Managed application detection logic

Patent metadata

Field	Value
Publication number	US-9703572-B2
Application number	US-201514731772-A
Country	US
Kind code	B2
Filing date	Jun 5, 2015
Priority date	Jun 5, 2015
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

The detection of whether a local application is managed by a management service is described. In one example, depending upon whether an installation token includes a unique token value, detection logic can determine whether an application is managed or unmanaged based on additional factors. The additional factors include whether a keychain installation token includes a unique token value, the value of the keychain installation token, and a value of a launched flag for the application. Various combinations of those factors and the identification of either a managed or unmanaged status for the application are described. Using the concepts described herein, an unmanaged application can proceed to execute with limited functionality, present a notification that it should be reinstalled by the management service, stop executing, or take other measures.

First claim

Therefore, the following is claimed:

1. A non-transitory computer-readable medium embodying program code executable in at least one computing device, the program code being configured to cause the at least one computing device to at least:
determine whether an installation token is present in managed configuration data for an application;
execute the application as unmanaged based at least in part on a determination that the installation token is not present in the managed configuration data; and
based at least in part on a determination that the installation token is present in the managed configuration data, determine whether to execute the application as managed or execute the application as unmanaged according to whether a keychain installation token is present in keychain data for the application, a value of the keychain installation token, and a value of a launched flag in user default data for the application.

2. The non-transitory computer-readable medium according to claim 1 , the program code being further configured to cause the at least one computing device to present an indication that the application is unmanaged and must be installed through a mobile device manager in response to the installation token not being present in the managed configuration data.

3. The non-transitory computer-readable medium according to claim 1 , the program code being further configured to cause the at least one computing device to at least:
determine whether the keychain installation token is present in the keychain data for the application; and
determine whether to execute the application as managed or execute the application as unmanaged based at least in part on whether a launched flag is set in user default data for the application and whether the keychain installation token is present in the keychain data.

4. The non-transitory computer-readable medium according to claim 3 , the program code being further configured to cause the at least one computing device to at least:
determine whether the launched flag is set in the user default data for the application;
execute the application as unmanaged in response to the keychain installation token not being present in the keychain data and the launched flag being set in the user default data; and
copy a value of the installation token to the keychain data as the keychain installation token and set the launched flag in the user default data in response to the keychain installation token not being present in the keychain data and the launched flag not being set in the user default data.

5. The non-transitory computer-readable medium according to claim 4 , the program code being further configured to cause the at least one computing device to present an indication that the application was restored from a backup and must be installed through a mobile device manager based at least in part on a determination that the keychain installation token is not present in the keychain data and that the launched flag is set in the user default data.

6. The non-transitory computer-readable medium according to claim 3 , the program code being further configured to cause the at least one computing device to at least:
determine whether a value of the installation token is equal to a value of the keychain installation token in response to a determination that the keychain installation token is present in the keychain data; and
determine whether to execute the application as managed or execute the application as unmanaged based in part on whether a launched flag is set in user default data for the application and whether the value of the installation token is equal to the value of the keychain installation token.

7. The non-transitory computer-readable medium according to claim 6 , the program code being further configured to cause the at least one computing device to at least:
based at least in part on a determination that the value of the installation token is not equal to the value of the keychain installation token:
copy a value of the installation token to the keychain data as the keychain installation token;
set the launched flag in the user default data; and
execute the application as managed.

8. The non-transitory computer-readable medium according to claim 6 , the program code being further configured to cause the at least one computing device to at least:
determine whether the launched flag is set in the user default data for the application;
execute the application as managed based at least in part on a determination that the value of the installation token is equal to the value of the keychain installation token and that the launched flag is set in the user default data; and
execute the application as unmanaged based at least in part on a determination that the value of the installation token is equal to the value of the keychain installation token and that the launched flag is not set in the user default data.

9. A non-transitory computer-readable medium embodying program code executable in at least one computing device, the program code being configured to cause the at least one computing device to at least:
determine whether an installation token is present in configuration data for an application;
execute the application as unmanaged based at least in part on a determination that the installation token is not present in the configuration data;
determine whether a keychain installation token is present in keychain data for the application based at least in part on a determination that the installation token is present in the configuration data; and
determine whether to execute the application as managed or execute the application as unmanaged based on whether a launched flag is set for the application and whether the keychain installation token is not present in the keychain data.

10. The non-transitory computer-readable medium according to claim 9 , the program code being further configured to cause the at least one computing device to at least:
execute the application as unmanaged based at least in part on a determination that the keychain installation token is not present in the keychain data and that the launched flag is set; and
copy a value of the installation token to the keychain data as the keychain installation token based at least in part on a determination that the keychain installation token is not present in the keychain data and that the launched flag is not set.

11. The non-transitory computer-readable medium according to claim 9 , the program code being further configured to cause the at least one computing device to determine whether to execute the application as managed based on a comparison between a value of the installation token and a value of the keychain installation token.

12. The non-transitory computer-readable medium according to claim 11 , the program code being further configured to, based on a determination that the value of the installation token is not equal to the value of the keychain installation token, cause the at least one computing device to copy a value of the installation token to the keychain data as the keychain installation token and set the launched flag.

13. The non-transitory computer-readable medium according to claim 11 , the program code being further configured to cause the at least one computing device to determine whether to execute the application as managed or execute the application as unmanaged based at least in part on a launched flag for the application and whether the value of the installation token is equal to the value of the keychain installation token.

14. The non-transitory computer-readable medium according to cla

Assignees

• Airwatch Llc

Inventors

• Chen Lucas
• Rajan Raghuram
• 'Brannon Jonathan Blake

Classifications

• G06F9/44536

  Selecting among different versions · CPC title

• G06F9/448 Primary

  Execution paradigms, e.g. implementations of programming paradigms · CPC title

• G06F9/445 Primary

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F9/4421 Primary

  Physics · mapped topic