Mobile Iron, Inc.

Ivanti, Inc.

Pronto Technology, Inc.

Suresh Kumar Batchu

Mansu Kim

Joshua Sirota

Jesse Wagner Lindeman

Ojas Udayan Rege

Ajay Kumar Mishra

Timothy Eric Danford

Thomas Edward Wagner

Robert Bates Tinker

Benjamin Markines

Jian Liu

Mohammad Aamir

Ivan Golovenko

Ratnarekha Singamsetty

Manoj N Kumar

Joshua Glenn Broch

Josh Glenn Broch

Swaroop Kolli

Techniques to provide secure access to a service via an unmanaged device are disclosed. In various embodiments, a request from an unmanaged device to access a service is received via a communication interface. A user associated with the request is authenticated at least in part by prompting the user to use a managed device associated with the user to interact with data displayed at the unmanaged device. Access to the service is provided via the unmanaged device at least in part via a virtual browser instance running on a secure node and configured to access the service on behalf of the user and stream data associated with the service to the unmanaged device.

Secure access via remote browser isolation

Techniques are disclosed to obtain device posture of a third party managed device. In various embodiments, a unique identifier of the third party managed device is embedded in a registration communication sent from a third party managed device to an access node associated with a first party management entity. The registration communication is sent from the third party managed device to the access node. The access node is configured to store data associating the unique identifier with the third party managed device, and to use the unique identifier to obtain from the third party management entity device posture information for the third party managed device.

Obtaining device posture of a third party managed device

Techniques are disclosed to provide application extension-based authentication on a device under third party management. In various embodiments, a unique identifier associated with an authentication app is stored on the device. An app extension framework that enables a native app to request, via an app extension associated with the authentication app, access to a service with which the native app is associated is provided. The authentication app is configured to use the unique identifier to determine a security posture of the device and to grant or deny access to the service based at least in part on the security posture of the device.

Application extension-based authentication on a device under third party management

Content delivery optimization and recommendation is disclosed. A manner of delivering a content object to a mobile device may be determined at least in part by applying a behavior model associated with a user of the mobile device to attributes associated with the content object. The behavior model may be generated based at least in part on observed activities of the user. The content object is provided to the mobile device in the determined manner.

Content delivery optimization

In an embodiment, a process for data enrichment and matching includes obtaining a first dataset associated with a first user from a first data source, where the first dataset includes records from a structured data source, and obtaining a corresponding second dataset associated with a second user. The process includes enriching at least one of the first dataset and the second dataset. The process includes merging the first dataset and the second dataset including by matching a set of attributes based at least in part on matching corresponding attributes, wherein at least one of the first dataset and the second dataset has been enriched. The process includes outputting the merged data.

Data enrichment and matching

Techniques to manage mobile devices are disclosed. In various embodiments, a request to perform a management action with respect to a mobile device is received from a mobile device management (MDM) authority. A scope of authority of the MDM authority with respect to the mobile device is determined. The management action is caused to be performed with respect to the mobile device based at least in part on the determined scope of authority of the MDM authority with respect to the mobile device.

Mobile device management broker

Techniques to manage applications, such as mobile apps, across multiple management domains are disclosed. In various embodiments, a set of one or more application management policies to be enforced with respect to a mobile device is received from a management entity to which a scope of authority to manage applications with respect to the mobile device has been delegated. A management agent on the mobile device is used to enforce the one or more application management policies with respect to applications and application data that are within the scope of authority delegated to the management entity.

Managing applications across multiple management domains

Techniques to establish a communication system between an administrative node, such as a remote help desk, and an instance of a managed mobile app running on a mobile device are disclosed. In various embodiments, an indication is received to establish a help desk session associated with a mobile device. A help desk library embedded in mobile app code comprising a managed mobile app installed on the mobile device is used to provide the help desk session. The help desk library is configured to provide in real time to a help desk system external to the mobile device mobile app data associated with the managed mobile app while the managed mobile app is running on the mobile device.

Application help desk

A mobile device traffic splicer is disclosed. In various embodiments, a network communication associated with a destination is received from a mobile device. A stored routing data associated with the mobile device is used to determine, based at least in part on the destination, to redirect the network communication to a proxy associated with the destination. The network communication is sent to the proxy associated with the destination. In various embodiments, one or both of metering network traffic by destination and/or domain and filtering network communications and/or portions thereof based on the destination and/or domain may be performed.

Mobile device traffic splitter

Location, time, and other contextual mobile application policies are disclosed. Access state information associated with a managed set of applications may be determined based at least in part on environmental context data associated with a mobile device and one or more contextual policies associated with the managed set of applications. The access state information may be provided to at least one application included in the managed set of applications, wherein at least one application in the managed set of applications is configured to use the access state information to regulate use of the application in a manner required by the one or more contextual policies.

Location and time based mobile app policies

A mobile device management system that monitors the security state of one or more mobile devices and sets indicators related to such security state. Enterprise network applications, such as an email application, can access the security state information when making access control decisions with respect to a given mobile device.

Mobile posture-based policy, remediation and access control for enterprise resources

Mobile device traffic management is disclosed. Information including a traffic management policy to be applied to data transferred between a mobile device and a node is received from a device management server. The device management server determines the traffic management policy based at least in part on roaming state information received from the mobile device. Data transferred between the mobile device and the node is processed based at least in part on the traffic management policy.

Growing community of inventors

Milpitas, CA, United States of America

Suresh Kumar Batchu