Context-aware mobile device management
Technologies disclosed herein are directed to context-based mobile device management. According to one embodiment, an application executing in a mobile device detects an event to trigger context-based management of the mobile device. A usage context associated with the mobile device is determined. One or more policies to enforce on the mobile device are identified as a function of the usage context. The application enforces the one or more policies on the mobile device.
1 . A method comprising:
receiving, by a contextual mobile device management (CMDM) service executing on a platform, an indication of a change in a context for managing a mobile device via a configuration profile associated with the mobile device, wherein the CMDM service sends communications to the mobile device via a push notification service executing on the platform;
determining, by the CMDM service and based on the change in context, a mobile device management policy to apply to the mobile device; and
modifying, by the CMDM service, the configuration profile associated with the mobile device by:
generating a notification comprising a payload to modify the configuration profile according to the determined mobile device management policy, and
transmitting, via the push notification service, the notification to the mobile device to cause the mobile device to modify the configuration profile.
2 . The method of claim 1 , wherein the CMDM service receives the indication of the change in the context from a networked beacon.
3 . The method of claim 2 , wherein the CMDM service receives the indication of the change in the context from the networked beacon in response to the mobile device leaving a predefined geofence.
4 . The method of claim 1 , wherein the payload is a command for the mobile device to execute, and wherein transmitting the notification to the mobile device causes the mobile device to execute the command.
5 . The method of claim 1 , wherein the payload comprises restrictions to one or more features of the mobile device.
6 . The method of claim 1 , wherein the payload comprises enabling or disabling a single application view mode on the mobile device.
7 . The method of claim 1 , wherein the payload comprises enabling a whitelisted applications list on the mobile device, wherein the whitelisted applications list specifies one or more applications on the mobile device that are accessible by a user.
8 . The method of claim 1 , wherein the payload comprises enabling a blacklisted applications list on the mobile device, wherein the blacklisted applications list specifies one or more applications on the mobile device that are prohibited from access by a user.
9 . The method of claim 1 , wherein the payload comprises limiting incoming notifications being transmitted to the mobile device.
10 . The method of claim 1 , wherein the payload comprises modifying a lock screen message presented on a display of the mobile device.
11 . The method of claim 1 , wherein the payload comprises applying a web content filter to restrict one or more types of network traffic from access on the mobile device.
12 . The method of claim 1 , further comprising:
generating a geofence region in which the mobile device is to remain;
upon detecting that the mobile device leaves the geofence region, activating a lost device mode on the mobile device.
13 . The method of claim 1 , wherein the payload is a command that triggers the mobile device to install media based on a context domain.
14 . The method of claim 1 , wherein the payload comprises restricting access to one or more business applications on the mobile device.