Management of Unmanaged User Accounts and Tasks in a Multi-Account Mobile Application

Abstract

Methods, systems, computer-readable media, and apparatuses for providing mobile application management (MAM) functionalities are presented. In some embodiments, a mobile device may initialize a partially managed application associated with a first managed user account and an unmanaged user account. The mobile device may execute first managed tasks associated with the first managed user account in accordance with a first set of MAM policies provided by a first MAM service provider. The mobile device may execute unmanaged tasks associated with the unmanaged account independent of the first set of MAM policies. In some embodiments, the mobile device may initialize the multi-account managed application associated with a second managed user account.

What is claimed is: 
     
         1 . A method comprising:
 receiving, by a client agent of a user device, from an enterprise gateway, first management information associated with an enterprise account accessed via an application;   configuring, via the client agent, the application using first management information associated with the enterprise account, wherein the first management information specifies access restrictions for providing restricted access to first information associated with the enterprise account;   providing the restricted access, via the application, in accordance with the access restrictions, to the first information associated with the enterprise account; and   providing unrestricted access, via the application, to second information associated with a personal account accessed via the application.   
     
     
         2 . The method of  claim 1 , wherein the access restrictions prevent one or more of cutting, copying, or pasting of the first information. 
     
     
         3 . The method of  claim 1 , wherein the access restrictions prevent editing of the first information. 
     
     
         4 . The method of  claim 1 , wherein the access restrictions prevent execution of a task associated with accessing the first information, further comprising:
 determining a second task that is semantically equivalent to the prevented task, wherein the second task is associated with accessing the second information; and   permitting execution of the second task.   
     
     
         5 . The method of  claim 1 , wherein the access restrictions cause the user device to automatically delete the first information from the user device without deleting the second information from the user device. 
     
     
         6 . The method of  claim 1 , further comprising:
 determining device state information associated with the enterprise account; and   based on the device state information, automatically switching from a display of the second information to a display of the first information.   
     
     
         7 . The method of  claim 6 , wherein the device state information comprises one or more of location information or network connection information. 
     
     
         8 . An apparatus comprising
 one or more processors; and   memory storing instructions that, when executed by the one or more processors, cause the apparatus to perform:
 receiving, by a client agent on the apparatus, from an enterprise gateway, first management information associated with an enterprise account accessed via an application on the apparatus; 
 configuring, via the client agent, the application using first management information associated with the enterprise account, wherein the first management information specifies access restrictions for providing restricted access to first information associated with the enterprise account; 
 providing the restricted access, via the application, in accordance with the access restrictions, to the first information associated with the enterprise account; and 
 providing unrestricted access, via the application, to second information associated with a personal account accessed via the application. 
   
     
     
         9 . The apparatus of  claim 8 , wherein the access restrictions prevent one or more of cutting, copying, or pasting of the first information. 
     
     
         10 . The apparatus of  claim 8 , wherein the access restrictions prevent editing of the first information. 
     
     
         11 . The apparatus of  claim 8 , wherein the access restrictions prevent execution of a task associated with accessing the first information, wherein the instructions, when executed by the one or more processors, further cause the apparatus to perform:
 determining a second task that is semantically equivalent to the prevented task, wherein the second task is associated with accessing the second information; and   permitting execution of the second task.   
     
     
         12 . The apparatus of  claim 8 , wherein the access restrictions cause the apparatus to automatically delete the first information from the apparatus without deleting the second information from the apparatus. 
     
     
         13 . The apparatus of  claim 8 , wherein the instructions, when executed by the one or more processors, further cause the apparatus to perform:
 determining device state information associated with the enterprise account; and   based on the device state information, automatically switching from a display of the second information to a display of the first information.   
     
     
         14 . The apparatus of  claim 13 , wherein the device state information comprises one or more of location information or network connection information. 
     
     
         15 . One or more non-transitory computer-readable media storing instructions that, when executed by a device, cause the device to perform:
 receiving, by a client agent, from an enterprise gateway, first management information associated with an enterprise account accessed via an application;   configuring, via the client agent, the application using first management information associated with the enterprise account, wherein the first management information specifies access restrictions for providing restricted access to first information associated with the enterprise account;   providing the restricted access, via the application, in accordance with the access restrictions, to the first information associated with the enterprise account; and   providing unrestricted access, via the application, to second information associated with a personal account accessed via the application.   
     
     
         16 . The one or more non-transitory computer-readable media of  claim 15 , wherein the access restrictions prevent one or more of cutting, copying, or pasting of the first information. 
     
     
         17 . The one or more non-transitory computer-readable media of  claim 15 , wherein the access restrictions prevent editing of the first information. 
     
     
         18 . The one or more non-transitory computer-readable media of  claim 15 , wherein the access restrictions prevent execution of a task associated with accessing the first information, wherein the instructions, when executed, further cause the device to perform:
 determining a second task that is semantically equivalent to the prevented task, wherein the second task is associated with accessing the second information; and   permitting execution of the second task.   
     
     
         19 . The one or more non-transitory computer-readable media of  claim 15 , wherein the access restrictions cause the device to automatically delete the first information without deleting the second information. 
     
     
         20 . The one or more non-transitory computer-readable media of  claim 15 , wherein the instructions, when executed, further cause the device to perform:
 determining device state information associated with the enterprise account; and   based on the device state information, automatically switching from a display of the second information to a display of the first information.