Managing change events for devices in an enterprise system

Patent metadata

Field	Value
Publication number	US-9652212-B2
Application number	US-201514690034-A
Country	US
Kind code	B2
Filing date	Apr 17, 2015
Priority date	Sep 24, 2014
Publication date	May 16, 2017
Grant date	May 16, 2017

Abstract

Techniques are disclosed for communicating to remote devices information about change events related to changes in access to an enterprise system. A device access management system may facilitate communication about a change event to the remote devices. Information about a change event may be stored in a change event object based on the type of change event (e.g., a policy change, an application change, and a settings change). A change event queue may persistently store information corresponding to change events. One or more computing nodes may be scheduled to execute an action process for each change event based on the type of the change event. A computing node may communicate information (e.g., an instruction to implement adjust access) about a change event to remote devices. A change event may persist on the queue until all remote devices are notified about the change event.

First claim

What is claimed is:

1. A method comprising:
determining a type of change event corresponding to a change event for a change in access to an enterprise system for a plurality of remote devices;
identifying an action process class associated with the type of change event, wherein the action process class defines an action process to perform for the type of change event;
selecting, based on a processing load of each of a plurality of computing nodes, a set of computing nodes of the plurality of computing nodes to perform the action process for the change in access;
establishing, by a computer system, based on the type of change event, a first change event object that includes information about the change event for the change in access to the enterprise system and that includes first information identifying each of a first set of remote devices in the plurality of remote devices to be notified about the change event;
establishing, by the computer system, based on the type of change event, a second change event object that includes the information about the change event for the change in access to the enterprise system and that includes second information identifying each of a second set of remote devices in the plurality of remote devices to be notified about the change event, and wherein each of the first set of remote devices is different from each of the second set of remote devices;
initiating, by a first computing node of the set of computing nodes, using the first change event object, the action process for a first action process object, wherein the first action process object is established based on the action process class, wherein the first action process object causes a first instruction to be sent to each of the first set of remote devices identified by the first information in the first change event object, and wherein for each remote device in the first set of remote devices, upon receipt of the first instruction, the each remote device in the first set of remote devices adjusts access to the enterprise system based on the change event according to the first instruction; and
initiating, by a second computing node of the set of computing nodes, using the second change event object, the action process for a second action process object, wherein the second action process object is established based on the action process class, wherein the second action process object causes a second instruction to be sent to each of the second set of remote devices identified by the second information in the second change event object, and wherein for each remote device in the set of second remote devices, upon receipt of the second instruction, the each remote device in the set of second remote devices adjusts access to the enterprise system based on the change event according to the second instruction.

2. The method of claim 1 , further comprising:
adding, to a change event queue, a change event entry for each of the first set of remote devices and the second set of remote devices, wherein the change event entry indicates the change in access and the type of change event.

3. The method of claim 2 , wherein establishing the first change event object includes instantiating the first change event object based on a first change event entry for the first set of remote devices on the change event queue, and wherein the first change event entry for the first set of remote devices includes information identifying each of the first set of remote devices.

4. The method of claim 2 , further comprising:
removing, from the change event queue, the first change event entry for the first set of remote devices upon receiving a response from each of the first set of remote devices, the response indicating that each of the first set of remote devices has applied the change in access corresponding to the type of change event indicated in the first change event object.

5. The method of claim 1 , wherein initiating, using the first change event object, the action process for a first action process object includes:
establishing the first action process object by instantiating the action process class using the first change event object; and
invoking the action process using the first action process object.

6. The method of claim 1 , wherein the action process initiated for the first action process object is initiated concurrently with the action process initiated for the second action process object.

7. The method of claim 1 , wherein the type of change event includes a policy change, the policy change including a change in a compliance policy, a change in an enrollment policy, a change in a workspace policy, a change in a device policy, or a combination thereof.

8. The method of claim 7 , wherein the action process to perform for a set of remote devices includes instructing each of the set of remote devices to apply the policy change.

9. The method of claim 1 , wherein the type of change event includes an application change, the application change including adding an application to a catalog of applications accessible to the plurality of remote devices, removing an application from the catalog, modifying a version of an application in the catalog, or a combination thereof.

10. The method of claim 9 , wherein the action process to perform for a set of remote devices includes instructing each of the set of remote devices to apply the application change.

11. The method of claim 1 , wherein the type of change event includes a change in a synchronization setting related to accessing the enterprise system.

12. The method of claim 1 , wherein the action process to perform for a set of remote devices includes instructing each of the set of remote devices to apply the change in the synchronization setting.

13. The method of claim 1 , wherein change event objects and action process objects are plain old Java® objects.

14. The method of claim 1 , further comprising:
identifying the change event for a change in access to an enterprise system.

15. The method of claim 1 , further comprising:
identifying a plurality of remote devices that are affected by the change event; and
dividing the plurality of remote devices into the first set of remote devices and the second set of remote devices to be notified about the change event, wherein each device in the first set of remote devices is different from each device in the second set of remote devices.

16. A system comprising:
one or more processors; and
a memory storing one or more instructions that, when executed by the one or more processors, cause the one or more processors to perform operations to:
determine a type of change event corresponding to a change event for a change in access to an enterprise system for a plurality of remote devices;
identify an action process class associated with the type of change event, wherein the action process class defines an action process to perform for the type of change event;
select, based on a processing load of each of a plurality of computing nodes, a set of computing nodes of the plurality of computing nodes to perform the action process for the change in access;
establish, based on the type of change event, a first change event object that includes information about the change event for the change in access to the enterprise system and that includes first information identifying each of a first set of remote devices in the plurality of remote devices to be notified about the change event;
establish, based on the type of change event, a second change event object that includes the information about the change event for the change in ac

Assignees

• Oracle Int Corp

Inventors

• Jayanti Venkata Bhagavati Kumar
• Maheshwari Harsh
• Das Sidhartha

Classifications

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L63/104

  Grouping of entities · CPC title

• H04L41/28

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title