Airwatch LLC

Vmware, Inc.

Omnissa, LLC

Kar Fai Tse

Erich Peter Stuntebeck

Chen Lu

Chaoting Xuan

Ravish Chawla

Jianling Wang

Alan James Dabbiere

Eric Peter Stuntebeck

Lu Liu

Jinxing Hu

Erich Stuntebeck

Shengbo Teng

Ketan Bhardwaj

Lina Li

Various examples are disclosed for predictive allocation of computing resources based on the predicted location of a user. A computing environment can generate a predictive usage model that predicts a location of a user and allocate computing resources, such as VDI sessions or VMs, to a host device that optimizes latency to the predicted location.

Allocating computing resources based on properties associated with location

Disclosed are examples of embedding watermarks in a VDI session of a user. The watermark is based upon the user's identity and can be embedded into the VDI session to aid in the identification of data that is compromised from the VDI session. The watermark can be extracted from an image without needing the original image for extraction purposes.

Watermarking in a virtual desktop infrastructure environment

Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. A user account can be implicitly authenticated based on proximity of a client device to the voice assistant device. An association between the user account and the voice assistant device can then be created.

Proximity based authentication of a user through a voice assistant device

Disclosed are various embodiments for restricting usage of a mobile device when a user is driving a vehicle. In one embodiment, it is determined that a mobile device is in use by a driver of an active vehicle. A functionality of the mobile device is then restricted based at least in part on determining that the mobile device is in use by the driver of the active vehicle. For example, a touch screen of the mobile device may be disabled, and the use of a hands-free interface may be made mandatory.

Restrictions on mobile device usage when driving a vehicle

Systems and methods are included for detecting driving based on user-specific models for driving detection, and restricting access to an application of the user device while a user is driving. A management agent installed on the user device can collect data from sensors in a user device and provide the data to a management server, which can build a user-specific model for driving detection for that user. The management agent can then use that user-specific model for detecting when the user is driving. When the agent determines that the user is driving, it can enforce a driving policy that limits access to applications and delay or modify notifications generated by applications.

Detecting driving and modifying access to a user device

Disclosed are various examples for facilitating network speed testing on behalf of a client device that is in communication with a management service. A network testing profile can be obtained which specifies a network testing schedule for execution of a network test with a network testing endpoint. The client device can generate a test result associated with the network testing schedule based upon an exchange of at least one test packet with the network testing endpoint. In an instance in which it is determined that a network speed between the client device and the network testing endpoint fails to meet a threshold, an amount of network bandwidth usage by the client device can be reduced.

Network speed detection

Disclosed are various approaches for implementing an application authentication wrapper. An authentication request, such as a Kerberos request, is created for authenticating the computing device. The authentication request is encrypted to generate an encrypted authentication request. The encrypted authentication request is then forwarded to a reverse proxy server. An encrypted authentication response is received from the reverse proxy server. The encrypted authentication response, such as a Kerberos response, is then decrypted to generate a corresponding authentication response, which is then forwarded to the computing device that generated the authentication request.

Application authentication wrapper

Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one embodiment, among others, a system includes a client device and program instructions executable in the client device. The program instructions, when executed, cause the client device to identify an action that stores an image in a memory associated with the client device, where the action is executed by way of the client computing device. The program instructions also cause the client device to generate image tags that describe the image. The client device can determine that the image has enterprise content based at least in part on the image tags and perform an enterprise action on the image. The enterprise action can be based on an enterprise category associated with the image tags and an enterprise policy.

Managing camera actions

Disclosed are various examples for facilitating network speed testing on behalf of a client device that is associated with an enterprise. In a client device that can be a managed device managed by a management service, a network testing profile can be obtained which specifies a testing schedule as well as a network testing endpoint with which network testing can be conducted. Results of the network speed test can be transmitted to the management service, which can determine if the network speed implicates a compliance rule associated with the client device or an enterprise with which the client device is associated.

Disclosed are various embodiments relating to managed clones of applications. In one embodiment, an application is received. If it is determined that the application should be managed, a managed clone of the application is generated. The managed clone of the application is configured for coexistence along with the application upon a client device under management. The managed clone of the application may then be deployed to the client device under management.

Managed clone applications

Systems herein include thin clients that operate with managed profile-based virtual machines. This can allow users to utilize personal user devices in an enterprise environment without subjecting sensitive enterprise credentials to the user device. A management server can determine a profile associated with the user device. Based on the profile, a virtual machine can be instantiated at a thin server, remotely from the thin client. The profile-specific virtual machine can include a particular guest operating system, guest applications, security features, or functionality. The instance of the virtual machine can communicate graphics information from a guest application to the thin client, and the thin client can communicate user interface events to the instance for controlling the guest application.

Growing community of inventors

Peachtree Corners, GA, United States of America

Kar Fai Tse