Blackberry Corporation

Malikie Innovations Limited

Arxan Technologies, Inc.

Apperian, Inc.

Jeremy Debate

James Seibel

Kevin LaFlamme

Aaron A Alexander

Fred Koschara

Reinhard Schumak

Ricardo Villamil

James P Seibel

A trusted execution environment on a computing device within an enterprise, whether owned by the enterprise or the employee/user, allows invocation of trusted enterprise applications without hindering external or non-enterprise apps from running on the same computing device. Each of the trusted apps can interact with other trusted apps on the same enterprise computing device in a trusted manner such that other apps or untrusted network connections are prevented for access to the trusted apps. The computing device, however, also executes non enterprise applications which operate independently of the enterprise apps in the same address space using the same unmodified operating system as the enterprise apps on the computing device. The trusted execution environment therefore restricts interprocess communication to be only within the set of enterprise apps and also permits unimpeded operation of other apps under the same OTS (off the shelf) operating system.

Trusted execution environment

A network environment can include a proxy management server. The proxy management server can have access to multiple disparately located MDM servers. A mobile device receives configuration information including a network address of the proxy management server. The mobile device stores the network address of the proxy management server. In response to receiving a management notification such as notification that one or more of the multiple MDM servers has management information (e.g., commands, data, etc., to be executed by the mobile device) available for the mobile device, the mobile device utilizes the stored network address to communicate with the proxy management server. The proxy management server checks availability of the management information from multiple disparately located MDM management servers. The proxy management server retrieves the management information from the management servers and forwards it to the mobile device.

Management of mobile devices in a network environment

A multi-component control technique includes a first component and a second component. The first component is supplemental code or evaluation engine as specified by a modification to a set of received originally compiled executable code. The modification to the original executable code ensures that, upon execution, the supplemental code (such as an evaluation engine) as specified by the modification is executed upon initial instantiation or use of the application. The second component is a retrievable and executable policy such as a set of rules fetched and used by the supplemental code to control the functionality supported by the originally compiled executable code of the corresponding application. An application administrator can produce the retrievable policy to control functionality of the originally compiled executable code.

Modification of compiled applications and application management using retrievable policies

Growing community of inventors

Boston, MA, United States of America

Jeremy Debate