Airwatch LLC

Other

Vmware, Inc.

Vijaykumar Bhat

Ramani Panchapakesan

Sachin Vas

Gangadhar Nittala

Sushilvas Vasavan

Ilanchezhian Kuppusamy

Disclosed are various examples for multi-party authentication and authentication. In one example, a user can gain access to secured data stored by a managed device based on the presence of the minimum quantity of other users within a threshold proximity of the user who desires access.

Multi-party authentication and authorization

Dynamic content redaction though the generation of redaction schemas associated with document, image, media, or other data files is described. A redaction schema can include at least one range of content in a data file to be concealed for a user, a group of users, or operating parameters of various devices, for example. When the data file is opened for display on a device, the redaction schema can be parsed to identify whether masking objects should be added to a masking layer for overlay upon or above the content displayed. The masking layer can be generated based on the redaction schema, a user of the device, or operating parameters of the device, for example. Masking objects in the masking layer can conceal one or more ranges of the content in a data file from view or based on users or operating parameters of various devices.

Dynamic content redaction

Disclosed are various examples for specifying portions of content files that can be stored on a client device. A content file stored in a remote storage area can be segmented into content fragments. A manifest file that specifies which portions of the content file correspond to content fragments can also be generated. The manifest file and content fragments can be packaged into a content package file that is stored on a client device and interpreted by a content proxy server.

Generating content fragments for content distribution

Disclosed are various examples of systems and methods for transferring data between applications executing in sandboxed environments. In one example, a first application is in a first sandbox. A request for access to data is transmitted from the first application to a second application in a second sandbox. The data is stored in the second sandbox. The request is transmitted using a sandbox communications framework. The data is received using the sandbox communications framework. The data is encrypted. An encryption key is retrieved from an access-restricted data store.

Controlled access to data in a sandboxed environment

Disclosed are various examples for serving certain portions of a content file from a server and accessing other portions of the content file from a local storage on a client device. A content proxy can extract a manifest file from a content package, and determine that a content file is associated with the manifest file. Content fragments associated with the content file can be identified and stored in client device storage. Content fragments that are not stored on the client device can be requested from the server. The content proxy can provide a URL that references the content file through which the content file can be served.

Disclosed are various examples of systems and methods for transferring data between applications executing in sandboxed environments. An application executing on a computing device in a sandbox provided by an operating system is identified. A key-value pair is retrieved from an access-restricted data store provided by the operating system, wherein the key-value pair comprises a timestamp and an application identifier. The application identifier is compared with the application. Data is sent to the application based at least in part on the application identifier matching an identification of the application and the timestamp specifying a point in time within a predetermined period of time.

Disclosed are various examples for multi-party authentication and authentication. In one example, a user who forgets a password can gain access to secured data stored by a managed device by way of an authorization by one or more other users. This access can be granted even if the managed device is in an off-line mode or if a management server cannot be reached. In another example, access to secured data can depend upon authorization by a minimum quantity of other users. The authorization can involve an explicit approval or disapproval. Alternatively, the authorization can correspond to the presence of the minimum quantity of other users within a threshold proximity of the user who desires access.

Growing community of inventors

Bengaluru, India

Vijaykumar Bhat