Multi-persona management and devices

Abstract

Disclosed are various examples for multi-persona management on a client device. In one example, a client device can be configured to maintain multiple personas for a single user where each of the personas includes a unique configuration of the client device. A first one of the personas can include an enterprise persona while a second one of the personas can include a personal persona. Different methods of authentication can result in the client device toggling between the enterprise persona and the personal persona where the client device is managed by a device management service, for example, when the client device is configured in accordance with the enterprise persona.

Therefore, the following is claimed: 
     
         1 . A non-transitory computer-readable medium for logging a single user into one of a plurality of personas on a client device comprising program instructions that, when executed by at least one hardware processor of the client device, cause the client device to:
 maintain the plurality of personas for the single user on the client device, each of the plurality of personas comprising a unique configuration of the client device, wherein a first one of the plurality of personas comprises an enterprise persona and a second one of the plurality of personas comprises a personal persona;   identify an authentication being made on the client device by the single user using one of a first authentication method or a second authentication method;   in response to the first authentication method being used in the authentication, toggle the client device in accordance with the enterprise persona, wherein the client device is managed by a device management service when the client device is toggled in accordance with the enterprise persona; and   in response to the second authentication method being used in the authentication, toggle the client device in accordance with the personal persona, wherein the client device is not managed by the device management service when the client device is toggled in accordance with the personal persona.   
     
     
         2 . The non-transitory computer-readable medium of  claim 1 , wherein maintaining the plurality of personas for the single user on the client device further comprises maintaining a first memory partition for the enterprise persona and a second memory partition for the personal persona, wherein the first memory partition is separate from the second memory partition. 
     
     
         3 . The non-transitory computer-readable medium of  claim 1 , wherein:
 the first authentication method comprises scanning a first finger of the single user using a fingerprint reader communicatively coupled to the client device; and   the second authentication method comprises scanning a second finger of the single user using the fingerprint reader communicatively coupled to the client device, the second finger being different than the first finger.   
     
     
         4 . The non-transitory computer-readable medium of  claim 1 , wherein:
 the first authentication method comprises detecting entry of a first password provided by the single user in association with the client device; and   the second authentication method comprises detecting entry of a second password provided by the single user in association with the client device, the second password being different than the first password.   
     
     
         5 . The non-transitory computer-readable medium of  claim 1 , wherein the unique configuration comprises at least one of: a setting, a policy, a rule, or an attribute customized in association with a user environment. 
     
     
         6 . The non-transitory computer-readable medium of  claim 1 , wherein the enterprise persona or the personal persona comprises a virtual separation of at least one hardware component of the client device, wherein the at least one hardware component comprises a hardware processor, a battery, or memory. 
     
     
         7 . The non-transitory computer-readable medium of  claim 1 , wherein the at least one application executable in a client device further comprises program instructions that, when executed by the at least one hardware processor of the client device, cause the client device to limit access to content for at least the enterprise persona based at least in part on a time, a location of the client device, a presence of another device, a software version, or a required component of software. 
     
     
         8 . A method for logging a single user into one of a plurality of personas on a client device, comprising:
 maintaining the plurality of personas for the single user on the client device, each of the plurality of personas comprising a unique configuration of the client device, wherein a first one of the plurality of personas comprises an enterprise persona and a second one of the plurality of personas comprises a personal persona;   identifying an authentication being made on the client device by the single user using one of a first authentication method or a second authentication method;   in response to the first authentication method being used in the authentication, toggling the client device in accordance with the enterprise persona, wherein the client device is managed by a device management service when the client device is toggled in accordance with the enterprise persona; and   in response to the second authentication method being used in the authentication, toggling the client device in accordance with the personal persona, wherein the client device is not managed by the device management service when the client device is toggled in accordance with the personal persona.   
     
     
         9 . The method of  claim 8 , wherein maintaining the plurality of personas for the single user on the client device further comprises maintaining a first memory partition for the enterprise persona and a second memory partition for the personal persona, wherein the first memory partition is separate from the second memory partition. 
     
     
         10 . The method of  claim 8 , wherein:
 the first authentication method comprises scanning a first finger of the single user using a fingerprint reader communicatively coupled to the client device; and   the second authentication method comprises scanning a second finger of the single user using the fingerprint reader communicatively coupled to the client device, the second finger being different than the first finger.   
     
     
         11 . The method of  claim 8 , wherein:
 the first authentication method comprises detecting entry of a first personal identification number provided by the single user in association with the client device; and   the second authentication method comprises detecting entry of a second personal identification number provided by the single user in association with the client device, the second personal identification number being different than the first personal identification number.   
     
     
         12 . The method of  claim 8 , wherein the unique configuration comprises at least one of: a setting, a policy, a rule, or an attribute customized in association with a user environment. 
     
     
         13 . The method of  claim 8 , wherein the enterprise persona or the personal persona comprises a virtual separation of at least one hardware component of the client device, wherein the at least one hardware component comprises a hardware processor, a battery, or memory. 
     
     
         14 . The method of  claim 8 , further comprising limiting access to content for at least the enterprise persona based at least in part on a time, a location of the client device, a presence of another device, a software version, or a required component of software. 
     
     
         15 . A system for logging a single user into one of a plurality of personas, comprising:
 a client device comprising at least one hardware processor and in data communication with a device management service over a network;   program instructions that, when executed by the client device, cause the client device to:
 maintain the plurality of personas for the single user on the client device, each of the plurality of personas comprising a unique configuration of the client device, wherein a first one of the plurality of personas comprises an enterprise persona and a second one of the plurality of personas comprises a personal persona; 
 identify an authentication being made on the client device by the single user using one of a first authentication method or a second authentication method; 
 in response to the first authentication method being used in the authentication, toggle the client device in accordance with the enterprise persona, wherein the client device is managed by the device management service when the client device is toggled in accordance with the enterprise persona; and 
 in response to the second authentication method being used in the authentication, toggle the client device in accordance with the personal persona, wherein the client device is not managed by the device management service when the client device is toggled in accordance with the personal persona. 
   
     
     
         16 . The system of  claim 15 , wherein maintaining the plurality of personas for the single user on the client device further comprises maintaining a first memory partition for the enterprise persona and a second memory partition for the personal persona, wherein the first memory partition is separate from the second memory partition. 
     
     
         17 . The system of  claim 15 , wherein:
 the first authentication method comprises scanning a first finger of the single user using a fingerprint reader communicatively coupled to the client device; and   the second authentication method comprises scanning a second finger of the single user using the fingerprint reader communicatively coupled to the client device, the second finger being different than the first finger.   
     
     
         18 . The system of  claim 15 , wherein:
 the first authentication method comprises detecting entry of a first personal identification number provided by the single user in association with the client device; and   the second authentication method comprises detecting entry of a second personal identification number provided by the single user in association with the client device, the second personal identification number being different than the first personal identification number.   
     
     
         19 . The system of  claim 15 , wherein the unique configuration comprises at least one of: a setting, a policy, a rule, or an attribute customized in association with a user environment. 
     
     
         20 . The system of  claim 15 , wherein the enterprise persona or the personal persona comprises a virtual separation of at least one hardware component of the client device, wherein the at least one hardware component comprises a hardware processor, a battery, or memory.