Oracle International Corporation

Ivanti, Inc.

Mobile Iron, Inc.

Mohammad Aamir

Atta Ur Rehman

Suresh Kumar Batchu

Venkata Nambula

Mohamad Raja Gani

A method of establishing communication with a second device via wireless communication channel that is not natively secure. The method includes performing mutual authentication between the first and second devices by receiving via the communication interface from the second device a FIDO public certificate of the second device and using a FIDO public key of the second device. The FIDO public key of the second device having been registered by the second device with a FIDO relying party in connection with a user identity associated with both the first device and the second device. The FIDO public key of the second device having been fetched by the first device from the FIDO relying party in connection with FIDO registration of the first device with the FIDO relying party in connection with the user identity. The method may include negotiating a shared secret used to engage in ongoing communication.

Secure communication between non-paired devices registered to the same user

Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Obtaining device posture of a third party managed device

Techniques are provided for establishing a secure exchange of data between containerized applications. A method can include registering, by a device, a first containerized application on the device with an access server, registering, by the device, a second containerized application on the device with the access server, verifying that the first containerized application and the second containerized application are configured to exchange data, and exchanging data between the first containerized application and the second containerized application registered with the access server.

Establishing trust between containers

Methods, devices, and systems are described to modify the life cycle of a Google Android&#xae; application, in its application manifest file and byte code, such that the execution of the application can be controlled via policies and security governed by a workspace application installed on an Android-based device. Dummy wrapper classes are inserted into the byte code for network and I/O system calls that call security code before calling the original classes.

Growing community of inventors

San Jose, CA, United States of America

Mohammad Aamir