Newness and distinctiveness is claimed in the features of ornamentation as shown inside the broken line circle in the accompanying representation.

Display screen or portion thereof with graphical user interface

Improved techniques for managing enterprise applications on mobile devices are described herein. Each enterprise mobile application running on the mobile device has an associated policy through which it interacts with its environment. The policy selectively blocks or allows activities involving the enterprise application in accordance with rules established by the enterprise. Together, the enterprise applications running on the mobile device form a set of managed applications. Managed applications are typically allowed to exchange data with other managed applications, but are blocked from exchanging data with other applications, such as the user's own personal applications. Policies may be defined to manage data sharing, mobile resource management, application specific information, networking and data access solutions, device cloud and transfer, dual mode application software, enterprise app store access, and virtualized application and resources, among other things.

Policy-Based Application Management

In one aspect, the present invention facilitates the investigation of networks of criminals, by gathering associations between phone numbers, the names of persons reached at those phone numbers, and voice print data. In another aspect the invention automatically detects phone calls from a prison where the voiceprint of the person called matches the voiceprint of a past inmate. In another aspect the invention detects identity scams in prisons, by monitoring for known voice characteristics of likely imposters on phone calls made by prisoners. In another aspect, the invention automatically does speech-to-text conversion of phone numbers spoken within a predetermined time of detecting data indicative of a three-way call event while monitoring a phone call from a prison inmate. In another aspect, the invention automatically thwarts attempts of prison inmates to use re-dialing services. In another aspect, the invention automatically tags audio data retrieved from a database, by steganographically encoding into the audio data the identity of the official retrieving the audio data.

Multi-party conversation analyzer & logger

A system is disclosed that includes components and features for enabling enterprise users to securely access enterprise resources (documents, data, application servers, etc.) using their mobile devices. An enterprise can use some or all components of the system to, for example, securely but flexibly implement a BYOD (bring your own device) policy in which users can run both personal applications and secure enterprise applications on their mobile devices. The system may, for example, implement policies for controlling mobile device accesses to enterprise resources based on device attributes (e.g., what mobile applications are installed), user attributes (e.g., the user's position or department), behavioral attributes, and other criteria. Client-side code installed on the mobile devices may further enhance security by, for example, creating a secure container for locally storing enterprise data, creating a secure execution environment for running enterprise applications, and/or creating secure application tunnels for communicating with the enterprise system.

Secure execution of enterprise applications on mobile devices

Aspects described herein allow multiple devices to function as a coherent whole, allowing each device to take on distinct functions that are complementary to one another. Aspects described herein also allow the devices function as a coherent whole when interconnected devices and their respective applications are configured to operate in various operation modes, when management policies are employed to control the operation of the interconnected devices and their respective applications, when transferring content between the interconnected devices and storing the content at those devices, when obtaining access credentials for the interconnected devices that enable the devices to access enterprise resources, when a policy agent applies management policies to control operation of and interaction between the interconnected devices, and when the interconnected devices are used to access an enterprise application store.

Single sign-on access in an orchestration framework for connected devices

An authentication system is described for controlling a person's access to a resource, which may be a physical resource or a network resource. The authentication system obtains credential information for the person (e.g., using a coded card or keypad for username and password), a voice print from the person, and the current geographical location of the user. The voice print and geographic location are preferably obtained from a telephone call that occurs between the person and the authentication system. The call can take the form of a cell phone call placed by the person to the authentication system. The authentication system includes a user profile database. If the credential information and voice print match those of persons authorized to access the resource, and the user is at a registered permissible location to access the resource, the authentication system sends a signal to the resource indicating that the authentication was successful.

Location-based voice-print authentication method and system

A mobile phone comprising a processor, a memory comprising a system partition and a data partition, and an application stored in the system partition of the memory. When executed by the processor, the application determines a brand identity associated with the mobile phone, accesses branding assets associated with the application based on the brand identity, and adapts the function of the application based on the accessed branding assets.

Automated branding of generic applications

A system is provided for mobile device file management. A client application determines whether a requested file associated with a file identifier is stored in a file system in a mobile device. If the file is not stored in the file system, the client application retrieves the file via over-the-air communication, stores the file with storage information in the file system, and provides the file for presentation on a user interface on the mobile device. If a background application determines that the client application is inactive and that a current time and the storage information indicate to refresh the provided file, the background application retrieves at least apart of a refreshed file via over-the-air communication. If the background application determines that the provided file is not the same version as the refreshed file, the background application stores the refreshed file with refreshed storage information in the file system.

Mobile device file management

A subscriber identity module (SIM) card. The SIM card comprises a processor, a memory, and an operation object. The memory stores, in part, the operation object, an integrated circuit card identifier (ICCID), an international mobile subscriber identity (IMSI), and an authentication key. When executed by the processor, the operation object causes a browser to be executed on a mobile communication device into which the SIM card is installed, provides a uniform resource locator (URL) to the browser, wherein the URL identifies a Web site, and causes the browser to send a request to the URL to download a custom application launcher and to install the custom application launcher on the mobile communication device.

Subscriber identity module (SIM) card initiation of custom application launcher installation on a mobile communication device

A wireless interface extension for mobile devices is provided. The wireless interface extension includes a user interface, a wireless communication link, and a processor. The processor communicates with a mobile device over the wireless communication link and enables a user to use the user interface to interact with at least one user application on the mobile device.

M. Jeffrey Stone

Papers

Location-based voice-print authentication method and system

Automated branding of generic applications

Mobile device file management

Subscriber identity module (SIM) card initiation of custom application launcher installation on a mobile communication device

Wireless interface extension for mobile devices