IP Library Granted Patent US 10,230,717
Granted Patent B2
US 10,230,717 · App. 15/037,944 · Granted Mar 12, 2019

Managed domains for remote content and configuration control on mobile information devices

Inventors: Alexander James Main (Ottawa, CA); Ron Vandergeest (Ottawa, CA); Paul Litva (Ottawa, CA)
Assignee: CIS Maxwell, LLC
H04L63/083G06F21/53G06Q30/0267H04W4/02H04W12/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,230,717
App. No.
15/037,944
Granted
Mar 12, 2019
Kind
B2
Abstract

A technique is disclosed for remotely managing isolated domains on mobile devices. A request is received from the mobile device to instantiate a managed domain. A managed domain configuration is determined and comprises a security policy controlling access to content of the managed domain of the subscribing mobile device, a content specification identifying the content to be downloaded by the subscribing mobile device into the managed domain, and a content configuration identifying a configuration of the content on the subscribing mobile device. The managed domain configuration is sent to the subscribing mobile device to instantiate a secure, managed domain whose policy, content and content configuration is remotely controlled. The technique is useful for advertising and brand promotion on mobile devices as it simultaneously enables detailed control over the presentation of content by a curator while ensuring privacy and security protection of the other apps, accounts and data on the mobile device.

Claims (45)

1. A method performed by an apparatus for remotely managing a subscribing mobile device, the apparatus comprising a processor, a memory, and a communications interface, the memory storing instructions executable by the processor to perform the method, the method comprising:

using the communications interface to receive an add domain request from the subscribing mobile device to instantiate on the subscribing mobile device a managed domain;

based on the add domain request, determining a managed domain configuration for the managed domain, the managed domain configuration comprising a content specification identifying content to be downloaded by the subscribing mobile device into the managed domain and a content configuration identifying a configuration of the content on the subscribing mobile device, the managed domain configuration further comprising a security policy, the security policy controlling access to the content in the managed domain on the subscribing mobile device;

using the communications interface to send the managed domain configuration to the subscribing mobile device; and

prior to using the communications interface to receive the add domain request: receiving from a managing mobile device a snapshot of a domain instantiated on the managing mobile device, the snapshot specifying a domain configuration; and

determining the content specification and the content configuration of the managed domain configuration based on the snapshot of the domain.

2. A method performed by an apparatus for remotely managing a subscribing mobile device, the apparatus comprising a processor, a memory, and a communications interface, the memory storing instructions executable by the processor to perform the method, the method comprising:

using the communications interface to receive an add domain request from the subscribing mobile device to instantiate on the subscribing mobile device a managed domain;

based on the add domain request, determining a managed domain configuration for the managed domain, the managed domain configuration comprising a content specification identifying content to be downloaded by the subscribing mobile device into the managed domain and a content configuration identifying a configuration of the content on the subscribing mobile device, the managed domain configuration further comprising a security policy, the security policy controlling access to the content in the managed domain on the subscribing mobile device;

using the communications interface to send the managed domain configuration to the subscribing mobile device;

using the communications interface to receive from a managing mobile device a real-time activity specification based on changed content and a changed configuration of a mirrored domain instantiated on the managing mobile device;

determining modifications to the content specification and the content configuration of the managed domain configuration based on the real-time activity specification; and

using the communications interface to send to the subscribing mobile device a specification of the modifications.

3. The method according to claim 2 , wherein the real-time activity specification is further based on usage information of the managing mobile device, the usage information specifying an app activation, a button push, a message, a high score, a picture, a video, or new app installation.

4. The method according to claim 2 further comprising after determining the modifications, and before using the communications interface to send the specification of the modifications, filtering the specification of the modifications for undesirable content including inappropriate pictures, text or audio, copyright violations, viruses, malware, phishing links, or denial of service attacks.

5. The method according to claim 2 , wherein the specification of the modifications is sent using the communications interface following a preconfigured time delay.

6. A method performed by an apparatus for remotely managing a subscribing mobile device, the apparatus comprising a processor, a memory, and a communications interface, the memory storing instructions executable by the processor to perform the method, the method comprising:

using the communications interface to receive an add domain request from the subscribing mobile device to instantiate on the subscribing mobile device a managed domain;

based on the add domain request, determining a managed domain configuration for the managed domain, the managed domain configuration comprising a content specification identifying content to be downloaded by the subscribing mobile device into the managed domain and a content configuration identifying a configuration of the content on the subscribing mobile device, the managed domain configuration further comprising a security policy, the security policy controlling access to the content in the managed domain on the subscribing mobile device;

using the communications interface to send the managed domain configuration to the subscribing mobile device;

receiving modifications to the domain configuration;

using the communications interface to send an update availability message to a push messaging service, the update availability message indicating availability of a modified domain configuration;

using the communications interface to receive from the subscribing mobile device an update request for the modified domain configuration;

authenticating the subscribing mobile device; and

using the communications interface to send the modified domain configuration to the subscribing mobile device.

7. A method performed on a mobile device for providing a managed domain, the mobile device comprising a processor, a memory, a communications interface, and a user interface, the memory storing instructions executable by the processor to perform the method, the method comprising:

using the mobile device to accept an invitation to add the managed domain to the mobile device;

generating an add domain request based on the invitation;

using the communications interface to send the add domain request to a domain management service remote to the mobile device;

using the communications interface to receive from the domain management service a managed domain configuration for the managed domain, the managed domain configuration comprising a content specification identifying content to be downloaded by the mobile device into the managed domain and a content configuration identifying a configuration of the content on the mobile device, the managed domain configuration further comprising a security policy, the security policy controlling access to the content in the managed domain on the mobile device:

switching to the managed domain; and

provisioning the managed domain based on the managed domain configuration,

wherein the mobile device further comprises a camera, and using the mobile device to accept the invitation comprises:

using the camera and the user interface to scan a QR code.

8. The method according to claim 7 , wherein using the mobile device to accept the invitation further comprises:

using the user interface to enter a one-time-password (OTP) or token associated with the QR code.

9. A method performed on a mobile device for providing a managed domain, the mobile device comprising a processor, a memory, a communications interface, and a user interface, the memory storing instructions executable by the processor to perform the method, the method comprising:

using the mobile device to accept an invitation to add the managed domain to the mobile device;

generating an add domain request based on the invitation;

using the communications interface to send the add domain request to a domain management service remote to the mobile device;

using the communications interface to receive from the domain management service a managed domain configuration for the managed domain, the managed domain configuration comprising a content specification identifying content to be downloaded by the mobile device into the managed domain and a content configuration identifying a configuration of the content on the mobile device, the managed domain configuration further comprising a security policy, the security policy controlling access to the content in the managed domain on the mobile device:

switching to the managed domain; and

provisioning the managed domain based on the managed domain configuration,

wherein using the mobile device to accept the invitation comprises:

using the user interface to browse an app store and select the managed domain via the app store.

Assignments (10)
RELEASE OF SECURITY INTEREST Recorded Jun 10, 2026
From: PNC BANK, NATIONAL ASSOCIATION
To: CIS SECURE COMPUTING, INC.; CIS MAXWELL, LLC
Reel/Frame 074908/0231 →
SECURITY INTEREST Recorded Jun 8, 2026
From: CIS SECURE COMPUTING, INC.; CIS MAXWELL, LLC
To: WINGSPIRE CAPITAL LLC
Reel/Frame 074885/0883 →
SECURITY INTEREST Recorded Apr 23, 2021
From: CIS SECURE COMPUTING, INC.; CIS MAXWELL, LLC
To: PNC BANK, NATIONAL ASSOCIATION
Reel/Frame 056019/0267 →
RELEASE OF SECURITY INTEREST Recorded Apr 23, 2021
From: CAPITALA FINANCE CORP.
To: CIS MAXWELL, LLC
Reel/Frame 056019/0097 →
RELEASE OF SECURITY INTEREST Recorded Apr 23, 2021
From: CAPITALA FINANCE CORP.
To: CIS MAXWELL, LLC
Reel/Frame 056019/0155 →
SECURITY INTEREST Recorded Jun 28, 2019
From: CIS MAXWELL, LLC
To: CAPITALA FINANCE CORP.
Reel/Frame 049620/0654 →
SECURITY INTEREST Recorded Jan 10, 2019
From: CIS MAXWELL, LLC
To: CAPITALA FINANCE CORP.
Reel/Frame 047960/0087 →
RELEASE OF SECURITY INTEREST Recorded Jan 10, 2019
From: COMERICA BANK
To: GRAPHITE SOFTWARE CORPORATION
Reel/Frame 048045/0635 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 10, 2019
From: GRAPHITE SOFTWARE CORPORATION
To: CIS MAXWELL, LLC
Reel/Frame 047959/0572 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 15, 2016
From: MAIN, ALEXANDER JAMES; VANDERGEEST, RON; LITVA, PAUL
To: GRAPHITE SOFTWARE CORPORATION
Reel/Frame 038921/0720 →
Continuity (2)
Provisional Application 61907082 · Nov 21, 2013
Related Publication 20160301680A1 · Oct 13, 2016
Cited By (1)
US 12,578,706