Detecting a configuration profile from a management agent

Patent metadata

Field	Value
Publication number	US-9762444-B1
Application number	US-201414563955-A
Country	US
Kind code	B1
Filing date	Dec 8, 2014
Priority date	Dec 6, 2013
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

Detecting a mobile device management (MDM) profile from a management agent is disclosed. A third party management agent is used to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile. The occurrence of the indirect indication is based at least in part on the presence of indirect indication-associated data in the configuration profile. It is determined, based at least in part on the occurrence of the indirect indication, that the configuration profile is implemented by a platform management agent.

First claim

What is claimed is:

1. A method, comprising:
using a third party management agent of a mobile device to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile, wherein the occurrence of the indirect indication is based at least in part on a presence of indirect indication-associated data in the configuration profile, wherein using the third party management agent includes:
receiving wireless configuration information from a device management server;
using the wireless configuration information to perform the test operation including querying a set of networks trusted by the mobile device; and
determining the occurrence of the indirect indication, wherein the occurrence includes an indication that the wireless configuration information matches one or more of the set of trusted networks; and

determining, based at least in part on the occurrence of the indirect indication, that the configuration profile is implemented by a platform management agent, wherein one or more applications associated with the mobile device is prevented from accessing an enterprise server remote from the mobile device based on whether the configuration profile is implemented by the platform management agent.

2. The method of claim 1 , wherein using the third party management agent includes:
receiving a certificate from the device management server;
using the certificate to generate a server on the mobile device;
performing the test operation including a platform-supported operation to authenticate to the server; and
detecting the occurrence of the indirect indication based at least in part on a successful authentication to the server.

3. The method of claim 2 , wherein using the certificate to generate the server includes:
using the certificate to generate a hypertext transfer protocol secure (HTTPS) server on the mobile device.

4. The method of claim 2 , wherein the performing the test operation includes performing a secure sockets layer (SSL) authentication operation to authenticate to the server.

5. The method of claim 2 , wherein the certificate is associated with the indirect indication-associated data, the indirect indication data including certificate information in a certificate profile included in the configuration profile.

6. The method of claim 5 , wherein the certificate information includes a certificate authority certificate that is associated with a same certificate authority as the certificate received from the device management server.

7. The method of claim 2 , wherein determining that the configuration profile is implemented by the platform management agent includes:
determining, based at least in part on the successful authentication to the server, that a certificate profile is present on the device; and
determining, based at least in part on the presence of the certificate profile, that the platform management agent is configured based at least in part on the configuration profile.

8. The method of claim 7 , wherein the certificate profile is included in the configuration profile.

9. The method of claim 2 , wherein determining that the configuration profile is implemented by the platform management agent includes:
determining, based at least in part on a certificate trust validating operation to the platform, that a certificate profile is present on the system; and
determining, based at least in part on the presence of the certificate profile, that the platform management agent is configured based at least in part on the configuration profile.

10. The method of claim 1 , wherein the wireless configuration information is associated with the indirect indication-associated data including a wireless configuration profile included in the configuration profile.

11. The method of claim 1 , wherein the platform management agent is configured to perform the steps of:
receiving a wireless configuration profile including a device management server-generated wireless network; and
adding the device management server-generated wireless network to the set of trusted networks.

12. The method of claim 11 , wherein
the received wireless configuration information includes the device management server-generated wireless network; and
determining the occurrence of the indirect indication includes determining that the wireless configuration information matches the device management server-generated wireless network in the set of trusted networks.

13. The method of claim 1 , wherein determining that the configuration profile is implemented by the platform management agent includes:
determining, based at least in part on the indication that the wireless configuration information matches one or more of the set of trusted networks, that a wireless configuration profile is present on the mobile device; and
determining, based at least in part on the presence of the wireless configuration profile, that the configuration profile is implemented by the platform management agent.

14. The method of claim 13 , wherein the wireless configuration profile is included in the configuration profile.

15. The method of claim 1 , wherein using the third party management agent includes:
performing the test operation including querying settings associated with a managed application based on a configuration parameter; and
determining the occurrence of the indirect indication, wherein the occurrence includes a successful query of the managed application settings.

16. The method of claim 15 , wherein determining that the configuration profile is implemented by the platform management agent includes:
determining, based at least in part on the successful query of the managed application settings, that a managed application configuration profile is present on the mobile device; and
determining, based at least on in part on the presence of the managed application configuration profile, that the configuration profile is implemented by the platform management agent.

17. The method of claim 16 , wherein the managed application configuration profile is included in the configuration profile.

18. The method of claim 1 , wherein:
using the third party management agent includes performing the test operation, and determining, based at least in part on the performance of the test operation, that the indirect indication of the presence of the configuration profile has not occurred; and
determining includes determining, based at least in part on the determination that the indirect indication has not occurred, that the configuration profile is not implemented by the platform management agent.

19. The method of claim 18 , further comprising:
performing an operation based at least in part on the determination that the configuration profile is not implemented by platform management agent.

20. A system, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
use a third party management agent of a mobile device to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile, wherein the occurrence of the indirect indication is based at least in part on a presence of indirect indication-associated data in the configuration profile wherein to use the third party management agent, the processor is further configured to:
receive wireless configuration information from a device management server;
use the w

Assignees

• Mobile Iron Inc

Inventors

• Kim Mansu

Classifications

• H04L41/0866 Primary

  Checking the configuration · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/168

  above the transport layer · CPC title