MOBILE ENTERPRISE SERVER AND CLIENT DEVICE INTERACTION

摘要

A system includes an application server that hosts a plurality of enterprise applications and stores enterprise data associated with each of the enterprise applications. A client device executes a client application that can provide access to each of the enterprise applications. The client application includes a memory protection engine that allocates a first memory location for the enterprise data transmitted to the client device so the enterprise data is accessible to each of the plurality of enterprise applications through the client application. A second allocated memory location is allocated for non-enterprise data. A mobile enterprise server transmits the enterprise data to the client device.

主权项

1. A system comprising:
an application server configured to host a plurality of enterprise applications and store enterprise data associated with each enterprise application; a first client device configured to execute a client application providing access to the plurality of enterprise applications, wherein the client application includes a memory protection engine configured to allocate a first memory location for the enterprise data transmitted to the first client device and accessible to each of the plurality of enterprise applications through the client application and wherein the client application is configured to allocate a second memory location for non-enterprise data stored on the first client device; and a mobile enterprise server in communication with the first client device and the application server, wherein the mobile enterprise server is configured to transmit the enterprise data to the first client device, wherein at least one of:
a) a second client device is in communication with the mobile enterprise server, and the mobile enterprise server is configured to:
i) store a plurality of security policies, including a first security policy for the first client device and a second security policy for the second client device, and transmit enterprise data to the first client device in accordance with the first security policy and to the second client device in accordance with the second security policy, orii) delete the enterprise data on, and lock, the first client device and the second client device in response to a security breach on the second client device,b) the client application incorporates a data wiping engine configured to selectively delete the enterprise data from the first client device, by encrypting and overwriting the enterprise data at least a predetermined number of times, in accordance with at least one of a user request, a security policy, or a state of the first client device, orc) the client application includes a locking engine configured to:
monitor usage of the first client device after a previous user has been authorized to use the first client device,determine whether a present user of the first client device is the previous user, andlock the first client device if the present user is different from the previous user.