IP Library Granted Patent US 10,354,068
Granted Patent B2
US 10,354,068 · App. 15/882,284 · Granted Jul 16, 2019

Anonymized application scanning for mobile devices

Inventors: Shruti Phanse (Atlanta, GA); Bhavesh Krishna Kumar (Atlanta, GA)
Assignee: AirWatch, LLC
G06F21/56G06F21/60H04L63/10H04L63/1416H04L63/1441H04L63/20H04W12/08G06F2221/034
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,354,068
App. No.
15/882,284
Granted
Jul 16, 2019
Kind
B2
Abstract

Disclosed are various approaches for integrating application scanning into a mobile enterprise computing management system. A management service instructs the client device to provide a list of installed applications to the management service and receives the list of installed applications from the client device. The management service then adds the list of installed applications to an aggregate listing of applications representing a list of client applications installed on one or more client devices. Subsequently, the management service sends to a scanning service a policy comprising an identifier of a client application that is prohibited on the client device. The management service also sends the aggregate listing of applications to the scanning service. The management service then receives a notification from the scanning service that the prohibited client application is present in the aggregate listing of applications. In response, the management service determines whether the prohibited client application is installed on the client device and instructs the client device perform a remedial action specified by the policy.

Claims (50)

1. A system, comprising:

a server comprising a server processor and a server memory;

a client device in data communication with the server, the client device comprising a client processor and a client memory; and

a management service stored in the server memory that, when executed by the server processor, causes the server to at least:

receive a list of installed applications from the client device;

add the list of installed applications to an aggregate listing of applications, wherein the aggregate listing of applications represents a list of client applications installed on one or more of a plurality of client devices;

hide at least one device identifier associated with the plurality of client devices in the aggregate listing of applications;

send to a scanning service a policy comprising an identifier of a prohibited client application;

determine a quantity of the client devices that have transmitted a respective list for the aggregate listing of applications;

send the aggregate listing of applications to the scanning service in response to the quantity of the client devices exceeding a quantity threshold;

receive a notification from the scanning service, the notification comprising an indication that the prohibited client application is present in the aggregate listing of applications;

send a message to the client device instructing the client device to determine whether the prohibited client application is installed on the client device and to perform a remedial action specified by the policy in response to a determination that the prohibited client application is installed on the client device; and

receive a notification message that comprises a request to update a compliance status of the client device to indicate that the client device is in a compliant state.

2. The system of claim 1 , wherein the remedial action comprises causing the client device to uninstall the prohibited client application.

3. The system of claim 1 , wherein the remedial action comprises causing the client device to upgrade the prohibited client application.

4. The system of claim 1 , wherein the remedial action comprises causing the client device to modify a permission assigned to the prohibited client application.

5. The system of claim 1 , wherein the remedial action comprises causing the client device to modify a setting of the prohibited client application.

6. The system of claim 1 , wherein the prohibited client application comprises a first client application stored in the client memory and the remedial action comprises causing the client device to uninstall a second client application stored in the client memory.

7. The system of claim 1 , wherein the remedial action comprises resetting the client device to an initial state.

8. A method, comprising:

receiving a list of installed applications from a client device;

adding the list of installed applications to an aggregate listing of applications, wherein the aggregate listing of applications represents a list of client applications installed on one or more of a plurality of client devices;

hiding at least one device identifier associated with the plurality of client devices in the aggregate listing of applications;

sending to a scanning service a policy comprising an identifier of a prohibited client application;

determining a quantity of the client devices that have transmitted a respective list for the aggregate listing of applications;

sending the aggregate listing of applications to the scanning service in response to the quantity of the plurality of client devices exceeding a quantity threshold;

receiving a notification from the scanning service, the notification comprising an indication that the prohibited client application is present in the aggregate listing of applications;

sending a message to the client device instructing the client device to determine whether the prohibited client application is installed on the client device and to perform a remedial action specified by the policy in response to a determination that the prohibited client application is installed on the client device; and

receiving a notification message that comprises a request to update a compliance status of the client device to indicate that the client device is in a compliant state.

9. The method of claim 8 , wherein the remedial action comprises causing the client device to uninstall the prohibited client application.

10. The method of claim 8 , wherein the remedial action comprises causing the client device to upgrade the prohibited client application.

11. The method of claim 8 , wherein the remedial action comprises causing the client device to modify a permission assigned to the prohibited client application.

12. The method of claim 8 , wherein the remedial action comprises causing the client device to modify a setting of the prohibited client application.

13. The method of claim 8 , wherein the prohibited client application comprises a first client application and the remedial action comprises causing the client device to uninstall a second client application from the client device.

14. A non-transitory computer readable medium comprising machine readable instructions that, when executed by a processor of a computing device, cause the computing device to at least:

receive a list of installed applications from a client device;

add the list of installed applications to an aggregate listing of applications, wherein the aggregate listing of applications represents a list of client applications installed on one or more of a plurality of client devices;

hide at least one device identifier associated with the plurality of client devices in the aggregate listing of applications;

send to a scanning service a policy comprising an identifier of a prohibited client application, wherein installation of the prohibited client application is prohibited on the client device;

determine a quantity of the client devices that have transmitted a respective list for the aggregate listing of applications;

send the aggregate listing of applications to the scanning service in response to the quantity of the plurality of client devices exceeding a quantity threshold;

receive a notification from the scanning service, the notification comprising an indication that the prohibited client application is present in the aggregate listing of applications;

send a message to the client device instructing the client device to determine whether the prohibited client application is installed on the client device and to perform a remedial action specified by the policy in response to a determination that the prohibited client application is installed on the client device; and

receive a notification message that comprises a request to update a compliance status of the client device to indicate that the client device is in a compliant state.

15. The non-transitory computer readable medium of claim 14 , wherein the remedial action comprises causing the computing device to upgrade the prohibited client application.

16. The non-transitory computer readable medium of claim 14 , wherein the remedial action comprises causing the computing device to modify a permission assigned to the prohibited client application.

17. The non-transitory computer readable medium of claim 14 , wherein the remedial action comprises causing the computing device to modify a setting of the prohibited client application.

18. The non-transitory computer readable medium of claim 14 , wherein the prohibited client application comprises a first client application and the remedial action comprises causing the computing device to uninstall a second client application from the computing device.

19. The non-transitory computer readable medium of claim 14 , wherein the notification message from the client device indicates that the remedial action has been performed.

20. The method of claim 14 , wherein the notification message from the client device indicates that the remedial action has been performed.

Assignments (2)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: AIRWATCH LLC
To: OMNISSA, LLC
Reel/Frame 068327/0670 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
Continuity (2)
Continuation 15098588 · Apr 14, 2016
Related Publication 20180150636A1 · May 31, 2018