enrolling user device includes the unique key.

3. The method of claim 1 , wherein the request for the first user profile is sent by the enrolling user device based on instructions extracted from a notification received at the enrolling user device.

4. The method of claim 3 , wherein the instructions are extracted using the unique key.

5. The method of claim 1 , wherein the unique key is transmitting to the enrolling user device prior to receiving the request for the first user profile from the enrolling user device.

6. The method of claim 1 , wherein the first user device and second user device are selected based on the first user device, second user device, and enrolling user device belonging to a same user group.

7. The method of claim 1 , wherein receiving the request for the first user profile includes receiving a certificate from the enrolling user device.

8. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, cause the processor to perform stages for distributing profiles to user devices, the stages comprising:
partitioning a first user profile into a first profile segment and a second profile segment;
encrypting the first and second profile segments using a unique key;
transmitting the encrypted first profile segment to a first user device;
transmitting the encrypted second profile segment to a second user device;
receiving a request for the first user profile from an enrolling user device; and
transmitting profile information to the enrolling user device, wherein the profile information identifies the first and second user devices and provides instructions for obtaining the encrypted first and second profile segments from the first and second user devices,
wherein the instructions in the profile information instruct the enrolling user device to:
retrieve the encrypted first profile segment from the first user device;
retrieve the encrypted second profile segment from the second user device;
decrypt the first and second profile segments using the unique key; and
combine the first and second profile segments to obtain the first user profile.

9. The non-transitory, computer-readable medium of claim 8 , wherein the request for the first user profile from the enrolling user device includes the unique key.

10. The non-transitory, computer-readable medium of claim 8 , wherein the request for the first user profile is sent by the enrolling user device based on instructions extracted from a notification received at the enrolling user device.

11. The non-transitory, computer-readable medium of claim 10 , wherein the instructions are extracted using the unique key.

12. The non-transitory, computer-readable medium of claim 8 , wherein the unique key is transmitting to the enrolling user device prior to receiving the request for the first user profile from the enrolling user device.

13. The non-transitory, computer-readable medium of claim 8 , wherein the first user device and second user device are selected based on the first user device, second user device, and enrolling user device belonging to a same user group.

14. The non-transitory, computer-readable medium of claim 8 , wherein receiving the request for the first user profile includes receiving a certificate from the enrolling user device.

15. A system for distributing profiles to user devices, comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a computing device including a hardware-based processor that executes the instructions to carry out stages comprising:
partitioning a first user profile into a first profile segment and a second profile segment;
encrypting the first and second profile segments using a unique key;
transmitting the encrypted first profile segment to a first user device;
transmitting the encrypted second profile segment to a second user device;
receiving a request for the first user profile from an enrolling user device; and
transmitting profile information to the enrolling user device, wherein the profile information identifies the first and second user devices and provides instructions for obtaining the encrypted first and second profile segments from the first and second user devices,
wherein the instructions in the profile information instruct the enrolling user device to:
retrieve the encrypted first profile segment from the first user device;
retrieve the encrypted second profile segment from the second user device;
decrypt the first and second profile segments using the unique key; and
combine the first and second profile segments to obtain the first user profile.

16. The system of claim 15 , wherein the request for the first user profile from the enrolling user device includes the unique key.

17. The system of claim 15 , wherein the request for the first user profile is sent by the enrolling user device based on instructions extracted from a notification received at the enrolling user device.

18. The system of claim 17 , wherein the instructions are extracted using the unique key.

19. The system of claim 15 , wherein the unique key is transmitting to the enrolling user device prior to receiving the request for the first user profile from the enrolling user device.

20. The system of claim 15 , wherein the first user device and second user device are selected based on the first user device, second user device, and enrolling user device belonging to a same user group.

Assignees

• Vmware Inc

Inventors

• Aluvala Suman
• Panchapakesan Ramani
• Maheshwari Pushkal
• Kavatage Mahesh Ashok
• Rangain Pavan Rajkumar
• Stuntebeck Erich Peter

Classifications

• H04L67/34 Primary

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L67/306 Primary

  User profiles · CPC title

• H04L67/55

  Push-based network services · CPC title