Vmware, Inc.

Omnissa, LLC

Airwatch LLC

Ramanandan Nambannor Kunnath

Rohit Pradeep Shetty

Ramani Panchapakesan

Ashish Maan

Nikhil Jere

Erich Peter Stuntebeck

Kar-Fai Tse

Neelima Bojja

Sruthi Surendran

Rakesh Muraleedharan Nair

Kara Madhavan Bhattathiri

Erich Stuntebeck

Ian Ragsdale

Sharun Varghese Samuel

Karthikeyan Palanisamy

Pranav Ashok Shenoy

Dan Zeck

Shanti Kamichetty

Bala Subrahmanyam Gangu

Ajay Bhat

Tejas Thvar

Various examples are disclosed for a zero-trust authentication model for virtual desktop infrastructure (VDI) sessions. Upon user authentication of a VDI session, security posture assessments can be performed that analyze an ongoing or continuous state of the user, client device, or network conditions. Remedial measures or mitigation procedures can be performed to address potential non-compliance of the VDI session.

Zero-trust virtual desktop infrastructure authentication

Systems and methods are described for increasing web browser security on a user device managed by a device management system. In an example, the user device can use an unmanaged web browser to access secure enterprise content using a browser extension provided by the enterprise. When a user attempts to access secure content from an unmanaged browser, the device management system can communicate with the extension and a management application on the user device to authenticate the user and verify that the user device complies with certain policies. In one example, the device management system can include an extension recommendation engine that analyzes user browsing data and recommends browser extensions for the user. Based on policies, the device management system can recommend the extension to the user or force installation of the extension on the user device.

Securing web browsing on a managed user device

Disclosed are various embodiments for enabling an enrolled client device of a user to access an enterprise resource via a second enrolled client device of the user. One such method comprises launching, by the first client device, a peer-to-peer communication channel between the first client device and a second client device of the user that is online with the management server; transmitting, by the first client device, a peer-to-peer offline access mode request over the peer-to-peer communication channel for the first client device to be given access to an enterprise resource that is being managed by the management server, wherein the request includes instructions for the second client device to forward the request to the management server, wherein the request further includes enterprise resource identification and verification data showing that the first client device is in compliance with a compliancy policy of the management service.

Peer-to-peer offline access mode

Disclosed are various embodiments for delegating administrator tasks from a primary administrator to a secondary administrator. A secondary administrator can create a temporary user account and cause a temporary client device to be enrolled with a management service. The temporary user and/or temporary client device can be provided with access to certain enterprise resources to which the secondary administrator is empowered to grant access.

Sharing enterprise resources with temporary users

Disclosed are various embodiments for preventing unauthorized access to materials presented in a meeting room. In one example, a system comprises a computing device that is configured to identify a list of invited users for a meeting occurring in a meeting room and to detect a client device of an uninvited user that has entered the meeting room. An uninvited user notification is transmitted to a remote computing device. A suspension command is received for the meeting room from the remote computing device based on the uninvited user notification. The computing device is configured to enforce a suspension action on a meeting room device located in the meeting room based on the suspension command.

Systems and methods for managed meeting rooms

Disclosed herein are examples of systems and methods for synchronizing notification actions across multiple enrolled devices. A management service can receive from a first client device metadata associated with a notification posted on the first client device. The management service can receive from the first client device an indication of an action performed with respect to the notification. The management service can determine whether to propagate a new notification state to a second client device based at least in part on a type of the action and a current notification state associated with the second client device. In response to determining to propagate the new notification state to the second client device, the management service can provide to the second client device a command to change the current notification state to the new notification state.

Synchronization of notification actions across multiple enrolled devices

Disclosed are various embodiments of identifying a reusable email template for use in an email client based on a file attachment, an email recipient, and/or other factors, such as date and time. Various embodiments can identify an unsent email, the unsent email comprising at least a body and an attachment file, analyze the attachment file to determine one or more attachment categories, select an email template from a plurality of email templates based at least on the one or more attachment categories, and populate the body of the unsent email with the selected email template.

Smart email template generation based on attachments

Disclosed are various approaches for determining an optimal communication channel for contacting a user. In one such embodiment, application usage data corresponding to user interactions on available communication channels within an enterprise environment is obtained and used to generate a knowledge graph representing an individual user communicating over two or more of the available communication channels with other users. Thus, based on the knowledge graph, at least one optimal communication channel can be provided for contacting the individual user, wherein the at least one optimal communication channel is represented in the knowledge graph.

Enterprise communication channel assistance

Disclosed are various approaches for validating a relevance or an accuracy associated with an item being attached to a message or inserted inline with the text of the message or other type of document. An addition of the item (e.g., attachment, hyperlink, embedded image, etc.) to the message being generated by a sender can be detected. Message keywords associated with the message content and item keywords associated with the item content can be identified following an analysis of the message content and item content. The message keywords and item keywords can be compared to determine a likelihood of a mismatch between the item and the message. Upon determining a potential mismatch and prior to the message being sent to a recipient, a notification identifying the likelihood of the mismatch is presented to the sender.

Attachment and embedded object positioning validation

Disclosed herein are examples of systems and methods for tailoring the posting of notifications based on device activity status. A client device can collect activity data associated with the client device. The client device can provide the activity data to a management service. The client device can receive from the management service a command to disable a capability of an application installed on the client device to post notifications. The client device can cause the capability of the application to post notifications to be disabled.

Tailoring notification posting based on device activity status

Systems and methods are described for onboarding a new device to a blockchain secured network. A trusted device that is already enrolled on the blockchain can receive information from a new device. The new device can send an onboarding request to a server through a non-blockchain secured Application Programming Interface ('API'). The trusted device can send an onboarding request for the new device through a blockchain secured API. The server can receive the requests and match them. The server can authenticate the two devices and send a request to a blockchain consensus to add the new device to the blockchain with the trusted device as a referral. The blockchain consensus can add the new device to the blockchain and notify the server. The server can notify the new device, and the new device can begin communicating through the blockchain secured API or directly with other devices on the blockchain.

Secure onboarding of computing devices using blockchain

When a user attempts to access a first application installed on a user device, it can send an authentication request to an authentication server. The authentication server can assign a unique request token to the request and load a script to a component of the operating system executing on the user device that displays content within the first application. The script can cause a portal application to launch on the user device. The portal application can send a request to the authentication server on behalf of the user, including the unique request token and an access token stored by, or accessible to, the portal application. The authentication server can receive the request from the portal application and validate the request based on the unique request token and the access token. Upon validating the request, the authentication server can authenticate the user at the first application.

Systems and methods for improved authentication

Examples described herein include systems and methods for performing email synchronization in situations where mobile-device connectivity is lacking. The mobile device can send an SMS message to an email notification server requesting email synchronization and the email notification server can request synchronization with the email server associated with the user's email account. After receiving an email from the email server, the email notification server cart encrypt the email and break it into various chunks, with each chunk including a header having identifying information. The chunks can be transmitted as SMS messages to the mobile device. The email application can retrieve the SMS messages, decrypt them, and reconstruct the email. The email application can then display the email for the user.

Offline email synchronization

A first user device can receive a communication certificate associated with a user of the first user device. The communication certificate can allow the first user device to exchange certain information with a second user device that also possesses the communication certificate. The first user device can receive a notification. The first user device can also determine that a second user device associated with the user did not receive the notification. The first user device can initiate a direct connection with the second user device. The first use device can verify that the second device possesses the communication certificate. After verification, the first user device can send the notification to the second user device.

Growing community of inventors

Bengaluru, India

Ramanandan Nambannor Kunnath