Remotely-hosted auto-discovery service

Patent metadata

Field	Value
Publication number	US-2016352840-A1
Application number	US-201514723838-A
Country	US
Kind code	A1
Filing date	May 28, 2015
Priority date	May 28, 2015
Publication date	Dec 1, 2016
Grant date	—

Abstract

Disclosed are various embodiments for a remotely-hosted auto-discovery service. An auto-discovery request received from a client device over a network can be accessed to identify a domain associated with the auto-discovery request. A digital certificate corresponding to the domain can be identified and a configuration file can be generated for a web server application that creates at least one virtual host for a uniform resource locator (URL) identified in the auto-discovery request. The digital certificate can be bound to the at least one virtual host to operate a secure connection with the client device. An enrollment response can be generated for communication to the client device over the network.

First claim

Therefore, the following is claimed:

1 . A non-transitory computer-readable medium embodying a program executable in at least one computing device comprising at least one hardware processor, the program, when executed by the at least one computing device, being configured to cause the at least one computing device to:
access an auto-discovery request received from a client device over a network to identify a domain associated with the auto-discovery request; identify a digital certificate from a data store corresponding to the domain; access a configuration file for a web server application that creates at least one virtual host for a uniform resource locator (URL) identified in the auto-discovery request, the digital certificate being bound to the at least one virtual host to operate a secure connection with the client device; and generate an enrollment response for communication to the client device over the network.

2 . The non-transitory computer-readable medium of claim 1 , wherein the program, when executed by the at least one computing device, is further configured to cause the at least one computing device to access an upload of the digital certificate to validate the digital certificate for the domain prior to storage in the data store.

3 . The non-transitory computer-readable medium of claim 1 , wherein the domain associated with the auto-discovery request is identified based at least in part on an e-mail address associated with the client device.

4 . The non-transitory computer-readable medium of claim 1 , wherein the enrollment response comprises at least one enrollment URL and a group identifier.

5 . The non-transitory computer-readable medium of claim 1 , wherein the auto-discovery request is received from the client device based at least in part on a domain name system (DNS) record that points to an internet protocol (IP) address of the at least one computing device.

6 . The non-transitory computer-readable medium of claim 5 , wherein the program, when executed by the at least one computing device, is further configured to cause the at least one computing device to verify that the DNS record points to the IP address of the at least one computing device.

7 . The non-transitory computer-readable medium of claim 1 , wherein the web server application employs the configuration file to create the at least one virtual host without a restart of the at least one computing device.

8 . A computer-implemented method, comprising:
accessing an auto-discovery request received from a client device over a network to identify a domain associated with the auto-discovery request; identifying a digital certificate from a data store corresponding to the domain; accessing a configuration file for a web server application that creates at least one virtual host for a uniform resource locator (URL) identified in the auto-discovery request, the digital certificate being bound to the at least one virtual host to operate a secure connection with the client device; and generating an enrollment response for communication to the client device over the network.

9 . The computer-implemented method of claim 8 , further comprising accessing an upload of the digital certificate to validate the digital certificate for the domain prior to storage in the data store.

10 . The computer-implemented method of claim 8 , wherein the domain associated with the auto-discovery request is identified based at least in part on an e-mail address associated with the client device.

11 . The computer-implemented method of claim 8 , wherein the enrollment response comprises at least one enrollment URL and a group identifier.

12 . The computer-implemented method of claim 8 , wherein the auto-discovery request is received from the client device based at least in part on a domain name system (DNS) record that points to an internet protocol (IP) address of a remote auto-discovery service.

13 . The computer-implemented method of claim 12 , further comprising verifying that the DNS record points to the IP address of the at least one computing device.

14 . The computer-implemented method of claim 8 , wherein the web server application employs the configuration file to create the at least one virtual host without a restart of the web server application.

15 . A system, comprising:
at least one computing device in data communication with a client device over a network; and program code that, when executed by the at least one computing device, causes the at least one computing device to:
access an auto-discovery request received from the client device over the network to identify a domain associated with the auto-discovery request;
identify a digital certificate from a data store corresponding to the domain;
access a configuration file for a web server application that creates at least one virtual host for a uniform resource locator (URL) identified in the auto-discovery request, the digital certificate being bound to the at least one virtual host to operate a secure connection with the client device; and
generate an enrollment response for communication to the client device over the network.

16 . The system of claim 15 , further comprising program code that, when executed by the at least one computing device, causes the at least one computing device to access an upload of the digital certificate to validate the digital certificate for the domain prior to storage in the data store.

17 . The system of claim 15 , wherein the domain associated with the auto-discovery request is identified based at least in part on an e-mail address associated with the client device.

18 . The system of claim 15 , wherein the enrollment response comprises at least one enrollment URL and a group identifier.

19 . The system of claim 15 , wherein the auto-discovery request is received from the client device based at least in part on a domain name system (DNS) record that points to an internet protocol (IP) address of a remote auto-discovery service.

20 . The system of claim 19 , further comprising program code that, when executed by the at least one computing device, causes the at least one computing device to verify that the DNS record points to the IP address of the at least one computing device.

Assignees

• Airwatch Llc

Inventors

• Negron Josue
• Brannon Jonathan Blake
• Murthy Varun

Classifications

• H04L67/42

  Electricity · mapped topic

• H04L67/16 Primary

  Electricity · mapped topic

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L61/1511

  Electricity · mapped topic

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title