Secure execution of enterprise applications on mobile devices
US-9183380-B2 · Nov 10, 2015 · US
US2016378451A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016378451-A1 |
| Application number | US-201514752132-A |
| Country | US |
| Kind code | A1 |
| Filing date | Jun 26, 2015 |
| Priority date | Oct 16, 2012 |
| Publication date | Dec 29, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Methods and systems are disclosed for providing approaches to generating managed applications from unmanaged applications on a mobile device. The methods and systems may include storing, by a mobile device in a memory of the mobile device, one or more unmanaged applications each comprising a corresponding application bundle and decoding, by the mobile device, the retrieved application bundle corresponding to the first unmanaged application. The methods and systems may also include modifying, by the mobile device, the decoded application bundle corresponding to the first unmanaged application by adding a set of one or more policy-based control instructions, compiling, by the mobile device, the modified application bundle to generate a first managed application, the first managed application being configured to operate in accordance with the set of one or more policy-based control instructions, and providing, by the mobile device, the first managed application.
Opening claim text (preview).
1 . A method comprising: storing in a memory one or more unmanaged applications each comprising a corresponding application bundle; retrieving information associated with the one or more unmanaged applications; displaying via a user interface a selectable object for each unmanaged application, each selectable object comprising the retrieved information associated with the corresponding unmanaged application; receiving, via the user interface, a selection of a first selectable object associated with a first unmanaged application of the one or more unmanaged application; retrieving, from the memory, the application bundle corresponding to the first unmanaged application; decoding the retrieved application bundle corresponding to the first unmanaged application; modifying the decoded application bundle corresponding to the first unmanaged application by adding a set of one or more policy-based control instructions; compiling the modified application bundle to generate a first managed application, the first managed application being configured to operate in accordance with the set of one or more policy-based control instructions; and providing the first managed application for installation on a mobile device. 2 . The method of claim 1 , wherein: the decoding comprises accessing source code of the first unmanaged application, the source code comprising instructions for operating the first unmanaged application; and the modifying comprises modifying the source code by adding the set of one or more policy-based control instructions to the instructions for operating the first unmanaged application. 3 . The method of claim 2 , wherein the source code is formatted in .APK format. 4 . The method of claim 1 , wherein providing the first managed application further comprises transmitting, by a first device, the first managed application to a second device different than the first device. 5 . The method of claim 1 , wherein the storing further comprises storing a security certificate configured for the first unmanaged application, the security certificate being required by the first unmanaged application for execution on the mobile device, wherein the method further comprises: configuring the first managed application with the security certificate configured for the first unmanaged application; installing, on the mobile device, the first managed application without uninstalling the first unmanaged application; and executing the installed first managed application configured with the security certificate configured for the first unmanaged application. 6 . The method of claim 1 , wherein the storing further comprises storing a first security certificate configured for the first unmanaged application, the first security certificate being required by the first unmanaged application for execution on the mobile device, the method further comprising: configuring the first managed application with a second security certificate, the second security certificate being different than the first security certificate and being required by the first managed application for execution on the mobile device, wherein the method further comprises: uninstalling, from the mobile device, the first unmanaged application; installing, on the mobile device, the first managed application; and executing the installed first managed application configured with the second security certificate. 7 . The method of claim 1 , wherein the set of one or more policy-based control instructions comprise enterprise specific instructions for controlling interactions between the first managed application and one or more components of the mobile device, wherein the enterprise specific instructions instruct the first managed application to operate in a manner different than the first unmanaged application. 8 . A system, comprising: at least one processor; and at least one memory storing computer-readable instructions that, when executed by the at least one processor, cause the system to perform: storing, in a memory, one or more unmanaged applications each comprising a corresponding application bundle; retrieving, from the memory, information associated with the one or more unmanaged applications; displaying, via a user interface, a selectable object for each unmanaged application, each selectable object comprising the retrieved information associated with the corresponding unmanaged application; receiving, via the user interface, a selection of a first selectable object associated with a first unmanaged application of the one or more unmanaged applications; retrieving, from the memory, the application bundle corresponding to the first unmanaged application; decoding the retrieved application bundle corresponding to the first unmanaged application; modifying the decoded application bundle corresponding to the first unmanaged application by adding a set of one or more policy-based control instructions; compiling the modified application bundle to generate a first managed application, the first managed application being configured to operate in accordance with the set of one or more policy-based control instructions; and providing the first managed application for installation on a mobile device. 9 . The system of claim 8 , wherein: the decoding comprises accessing source code of the first unmanaged application, the source code comprising instructions for operating the first unmanaged application; and the modifying comprises modifying the source code by adding the set of one or more policy-based control instructions to the instructions for operating the first unmanaged application. 10 . The system of claim 9 , wherein the source code is formatted in .APK format. 11 . The system of claim 8 , wherein providing the first managed application further comprises transmitting, by the mobile device, the first managed application to a computing device different than the mobile device. 12 . The system of claim 8 , wherein the storing further comprises storing a security certificate configured for the first unmanaged application, the security certificate being required by the first unmanaged application for execution on the mobile device, wherein the computer-readable instructions further cause the system to perform: configuring the first managed application with the security certificate configured for the first unmanaged application; installing, on the mobile device, the first managed application without uninstalling the first unmanaged application; and executing the installed first managed application configured with the security certificate configured for the first unmanaged application. 13 . The system of claim 8 , wherein the storing further comprises storing a first security certificate configured for the first unmanaged application, the first security certificate being required by the first unmanaged application for execution on the mobile device, wherein the computer-readable instructions further cause the system to perform: configuring the first managed application with a second security certificate, the second security certificate being different than the first security certificate and being required by the first managed application for execution on the mobile device; uninstalling, from the mobile device, the first unmanaged application; installing, on the mobile device, the first managed application; and executing the installed first managed application configured with the second security certificate. 14 . The system of claim 8 , wherein the set of one or more policy-based control instructions comprise enterprise specific instructions fo
by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title
Installation · CPC title
Arrangements for optimising operational condition · CPC title
Binary to binary · CPC title
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.