Vmware, Inc.

Airwatch LLC

Omnissa, LLC

Chaoting Xuan

Erich Peter Stuntebeck

Kar Fai Tse

Qimin Yao

Ravish Chawla

Kar-Fai Tse

Lin Lv

Rohit Pradeep Shetty

Suyu Pan

Jianling Wang

Yue Zhao

Qian Jack Liu

Chen Lu

Yunxia Cheng

Xinda Yan

Ramani Panchapakesan

Stephen Jonathan Parry-Barwick

Guoxin Liu

Litao Shen

Suman Aluvala

Erich Stuntebeck

Yanchao Zhang

Sharun Varghese Samuel

Tong Zhao

Xinpi Du

Sandeep Naga Kaipu

Bo Liu

Dipanshu Gupta

Supriya Saha

Systems and methods can allow for secure cross-device sharing of transient data using direct transient data sharing ('DTDS'). A source destination can share data using local DTDS with an agent on a first device. The agent can send the data to a hub server that runs a security control process and data formatting process. The hub server can determine risk scores for the source and destination devices and allow the sharing to occur if a safety threshold is met. Then an agent on the destination device can receive the transient data and use local DTDS to send the data to a destination application.

Secure cross-device direct transient data sharing

Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Automated identification of anomalous devices

Disclosed are various embodiments for managing voice-driven application. In one embodiment, among others, a system includes a computing device and program instructions. The program instructions can cause the computing device to initiate a management session between a voice application service and a management service based on receiving a first request from the voice application service. The program instructions can cause the computing device to initiate an application session between a voice-driven application and the management service based at least in part on a second request received from the voice application service. The program instructions can cause the computing device to enforce a compliance policy on a data request for the voice-driven application. The data response can be transmitted to the voice application. The voice application service can provide the data response to the client device for playback.

Managing voice applications within a digital workspace

Disclosed are various approaches for workflow service application searching. In some aspects, a search query is entered through a search element of a workflow application on a client device. A request is transmitted from a workflow application to a workflow service, to search within an application based on the search query. Application content corresponding to the search query and the application is received from the workflow service. A search result is provided based on the application content and without opening the application on the client device.

Workflow service application searching

Systems and methods are described for extracting and populating content from an email link. In an example, a machine learning ('ML') model can be trained based on user interactions with emails. When an email is received for the user, the ML model can be applied to score the email. An application can extract a link in the email. The application can retrieve a web page with the link and store it locally. The application can create a card for the email that includes the link and insert the card into a graphical user interface (“GUI”). A user can access the GUI and select the card. The web page can be retrieved from the local storage and displayed in the GUI.

Extracting and populating content from an email link

Disclosed are various examples for audio data leak prevention using user and device contexts. In some examples, a voice assistant device can be connected to a remote service that provides enterprise data to be audibly emitted by the voice assistant device. In response to a request for the enterprise data being received from the voice assistant device, an audio signal can be generated that audibly broadcasts the enterprise data. The audio signal can be generated to audibly redact at least a portion of the enterprise data based at least in part on a mode of operation of the voice assistant device. The voice assistant device can be directed to emit the enterprise data through a playback of the audio signal.

Data leak prevention using user and device contexts

Disclosed are various embodiments for implementing a key escrow system without disclosure of a client's encryption key to third parties. An encryption key is split into a plurality of key segments pursuant to a shared secret protocol. A plurality of peer client devices are then identified. Each peer client device in the plurality of peer client devices is then verified and the respective one of the plurality of key segments are sent to a respective one of the plurality of peer client devices. A response is then received from each respective one of the plurality of peer client devices, the response confirming receipt of the respective one of the plurality of key segments. A list identifying the plurality of peer client devices is finally provided to a key escrow service, the list comprising key-value pairs that identify each respective one of the plurality of peer client devices and the respective one of the plurality of key segments.

Zero-knowledge key escrow

Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. A user account can be implicitly authenticated based on proximity of a client device to the voice assistant device. An association between the user account and the voice assistant device can then be created.

Proximity based authentication of a user through a voice assistant device

Disclosed are various approaches for workflow service application stating. In some aspects, an application content request is transmitted to a workflow service. The application content request can request updated states from a network service that acts as a back end for the application. The application content can be provided to the client device or other installed applications, without having opened the application on a client device.

Workflow service application stating

Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one example, among others, a system includes a client device that is configured to display a camera user interface for capturing an image and identify an action that stores the image captured in the memory. An image tag that describes the image is generated. The client device is configured to determine that the image has enterprise content based on the image tag and determine an enterprise policy to apply to the enterprise content. Text content from the image is extracted based on the enterprise policy. The client device is configured to display a user interface that includes the text content extracted from the image and transmit the text content of the image to an application based on the enterprise policy.

Managing camera actions

Disclosed are various approaches for workflow service application networking. In some aspects, a workflow creation user interface is provided to create a networking workflow with at least one networking action. A networking action is specified for a first application to utilize application content from a second application. The networking action is verified based on a response to a test action request transmitted to the workflow service. The networking action is transmitted from the workflow application to a workflow service to cause the first application to utilize the application content from the second application according to the networking action.

Workflow service application networking

Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. The user is prompted to use a client device, such as a smartphone, to facilitate an authentication flow. A soundwave is played through the client device that contains a secret key, which is then sent to a service that validates the secret key. An association between the user account and the voice assistant device can then be created so that access to third party services can occur.

Growing community of inventors

Duluth, GA, United States of America

Chaoting Xuan