Providing application and device management using entitlements

Patent metadata

Field	Value
Publication number	US-9841882-B2
Application number	US-201514595194-A
Country	US
Kind code	B2
Filing date	Jan 12, 2015
Priority date	Dec 19, 2006
Publication date	Dec 12, 2017
Grant date	Dec 12, 2017

Abstract

Methods and systems for providing virtual workspaces are provided. Specifically, Application Workspace System “AWS” enables users to access remote server-based applications (e.g., thin client applications, terminal server applications, applications on hosted operating systems, etc.) using the same interface that they use to access local applications, without needing to know where the application is being accessed. The AWS automatically determines which applications the user is entitled to use, and then figures out, based upon a variety of parameters, which applications are to be made available to the user (resolved to version, particular package etc.), and whether they are to be installed locally, or accessed remotely.

First claim

What is claimed is:

1. A computer-implemented method for managing devices based on user entitlements, the method comprising:
establishing, by a client-side manager that is installed on a managed device, communication with a component on a server that remotely provides a virtual workspace to the managed device;
detecting, by the client-side manager, a login by a user of the managed device to the virtual workspace presented to the managed device, the client-side manager enabling management and configuration of applications that are available on the virtual workspace when the user logs in to the virtual workspace;
upon detection of the login to the virtual workspace, sending, by the client-side manager, a request for entitlement information associated with the user from the client-side manager to the component on the server;
resolving, by the client-side manager, one or more entitlements of the applications associated with the user, based on the entitlement information received from the component on the server in response to the request, to determine which of the applications the user is entitled to install and/or upgrade locally and then use locally on the managed device; and
installing and/or upgrading, by the client-side manager, the determined applications locally on the managed device and providing, by the client-side manager, a user interface of the installed and/or upgraded applications to the user for use thereof.

2. The method of claim 1 , the method further comprising:
in response to detecting the login to the virtual workspace, retrieving a user ID associated with the login and requesting authentication of the retrieved user ID from a directory service, by the client-side manager.

3. The method of claim 1 , wherein the method further comprises:
interacting with a native operating system's database of installed applications on the managed device, by the client-side manager.

4. The method of claim 1 , wherein the method further comprises:
retrieving system call trace information on the managed device and sending the retrieved system call trace information to the component on the server for further analysis, by the client-side manager.

5. The method of claim 4 , wherein the system call trace information includes one or more of:
file, directory or network share accesses;
registry accesses;
process start and stop information;
module load and unload information;
device driver load and unload information;
network listens information;
network connects information; and
network disconnects information.

6. The method of claim 1 , wherein the managed device is a mobile cellular device.

7. The method of claim 1 , wherein the method further comprises:
by the component on the server and the client-side manager, enabling an administrator to associate a custom action with the login, wherein the custom action is performed before the application is launched on the managed device.

8. A non-transitory computer readable storage medium storing instructions thereon, the instructions when executed by one or more processors, causing the one or more processors to execute a set of operations comprising:
establishing, by a client-side manager that is installed on a managed device, communication with a component on a server that remotely provides a virtual workspace to the managed device;
detecting, by the client-side manager, a login by a user of the managed device to the virtual workspace presented to the managed device, the client-side manager enabling management and configuration of applications that are available on the virtual workspace when the user logs in to the virtual workspace;
upon detection of the login to the virtual workspace, sending, by the client-side manager, a request for entitlement information associated with the user from the client-side manager to the component on the server;
resolving, by the client-side manager, one or more entitlements of the applications associated with the user, based on the entitlement information received from the component on the server in response to the request, to determine which of the applications the user is entitled to install and/or upgrade locally and then use locally on the managed device; and
installing and/or upgrading, by the client-side manager, the determined applications locally on the managed device and providing, by the client-side manager, a user interface of the installed and/or upgraded applications to the user for use thereof.

9. The non-transitory computer readable storage medium of claim 8 , wherein the set of operations further comprises:
in response to detecting the login to the virtual workspace, retrieving a user ID associated with the login and requesting authentication of the retrieved user ID from a directory service, by the client-side manager.

10. The non-transitory computer readable storage medium of claim 8 , wherein the set of operations further comprises:
interacting with a native operating system's database of installed applications on the managed device, by the client-side manager.

11. The non-transitory computer readable storage medium of claim 8 , wherein the set of operations further comprises:
retrieving system call trace information on the managed device and sending the retrieved system call trace information to the component on the server for further analysis, by the client-side manager.

12. The non-transitory computer readable storage medium of claim 11 , wherein the system call trace information includes one or more of:
file, directory or network share accesses;
registry accesses;
process start and stop information;
module load and unload information;
device driver load and unload information;
network listens information;
network connects information; and
network disconnects information.

13. The non-transitory computer readable storage medium of claim 8 , wherein the managed device is a mobile cellular device.

14. The non-transitory computer readable storage medium of claim 8 , wherein the set of operations further comprises:
by the component on the server and the client-side manager, enabling an administrator to associate a custom action with the login, wherein the custom action is performed before the application is launched on the managed device.

15. A computing device, comprising:
at least one processor; and
computer readable medium including instructions that, when executed by the at least one processor, cause a client-side manager that is installed on the computing device to:
establish communication with a component on a server that remotely provides a virtual workspace to the computing device;

detect a login by a user of the computing device to the virtual workspace presented to the computing device, the client-side manager enabling management and configuration of applications that are available on the virtual workspace when the user logs in to the virtual workspace;
upon detection of the login to the virtual workspace, send a request for entitlement information associated with the user from the client-side manager to the component on the server;
resolve one or more entitlements of the applications associated with the user, based on the entitlement information received from the component on the server in response to the request, to determine which of the applications the user is entitled to install and/or upgrade locally and then use locally on the computing device; and
install and/or upgrade the determined applications locally on the computing device and provide a user interface of the installed and/or upgraded applications to the user for use thereof.

Assignees

• Wilkinson Anthony J
• Benson Mark
• Crewe Robin
• Vmware Inc

Inventors

• Wilkinson Anthony J
• Benson Mark
• Crewe Robin

Classifications

• G06F8/61

  Installation · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• G06F3/04842 Primary

  Selection of displayed objects or displayed text elements (G06F3/0482 takes precedence) · CPC title

• G06F9/542

  Event management; Broadcasting; Multicasting; Notifications · CPC title

• G06F9/468 Primary

  Specific access rights for resources, e.g. using capability register · CPC title