Policy-based application management

摘要

Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

主权项

1. A method for managing applications having at least two execution modes, comprising:
receiving, by an electronic mobile device, a managed application from an application server during a first communication, the managed application being constructed to operate in accordance with a first set of one or more policy files; receiving, by the device, the first set of one or more policy files from the application server during a second communication which is different than the first communication, the first set of one or more policy files being stored on the electronic mobile device separately from the managed application; determining a first industry type for an operational environment of the electronic mobile device from a plurality of different industry types; selecting the first set of one or more policy files based on the determined first industry type; running, by the processor, the managed application on the mobile device in a first execution mode, the managed application operating in accordance with the first set of one or more policy files in the first execution mode while the electronic mobile device is within the operational environment having the first industry type; and running, by the processor, the managed application on the mobile device in a second execution mode different from said first execution mode when the electronic mobile device is not within the operational environment having the first industry type, the managed application operating in accordance with a second set of policy files in the second execution mode, wherein the second set of policy files is different from the first set policy files.