Data Management for an Application with Multiple Operation Modes

Abstract

A method and system for managing an application with multiple modes are described. A device manager that manages a mobile device may monitor the mobile device. The device manager may detect that a first type of application that runs in a managed mode (or in multiple managed modes) and an unmanaged mode is installed on the mobile device. When the application is executed on the device, the application executes in accordance with the selected application mode, e.g., based on location, user, role, industry presence, or other predefined context.

1 . (canceled) 
     
     
         2 . A computer-implemented method comprising:
 receiving, from a client device, a connection to a server system;   assigning a first policy to the client device in response to the connection;   authenticating a user account based on identification information of a user; and   assigning a second policy to the client device after authenticating the user account.   
     
     
         3 . The computer-implemented method of  claim 2 , further comprising:
 prior to assigning the first policy, linking the user account to a first account with the client device in a first operation mode; and   prior to assigning the second policy, linking the user account to a second account with the client device in a second operation mode.   
     
     
         4 . The computer-implemented method of  claim 2 , wherein the first policy enforces restrictions associated with an unmanaged account. 
     
     
         5 . The computer-implemented method of  claim 2 , further comprising:
 binding the user account to a directory service associated with a plurality of access rights, wherein the user account corresponds to a network account provided by the directory service.   
     
     
         6 . The computer-implemented method of  claim 2 , wherein assigning the first policy enables the client device to access a first set of resource, and assigning the second policy enables the client device to access a second set of resource. 
     
     
         7 . The computer-implemented method of  claim 3 , wherein the first operation mode is a first managed mode managed by a device manager in accordance with the first policy, and the second operation mode is a second managed mode managed by the device manager in accordance with the second policy. 
     
     
         8 . The computer-implemented method of  claim 7 , wherein:
 linking the user account to the first account comprises providing access to a first managed account to data stored according to a first protocol, and   linking the user account to the second account comprises providing access to a second managed account to data stored according to a second protocol.   
     
     
         9 . The computer-implemented method of  claim 3 , wherein the first operation mode is an unmanaged mode associated with the first policy, and the second operation mode is a managed mode associated with the second policy. 
     
     
         10 . The computer-implemented method of  claim 2 , further comprising:
 monitoring the client device to detect that the client device is capable of running in a first operation mode and a second operation mode; and   provisioning a remote resource to communicate with the client device.   
     
     
         11 . The computer-implemented method of  claim 2 , further comprising:
 receiving a new request to store data associated with the client device; and   storing the data associated with the client device in a first operation mode according to a first protocol and with the client device in a second operation mode according to a second protocol.   
     
     
         12 . A computer-implemented method comprising:
 determining a first user access to a client device using a first user account;   sending, to the client device, a first policy associated with the first user account;   determining a second user access to the client device using a second user account; and   sending, to the client device, a second policy associated with the second user account.   
     
     
         13 . The computer-implemented method of  claim 12 , further comprising:
 prior to sending the first policy, linking the first user account to an unmanaged account with the client device in a first operation mode; and   prior to sending the second policy, linking the second user account to a managed account with the client device in a second operation mode.   
     
     
         14 . The computer-implemented method of  claim 13 , wherein the second policy comprises an encryption scheme. 
     
     
         15 . The computer-implemented method of  claim 12 , wherein at least one of the first user account and the second user account corresponds to a network account provided by a directory service. 
     
     
         16 . The computer-implemented method of  claim 12 , wherein:
 prior to sending the first policy, linking the first user account to a first managed account with the client device in a first operation mode; and   prior to sending the second policy, linking the second user account to a second managed account with the client device in a second operation mode.   
     
     
         17 . A server device, comprising:
 at least one processor;   a communication interface;   memory storing instructions that, when executed by the at least one processor, cause the server device to:
 receive, from a client device, a connection to the server device; 
 assign a first policy to the client device in response to the connection; 
 authenticate a user account based on identification information of a user; and 
 assign a second policy to the client device after authenticating the user account. 
   
     
     
         18 . The server device of  claim 17 , wherein the memory stores additional instructions that, when executed by the at least one processor, cause the server device to:
 prior to assigning the first policy, link the user account to a first account with the client device in a first operation mode; and   prior to assigning the second policy, link the user account to a second account with the client device in a second operation mode.   
     
     
         19 . The server device of  claim 18 , wherein the first operation mode is a first managed mode managed by a device manager in accordance with the first policy, and the second operation mode is a second managed mode managed by the device manager in accordance with the second policy. 
     
     
         20 . The server device of  claim 17 , wherein the first policy enforces restrictions associated with an unmanaged account. 
     
     
         21 . The server device of  claim 17 , wherein the memory stores additional instructions that, when executed by the at least one processor, cause the server device to:
 bind the user account to a directory service associated with a plurality of access rights, wherein the user account corresponds to a network account provided by the directory service.