IP Library › Granted Patent US 9,065,771
Granted Patent B2
US 9,065,771 · App. 13/722,213 · Granted Jun 23, 2015

Managing application execution and data access on a device

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,065,771
App. No.
13/722,213
Granted
Jun 23, 2015
Kind
B2
Abstract

Some aspects of what is described here relate to managing application execution and data access on a mobile device. A request to access data is received from an application associated with a first perimeter on a device. The data is associated with a second, different perimeter on the device and has a data type. It is determined, based on the data type, that a management policy associated with the first perimeter permits the application to access the data independent of a second, different management policy assigned to the second perimeter. Based on the determining, the application is provided access to the data.

Claims (49)

1. A computer-implemented method comprising:

receiving, from an application associated with a first perimeter on a device, a request to access data associated with a second, different perimeter on the device, wherein the data has a data type;

determining, based on the data type, that a first management policy associated with the first perimeter permits the application to access the data independent of a second, different management policy associated with the second perimeter; and

based on the determining, providing the application access to the data.

2. The method of claim 1 , further comprising:

configuring the second management policy associated with the second perimeter to deny access to the data by applications not associated with the second perimeter; and

configuring the first management policy associated with the first perimeter to override the second management policy associated with the second perimeter and to permit the application to access the data.

3. The method of claim 1 , further comprising associating the application with the first perimeter upon installing the application on the device.

4. The method of claim 1 , further comprising associating the data with the second perimeter upon storing the data on the device.

5. The method of claim 1 , further comprising configuring the first management policy associated with the first perimeter to permit applications associated with the first perimeter to access personal data on the device, and wherein the data includes work-related contact information.

6. The method of claim 5 , wherein the application is a telephony application, and wherein the method further comprises:

receiving the request to access the work-related contact information from the telephony application; and

providing the requested work-related contact information.

7. The method of claim 1 , wherein the first perimeter includes computing resources executable to control access of data within or outside the first perimeter by applications associated with the first perimeter, and wherein the second perimeter includes computing resources executable to control access to data associated with the second perimeter.

8. The method of claim 1 , wherein providing the application access to the data includes providing the application access to the data associated with the second perimeter while the second perimeter is locked.

9. The method of claim 1 , wherein the first perimeter comprises a personal perimeter and the second perimeter comprises an enterprise perimeter.

10. A device comprising:

data processing apparatus; and

a computer-readable medium storing instructions executable by the data processing apparatus to perform operations comprising:

receiving, from an application associated with a first perimeter on a device, a request to access data associated with a second, different perimeter on the device, wherein the data has a data type;

determining, based on the data type, that a first management policy associated with the first perimeter permits the application to access the data independent of a second, different management policy associated with the second perimeter; and

based on the determining, providing the application access to the data.

11. The device of claim 10 , the operations further comprising:

configuring the second management policy associated with the second perimeter to deny access to the data by applications not associated with the second perimeter; and

configuring the first management policy associated with the first perimeter to override the second management policy and to permit the application to access the data.

12. The device of claim 10 , the operations further comprising associating the application with the first perimeter upon installing the application on the device.

13. The device of claim 10 , the operations further comprising associating the data with the second perimeter upon storing the data on the device.

14. The device of claim 10 , the operations further comprising configuring the first management policy associated with the first perimeter to permit applications associated with the first perimeter to access personal data on the device, and wherein the data includes work-related contact information.

15. The device of claim 14 , wherein the application is a telephony application, and wherein the operations further comprise:

receiving the request to access the work-related contact information from the telephony application; and

providing the requested work-related contact information.

16. The device of claim 10 , wherein the first perimeter includes computing resources executable to control access of data within or outside the first perimeter by applications associated with the first perimeter, and wherein the second perimeter includes computing resources executable to control access to data associated with the second perimeter.

17. The device of claim 10 , wherein providing the application access to the data includes providing the application access to the data associated with the second perimeter while the second perimeter is locked.

18. The device of claim 10 , wherein the first perimeter comprises a personal perimeter and the second perimeter comprises an enterprise perimeter.

19. A non-transitory computer-readable medium storing instructions executable by data processing apparatus to perform operations comprising:

receiving, from an application associated with a first perimeter on a device, a request to access data associated with a second, different perimeter on the device, wherein the data has a data type;

determining, based on the data type, that a first management policy associated with the first perimeter permits the application to access the data independent of a second, different management policy associated with the second perimeter; and

based on the determining, providing the application access to the data.

20. The medium of claim 19 , the operations further comprising:

configuring the second management policy associated with the second perimeter to deny access to the data by applications not associated with the second perimeter; and

configuring the first management policy associated with the first perimeter to override the second management policy and to permit the application to access the data.

21. The medium of claim 19 , the operations further comprising associating the application with the first perimeter upon installing the application on the device.

22. The medium of claim 19 , the operations further comprising associating the data with the second perimeter upon storing the data on the device.

23. The medium of claim 19 , the operations further comprising configuring the first management policy associated with the first perimeter to permit applications associated with the first perimeter to access personal data on the device, and wherein the data includes work- related contact information.

24. The medium of claim 19 , wherein the application is a telephony application, and wherein the operations further comprise:

receiving the request to access the work-related contact information from the telephony application; and

providing the requested work-related contact information.

25. The medium of claim 19 , wherein providing the application access to the data includes providing the application access to the data associated with the second perimeter while the second perimeter is locked.

26. The medium of claim 19 , wherein the first perimeter comprises a personal perimeter and the second perimeter comprises an enterprise perimeter.