Granted Patent B1

US 9,762,444 · App. 14/563,955 · Granted Sep 12, 2017

Inventor: Mansu Kim (Cupertino, CA)

Assignee: MOBILE IRON, INC.

H04L41/0866H04L63/0823H04L67/02

Abstract

Claims (60)

1. A method, comprising:

using a third party management agent of a mobile device to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile, wherein the occurrence of the indirect indication is based at least in part on a presence of indirect indication-associated data in the configuration profile, wherein using the third party management agent includes:

receiving wireless configuration information from a device management server;

using the wireless configuration information to perform the test operation including querying a set of networks trusted by the mobile device; and

determining the occurrence of the indirect indication, wherein the occurrence includes an indication that the wireless configuration information matches one or more of the set of trusted networks; and

determining, based at least in part on the occurrence of the indirect indication, that the configuration profile is implemented by a platform management agent, wherein one or more applications associated with the mobile device is prevented from accessing an enterprise server remote from the mobile device based on whether the configuration profile is implemented by the platform management agent.

2. The method of claim 1 , wherein using the third party management agent includes:

receiving a certificate from the device management server;

using the certificate to generate a server on the mobile device;

performing the test operation including a platform-supported operation to authenticate to the server; and

detecting the occurrence of the indirect indication based at least in part on a successful authentication to the server.

3. The method of claim 2 , wherein using the certificate to generate the server includes:

using the certificate to generate a hypertext transfer protocol secure (HTTPS) server on the mobile device.

4. The method of claim 2 , wherein the performing the test operation includes performing a secure sockets layer (SSL) authentication operation to authenticate to the server.

5. The method of claim 2 , wherein the certificate is associated with the indirect indication-associated data, the indirect indication data including certificate information in a certificate profile included in the configuration profile.

6. The method of claim 5 , wherein the certificate information includes a certificate authority certificate that is associated with a same certificate authority as the certificate received from the device management server.

7. The method of claim 2 , wherein determining that the configuration profile is implemented by the platform management agent includes:

determining, based at least in part on the successful authentication to the server, that a certificate profile is present on the device; and

determining, based at least in part on the presence of the certificate profile, that the platform management agent is configured based at least in part on the configuration profile.

8. The method of claim 7 , wherein the certificate profile is included in the configuration profile.

9. The method of claim 2 , wherein determining that the configuration profile is implemented by the platform management agent includes:

determining, based at least in part on a certificate trust validating operation to the platform, that a certificate profile is present on the system; and

determining, based at least in part on the presence of the certificate profile, that the platform management agent is configured based at least in part on the configuration profile.

10. The method of claim 1 , wherein the wireless configuration information is associated with the indirect indication-associated data including a wireless configuration profile included in the configuration profile.

11. The method of claim 1 , wherein the platform management agent is configured to perform the steps of:

receiving a wireless configuration profile including a device management server-generated wireless network; and

adding the device management server-generated wireless network to the set of trusted networks.

12. The method of claim 11 , wherein

the received wireless configuration information includes the device management server-generated wireless network; and

determining the occurrence of the indirect indication includes determining that the wireless configuration information matches the device management server-generated wireless network in the set of trusted networks.

13. The method of claim 1 , wherein determining that the configuration profile is implemented by the platform management agent includes:

determining, based at least in part on the indication that the wireless configuration information matches one or more of the set of trusted networks, that a wireless configuration profile is present on the mobile device; and

determining, based at least in part on the presence of the wireless configuration profile, that the configuration profile is implemented by the platform management agent.

14. The method of claim 13 , wherein the wireless configuration profile is included in the configuration profile.

15. The method of claim 1 , wherein using the third party management agent includes:

performing the test operation including querying settings associated with a managed application based on a configuration parameter; and

determining the occurrence of the indirect indication, wherein the occurrence includes a successful query of the managed application settings.

16. The method of claim 15 , wherein determining that the configuration profile is implemented by the platform management agent includes:

determining, based at least in part on the successful query of the managed application settings, that a managed application configuration profile is present on the mobile device; and

determining, based at least on in part on the presence of the managed application configuration profile, that the configuration profile is implemented by the platform management agent.

17. The method of claim 16 , wherein the managed application configuration profile is included in the configuration profile.

18. The method of claim 1 , wherein:

using the third party management agent includes performing the test operation, and determining, based at least in part on the performance of the test operation, that the indirect indication of the presence of the configuration profile has not occurred; and

determining includes determining, based at least in part on the determination that the indirect indication has not occurred, that the configuration profile is not implemented by the platform management agent.

19. The method of claim 18 , further comprising:

performing an operation based at least in part on the determination that the configuration profile is not implemented by platform management agent.

20. A system, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:

use a third party management agent of a mobile device to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile, wherein the occurrence of the indirect indication is based at least in part on a presence of indirect indication-associated data in the configuration profile wherein to use the third party management agent, the processor is further configured to:

receive wireless configuration information from a device management server;

use the wireless configuration information to perform the test operation including querying a set of networks trusted by the mobile device; and

determine the occurrence of the indirect indication, wherein the occurrence includes an indication that the wireless configuration information matches one or more of the set of trusted networks; and

determine, based at least in part on the occurrence of the indirect indication, that the configuration profile is implemented by a platform management agent, wherein one or more applications associated with the mobile device is prevented from accessing an enterprise server remote from the mobile device based on whether the configuration profile is implemented by the platform management agent.

21. A computer program product, the computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:

using a third party management agent of a mobile device to perform a test operation to determine an occurrence of an indirect indication of a presence of a configuration profile, wherein the occurrence of the indirect indication is based at least in part on a presence of indirect indication-associated data in the configuration profile, wherein using the third party management agent includes:

receiving wireless configuration information from a device management server;

using the wireless configuration information to perform the test operation including querying a set of networks trusted by the mobile device; and

determining the occurrence of the indirect indication, wherein the occurrence includes an indication that the wireless configuration information matches one or more of the set of trusted networks; and

determining, based at least in part on the occurrence of the indirect indication, that the configuration profile is implemented by a platform management agent, wherein one or more applications associated with the mobile device is prevented from accessing an enterprise server remote from the mobile device based on whether the configuration profile is implemented by the platform management agent.

Assignments (8)

Continuity (1)