Blackberry Corporation

2236008 Ontario Limited

Kenneth Cyril Schneider

Christopher Lyle Bender

Geordon Thomas Ferguson

Oliver Whitehouse

Alberto Daniel Zubiri

Christopher William Lewis Hobbs

Lenny Kwok-Ming Hon

Bruno Richard Preiss

Michael Nickola Slavitch

Michele Bethany Boland

Eugene Chin

Joseph Daniel Burjoski

Qiusheng Wang

Gurdev S Rai

Girish Kumar Sharma

David Macklem

Keith Alwyn Watson

Peter L Mitchelmore

Jeffrey John Holleran

Christopher William Hobbs

In some implementations, a method of managing access to resources in a single device including receiving, from a first resource assigned to a first perimeter, a request to access a second resource assigned to a second perimeter different from the first perimeter. The single device includes the first perimeter and the second perimeter. Whether access to the second resource is prohibited is determined based on a management policy for the first perimeter. The management policy defining one or more rules for accessing resources assigned to the second perimeter including the second resource.

Managing access to resources

A system and method of assigning an identifier to an entity operating within a mobile device ecosystem including a domain are provided. The method comprises: obtaining an identifier of the entity which uniquely identifies the entity within the domain, the identifier of the entity including length information identifying the length of identifier of the entity; obtaining an identifier of the domain within which the identifier of the entity is unique; and combining the identifier of the entity with the identifier of the domain to create a globally unique identifier of the entity which is globally unique in the mobile device ecosystem.

Method and system for identifying an entity in a mobile device ecosystem

In some implementations, a method for managing data in a user device includes pushing first metadata for a first resource in a first perimeter to a service external to the first perimeter. The first perimeter is configured to prevent external resources from accessing resources in the first perimeter. Second metadata for a second resource in a second perimeter is pushed to the external service. The external service is external to the second perimeter, the second perimeter being configured to prevent external resources from accessing resources in the second perimeter. Information is presented to the user based on a combination of the first metadata and the second metadata.

Presenting metadata from multiple perimeters

Managing cross perimeter access

An administration server of an administration service assigns attributes to objects by a plug-in of the administration service. The plug-in implements a method of a functionality set and the method is callable by the administration service to perform the assigning. Additionally or alternatively, the administration server triggers a reconciliation event by changing the assignment of an attribute of the users that comprise objects of plug-ins; determines a scope of the users and which objects are affected by changing the assignment; and reconciles conflicting assignments. Additionally or alternatively, the administration server adds tasks by the plug-ins to a job created by the plug-ins with the tasks performing the assigning; and removes tasks from the job to optimize it.

Systems and methods for mobility server administration

An apparatus, and an associated method, automatically calculates and assigns policy settings to be implemented at mobile stations. Information is collected relating to groups, such as groups within an enterprise, to which users of the mobile stations are members. Policy-setting conflicts between different groups, if the user is a member of more than one group, are reconciled, and the policy settings that are assigned are of reconciled settings.

Apparatus, and associated method, for assigning policy settings to a mobile station

Methods and systems for third party client authentication of a client. A method includes displaying a user interface on a display of the client, the user interface including an option to select a supported credential type of a third party authentication server, receiving a command selecting the supported credential type, and sending credential information and the selected supported credential type to an authentication server for third party authentication by the third party authentication server. The third party authentication server may support a token-based authentication protocol for implementing single sign on (SSO).

Method and system for third party client authentication

Growing community of inventors

Blue Mountains, Canada

Kenneth Cyril Schneider