User profile distribution and deployment systems and methods

Patent metadata

Field	Value
Publication number	US-2021211521-A1
Application number	US-202016802601-A
Country	US
Kind code	A1
Filing date	Feb 27, 2020
Priority date	Jan 2, 2020
Publication date	Jul 8, 2021
Grant date	—

Abstract

A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

First claim

What is claimed is:

1 . A method of distributing profiles to user devices, the method comprising:
receiving, at a first server, a request from a user device to enroll in a system; causing a first unique key, corresponding to a first user group associated with a user of the user device, to be provided to the user device based on the request; transmitting, from the first server, a first notification to a messaging service including an enrollment notification for the user device; causing, by the first server, a first user profile for the first user group to be accessible to the user device through a second server; and accessing the first user profile through the second server with the user device based on a second notification from the messaging service, the user device using the first unique key and second server access information to access the first user profile.

2 . The method of claim 1 , wherein the second server access information is included in the first notification from the first server to the messaging service and in the second notification from the messaging service to the user device.

3 . The method of claim 2 , wherein the second server access information includes a first portion of a universal resource locator (“URL”) associated with the second server, and wherein a second portion of the URL is provided to the user device with the first unique key by the first server, and wherein the user device combines the first and second portions of the URL to access the second server and provide the second server with the first unique key.

4 . The method of claim 1 , further comprising:
receiving, with the second server, the first unique key from the user device; performing with the second server:
an identification of profile information corresponding to the first profile based on the first unique key, and
a transmittance of the profile information to the user device; and
decrypting, with the user device, the profile information with the first unique key and obtaining the first user profile for implementation on the user device.

5 . The method of claim 4 , further comprising receiving, with the second server, the first profile as the profile information from the first server prior to the identification, wherein the identification includes searching one of a storage and a memory for the second server with the first unique key.

6 . The method of claim 4 , further comprising:
generating, with the first server, a certificate based on receiving the request from the user device; transmitting the certificate with the first unique key from the first server to the user device; transmitting, with the user device, a profile request to the second server based on the second notification, the profile request including the certificate and the first unique key; and verifying, with the second server, the user device is assigned to the first user group based on the certificate prior to performing the identification.

7 . The method of claim 1 , further comprising:
partitioning, with the first server, the first profile into segments; transmitting each of the segments to a respective designated user device for the first user group not including the user device; transmitting device information corresponding to the designated user devices from the first server to the second server; requesting respective segments from each of the designated user devices based on the profile information; and combining the segments with the user device using the first unique key.

8 . A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, performs stages for distributing profiles to user devices, the stages comprising:
receiving, at a first server, a request from a user device to enroll in a system; causing a first unique key, corresponding to a first user group associated with a user of the user device, to be provided to the user device based on the request; transmitting, from the first server, a first notification to a messaging service including an enrollment notification for the user device; causing, by the first server, a first user profile for the first user group to be accessible to the user device through a second server; and accessing the first user profile through the second server with the user device based on a second notification from the messaging service, the user device using the first unique key and second server access information to access the first user profile.

9 . The non-transitory, computer-readable medium of claim 8 , wherein the second server access information is included in the first notification from the first server to the messaging service and in the second notification from the messaging service to the user device.

10 . The non-transitory, computer-readable medium of claim 9 , wherein the second server access information includes a first portion of a universal resource locator (“URL”) associated with the second server, and wherein a second portion of the URL is provided to the user device with the first unique key by the first server, and wherein the user device combines the first and second portions of the URL to access the second server and provide the second server with the first unique key.

11 . The non-transitory, computer-readable medium of claim 8 , the stages further comprising:
receiving, with the second server, the first unique key from the user device; performing with the second server:
an identification of profile information corresponding to the first profile based on the first unique key, and
a transmittance of the profile information to the user device; and
decrypting, with the user device, the profile information with the first unique key and obtaining the first user profile for implementation on the user device.

12 . The non-transitory, computer-readable medium of claim 11 , the stages further comprising receiving, with the second server, the first profile as the profile information from the first server prior to the identification, wherein the identification includes searching one of a storage and a memory for the second server with the first unique key.

13 . The non-transitory, computer-readable medium of claim 11 , further comprising:
generating, with the first server, a certificate based on receiving the request from the user device; transmitting the certificate with the first unique key from the first server to the user device; transmitting, with the user device, a profile request to the second server based on the second notification, the profile request including the certificate and the first unique key; and verifying, with the second server, the user device is assigned to the first user group based on the certificate prior to performing the identification.

14 . The non-transitory, computer-readable medium of claim 11 , the stages further comprising:
partitioning, with the first server, the first profile into segments; transmitting each of the segments to a respective designated user device for the first user group not including the user device; transmitting device information corresponding to the designated user devices from the first server to the second server; requesting respective segments from each of the designated user devices based on the profile information; and combining the segments with the user device using the first unique key.

15 . A system for distributing profiles to user devices, comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and a computing device including a hardware-based proces

Assignees

• Vmware Inc

Inventors

• Aluvala Suman
• Panchapakesan Ramani
• Maheshwari Pushkal
• Kavatage Mahesh Ashok
• Rangain Pavan Rajkumar
• Stuntebeck Erich Peter

Classifications

• H04L67/55

  Push-based network services · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04W12/043

  using a trusted network node as an anchor · CPC title

• H04W12/37

  Managing security policies for mobile devices or for controlling mobile applications · CPC title

• H04L63/102

  Entity profiles · CPC title