Management of unmanaged user accounts and tasks in a multi-account mobile application

Patent metadata

Field	Value
Publication number	US-9501315-B2
Application number	US-201414151972-A
Country	US
Kind code	B2
Filing date	Jan 10, 2014
Priority date	Jan 10, 2014
Publication date	Nov 22, 2016
Grant date	Nov 22, 2016

Abstract

Methods, systems, computer-readable media, and apparatuses for providing mobile application management (MAM) functionalities are presented. In some embodiments, a mobile device may initialize a partially managed application associated with a first managed user account and an unmanaged user account. The mobile device may execute first managed tasks associated with the first managed user account in accordance with a first set of MAM policies provided by a first MAM service provider. The mobile device may execute unmanaged tasks associated with the unmanaged account independent of the first set of MAM policies. In some embodiments, the mobile device may initialize the multi-account managed application associated with a second managed user account.

First claim

What is claimed is:

1. A method comprising:
initializing, at a mobile device, a partially managed application associated with a first managed user account of the partially managed application and an unmanaged user account of the partially managed application;
executing one or more first managed tasks associated with the first managed user account in accordance with a first set of mobile application management (MAM) policies provided by a first MAM service provider, wherein the executing the one or more first managed tasks includes communicating with a device external to the mobile device in a background context using an encryption protocol mandated by the first set of MAM policies; and
executing one or more unmanaged tasks associated with the unmanaged user account independent of the first set of MAM policies provided by the first MAM service provider wherein the executing the one or more unmanaged tasks includes communicating with a different device external to the mobile device in the background context without using the encryption protocol mandated by the first set of MAM policies.

2. The method of claim 1 , further comprising:
executing a particular unmanaged task of the one or more unmanaged tasks; and
preventing a particular first managed task associated with the first managed user account from being executed when the particular first managed task if executed would violate the first set of MAM policies, wherein the particular first managed task is semantically equivalent to the particular unmanaged task.

3. The method of claim 1 , further comprising:
after the executing the one or more unmanaged tasks has begun in a foreground context,
moving the one or more unmanaged tasks from the foreground context to the background context;
moving the one or more first managed tasks to the foreground context;
displaying managed information associated with the first managed user account when the one or more first managed tasks is within the foreground context; and
during the displaying, continuing execution of the one or more unmanaged tasks in the background context independent of the first set of MAM policies.

4. The method of claim 3 , further comprising:
initiating the moving the one or more first managed tasks to the foreground context in response to a determination that the first managed user account is currently in focus based on one of a user input requesting the first managed user account, an indication that the mobile device is within a geofence of the first MAM service provider, an indication that the mobile device has established a network connection with the first MAM service provider, and a command received by the mobile device requesting the mobile device to move the one or more first managed tasks to the foreground context.

5. The method of claim 1 , further comprising:
moving the one or more first managed tasks from a foreground context to the background context in response to a determination that the unmanaged user account is currently in focus;
moving the one or more unmanaged tasks from the background context to the foreground context;
blocking enforcement of the first set of MAM policies on continued execution of the one or more unmanaged tasks in the foreground context; and
during the blocking, continuing execution of the one or more first managed tasks in the background context in accordance with the first set of MAM policies.

6. The method of claim 5 , wherein the blocking enforcement of the first set of MAM policies on continued execution of the one or more unmanaged tasks in the foreground context further comprises:
overriding the first set of MAM policies as applied to the one or more unmanaged tasks.

7. The method of claim 1 , wherein the executing the one or more first managed tasks is independent of a second set of MAM policies provided by a second MAM service provider, the second set of MAM policies being different from the first set of MAM policies, the second MAM service provider being different from the first MAM service provider, the method further comprising:
executing one or more second managed tasks associated with a second managed user account of the partially managed application in accordance with the second set of MAM policies provided by the second MAM service provider and independent the first set of MAM policies provided by the first MAM service provider,
wherein the one or more second managed tasks are different from the one or more first managed tasks and the second managed user account is different from the first managed user account.

8. A method comprising:
initializing, at a mobile device, a multi-account managed application associated with a first managed user account of the multi-account managed application and a second managed user account of the multi-account managed application different from the first managed user account;
executing one or more first managed tasks associated with the first managed user account in accordance with a first set of mobile application management (MAM) policies provided by a first MAM service provider and independent of a second set of MAM policies provided by a second MAM service provider, wherein the second set of MAM policies is different from the first set of MAM policies and the second MAM service provider is different from the first MAM service provider;
executing one or more second managed tasks associated with the second managed user account in accordance with the second set of MAM policies provided by the second MAM service provider and independent of the first set of MAM policies provided by the first MAM service provider;
after the executing the one or more first managed tasks has begun in a foreground context,
moving the one or more first managed tasks from the foreground context to a background context;
moving the one or more second managed tasks to the foreground context;
displaying managed information associated with the second managed user account when the one or more second managed tasks is within the foreground context; and
during the displaying, continuing execution of the one or more first managed tasks in the background context independent of the second set of MAM policies.

9. The method of claim 8 , further comprising:
executing a particular first managed task of the one or more first managed tasks; and
preventing a particular second managed task associated with the second managed user account from being executed when the particular second managed task if executed would violated the second set of MAM policies, wherein the particular first managed task is semantically equivalent to the particular second managed task.

10. The method of claim 8 , further comprising:
initiating the moving the one or more second managed tasks to the foreground context in response to a determination that the second managed user account is currently in focus based on one of a user input requesting the second managed user account, an indication that the mobile device is within a geofence of the second MAM service provider, an indication that the mobile device has established a network connection with the second MAM service provider, and a command received by the mobile device requesting the mobile device to move the one or more second managed tasks to the foreground context.

11. The method of claim 8 , further comprising:
moving the one or more second managed tasks from the foreground context to the background context in response to a determination that the first managed user account is currently in focus;
moving the one or more first managed tasks from the background context to the foreground context;
blocking enforcement of the second set of MAM policies on continued execution of the

Assignees

• Citrix Systems Inc

Inventors

• Desai Nitin
• Lang Zhongmin

Classifications

• H04L67/306

  User profiles · CPC title

• G06F9/468 Primary

  Specific access rights for resources, e.g. using capability register · CPC title

• G06F21/60

  Protecting data · CPC title

• G06F9/48

  Program initiating; Program switching, e.g. by interrupt · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title