Patent ID: 9094413
Filing Date: 2015-07-28
Classification: G06F,H04L

Abstract:
1. A method to confirm that a configuration profile has been installed on a mobile device, the mobile device comprising a processor configured to perform operations comprising: receiving, by an application installed on the mobile device and configured to permit or deny access to certain resources on the device, an https server certificate, a first copy of a client SSL certificate, and a first copy of a root certificate from a server that has previously transmitted a configuration profile to the mobile device, wherein (i) the configuration profile specifies security-related properties to be implemented by an operating system on the mobile device, (ii) the configuration profile includes a second copy of the client SSL certificate signed by a second copy of the root certificate and the second copy of the root certificate, and (iii) the https server certificate has been signed by the first copy of the root certificate; requesting the operating system to launch a web browser using a loopback URL, wherein the loopback URL points to an https server run by the application, wherein the https server certificate is installed on the https server; presenting, by the web browser, the client SSL certificate to the https server in response to a client certificate request received during an SSL handshake; determining, by the application, that the first copy of the client SSL certificate matches the second copy of the client SSL certificate; receiving a confirmation from the application that the client SSL certificate is trusted if the configuration profile has been installed by the operation system, the SSL handshake was successfully completed, and the first copy of the client SSL certificate matches the second copy of the client SSL certificate, thereby enabling the operating system to verify that the client SSL certificate included in the configuration profile matches the client SSL certificate received from the server; and permitting, by the application, access to the certain resources on the device.