IP Library Granted Patent US 9,668,124
Granted Patent B2
US 9,668,124 · App. 14/994,782 · Granted May 30, 2017

Rule based mobile device management delegation

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,668,124
App. No.
14/994,782
Filed
Jan 13, 2016
Granted
May 30, 2017
Kind
B2
Art Unit
2646
USPC
455/418
Abstract

Rule-based mobile device management delegation is disclosed. A set of rules are applied to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions. The mobile device is managed according to a policy associated with the assigned management partition.

Claims (65)

1. A method, comprising:

applying, by a processor, a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions, wherein applying the set of rules further comprises:

determining that the attributes do not satisfy a first rule included in the set of rules;

applying a second rule to the attributes;

determining that the attributes satisfy the second rule; and

assigning, based at least in part on the determination that the attributes satisfy the second rule, the mobile device to a partition associated with the second rule;

managing the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;

determining a change to the set of rules; and

applying the changed set of rules to the attributes to reassign the mobile device to another partition included in the plurality of management partitions.

2. The method of claim 1 , further comprising:

applying, to the mobile device, a configuration associated with the assigned management partition.

3. The method of claim 1 , wherein applying the set of rules further comprises:

determining that the attributes satisfy a rule in the set of rules; and

assigning, based at least in part on the determination, the mobile device to a partition associated with the rule.

4. The method of claim 3 , wherein determining that the attributes satisfy the rule further comprises:

applying the set of rules to the attributes to determine a score associated with each rule in the set of the rules;

determining a rule in the set of rules that is associated with a highest score; and

assigning the mobile device to a partition associated with the rule.

5. The method of claim 1 , wherein applying the set of rules further comprises:

applying a plurality of rules in the set of rules to attributes associated with the mobile device;

determining that the attributes do not satisfy any of the plurality of rules; and

assigning the mobile device to a default management partition based at least in part on the determination.

6. The method of claim 1 , further comprising:

determining a change to the attributes associated with the mobile device; and

applying the set of rules to the changed attributes to reassign the mobile device to another partition included in the plurality of management partitions.

7. The method of claim 1 , further comprising:

reassigning the mobile device from the assigned partition to an other partition included in the plurality of management partitions;

removing, from the mobile device, a first configuration associated with the assigned partition; and

applying, to the mobile device, a second configuration associated with the other partition.

8. The method of claim 1 , wherein rules in the set of rules each correspond to one of the plurality of management partitions.

9. The method of claim 1 , wherein the set of rules comprises a plurality of rules arranged in an order.

10. The method of claim 1 , wherein the management partitions include a default partition and a rule-associated partition.

11. The method of claim 1 , wherein the plurality of management partitions are associated with management domains.

12. The method of claim 1 , further comprising:

assigning objects associated with the mobile device to one or more of a device management domain and a content management domain associated with the assigned partition.

13. The method of claim 1 , further comprising:

providing an administrator associated with the assigned partition permissions to manage or access the mobile device.

14. The method of claim 1 , further comprising:

providing a support organization associated with the assigned partition helpdesk functionality in relation to the mobile device.

15. The method of claim 1 , further comprising:

providing, to the user of the mobile device, access to content associated with the assigned partition.

16. The method of claim 1 , further comprising:

restricting access in the context of the mobile device to content not associated with the assigned partition.

17. A system, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:

apply a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions, wherein to apply the set of rules further comprises:

determining that the attributes do not satisfy a first rule included in the set of rules;

applying a second rule to the attributes;

determining that the attributes satisfy the second rule; and

assigning, based at least in part on the determination that the attributes satisfy the second rule, the mobile device to a partition associated with the second rule;

manage the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;

determine a change to the set of rules; and

apply the changed set of rules to the attributes to reassign the mobile device to another partition included in the plurality of management partitions.

18. The system recited in claim 17 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to:

apply, to the mobile device, a configuration associated with the assigned management partition.

19. A computer program product, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

applying a set of rules to attributes associated with a mobile device to assign the mobile device to one of a plurality of management partitions, wherein applying the set of rules further comprises:

determining that the attributes do not satisfy a first rule included in the set of rules;

applying a second rule to the attributes;

determining that the attributes satisfy the second rule; and

assigning, based at least in part on the determination that the attributes satisfy the second rule, the mobile device to a partition associated with the second rule;

managing the mobile device according to a policy associated with the assigned management partition, wherein the policy at least in part describes an access of the mobile device to objects scoped within the assigned management partition, wherein the access of the mobile device to content associated with unassigned partitions is limited;

determining a change to the set of rules; and

applying the changed set of rules to the attributes to reassign the mobile device to another partition included in the plurality of management partitions.