Ca, Inc.

Hemanth Kumar Pinninti

Vikrant Nandakumar

Naveen Harry Michael

Madhusudhan Ganda

Vardhineedi Satyanarayana Murthy

A method includes receiving a notice of a policy violation of an enterprise usage policy by a managed application on a user device wherein the managed application is managed by a mobile application management module on the user device, retrieving the enterprise usage policy from a policy database. The method further includes determining a modification precedence of the active condition and the active restriction, selecting one of the active condition and the active restriction for modification in response to the modification precedence, modifying the selected one of the active condition and the active restriction in response to the notice of the policy violation to provide a modified enterprise usage policy, and transmitting the modified enterprise usage policy to the user device.

Dynamic management of enterprises policies

A mobile device fetches a policy definition library from a policy server responsive to occurrence of a defined event associated with an application package. The policy definition library contains policies defining resources of the mobile device that the application package is permitted to access. The mobile device executes the wrapped application package containing application executable code and application wrapper executable code that is called by each execution of an agnostic wrapper function residing at each of a plurality of locations in the application executable code. Responsive to execution of the agnostic wrapper function at any of the plurality of locations in the application executable code, the mobile device executes the application wrapper executable code to control whether access by the application executable code is granted to resources of the mobile device based on the policies contained in the policy definition library.

Fetching a policy definition library from a policy server at mobile device runtime of an application package to control access to mobile device resources

A method on a processor of an application wrapper computer includes, for each of a plurality of features of an application program in an application package, associating a wrapper component with the feature, identifying a location of the feature in the application program, and identifying from a portion of the application program at the location whether the feature will have an operational error during execution responsive to a request from the feature for access to a resource of a user device being blocked by the wrapper component. For each of the plurality of features, the method further responds to an operational error being identified by identifying content of an acceptable response to the request to avoid the operational error, and modifying the wrapper component to provide the content of the acceptable response to the request when the wrapper component is blocking the request from accessing the resource.

Operations to avoid wrapped mobile application operational errors due to interference from wrapper logic components

For each of a plurality of wrapper logic components, a metric is determined from content of reports received from user electronic devices that characterizes performance of the wrapper logic component when executed by the user electronic devices to monitor a feature of an application during execution of the application by the user electronic devices. A set of the wrapper logic components is selected that excludes from the set any of the wrapper logic components having performance characterized by the metrics that does not satisfy a first defined rule. The set of wrapper logic components and the application are combined to form a modified application with the wrapper logic components of the set configured to monitor features of the modified application when executed by user electronic devices.

Selecting application wrapper logic components for wrapping a mobile application based on wrapper performance feedback from user electronic devices

Executable code of an application package is decompiled to provide a decompiled application package. Features of the application package are identified based on content of the decompiled application package. A set of wrapper logic components are selected from among a library of wrapper logic components based on the features of the application package. The decompiled application package is disassembled to provide disassembled code. Wrapper program hooks are inserted into the disassembled code to provide modified disassembled code. The modified disassembled code is assembled to provide modified assembled code. The wrapper logic components of the set are combined with the modified assembled code to form a wrapped application package including executable code from the modified assembled code and executable code from the wrapper logic components of the set that intercept calls by the executable code from the modified assembled code.

Selecting application wrapper logic components based on features of a mobile application to be wrapped

A method includes performing operations on a processor of an application analysis computer. The operations include receiving reports from user terminals containing identifiers for operational states of an application being processed by the user terminals and containing state performance metrics. Each of the state performance metrics indicates a measurement of performance for a corresponding identified one of the operational states of the application being processed by one of the user terminals. The operations further include, for each of the operational states of the application identified in the reports, generating a rule for acceptable performance of the operational state of the application based on the state performance metrics of the operational state reported by the user terminals. The operations further include storing in a repository the rules associated with identifiers for corresponding ones of the operational states of the application. Related operations by a user terminal are disclosed.

Providing application operational insights to users based on crowd sourced performance metrics for operational states

An OS API mapping computer operates to identify a set of OS APIs of a first OS version not present in a second OS version. OS APIs of the second OS version are identified that satisfy a defined rule for compatibility with the set of OS APIs of the first OS version not present in the second OS version. An OS APIs replacement list is generated that maps individual ones of the set of OS APIs of the first OS version, to corresponding ones of the OS APIs of the second OS version that satisfy the defined rule. A set is identified of OS APIs of an application that are in the OS APIs replacement list among the set of OS APIs of the first OS version. A plugin is generated based on the OS APIs of the second OS version mapped to the set of application OS APIs.

Mobile application configuration agnostic to operating system versions

A method includes performing operations on a processor of an application analysis computer. The operations include receiving state performance metrics reported by user terminals via a data network. Each of the state performance metrics indicating a measurement of performance of one of a plurality of operational states of an application processed by one of the user terminals. The operations further include determining when one of the state performance metrics reported by one of the user terminals violates a rule for acceptable operational state performance of the application, and communicating a response message to the one of the user terminals responsive to the determination that the one of the state performance metrics violates the rule. Related operations by a user terminal are disclosed.

Wrapped applications providing operational insight to users based on rules for acceptable operational state performance

Systems and methods for generating secure passwords, personal identification numbers (PINs), and other user credentials using touch-aware devices are described. In some cases, an end user of a computing device may use a touch-sensitive interface (e.g., a touchscreen) to indirectly enter user credentials for accessing protected information or a protected computing resource using the computing device. The end user may indirectly enter the user credentials by entering information that is different from the actual user credentials. In one example, the touch-sensitive interface may display a plurality of numbers and paths connecting the plurality of numbers and the end user of the computing device may select a sequence of numbers of the plurality of numbers using a touch gesture. The computing device may generate a user credential different from the sequence of numbers using the sequence of numbers selected by the end user.

Growing community of inventors

Bobbili, India

Hemanth Kumar Pinninti