WO2015096695A1

WO2015096695A1 - Installation control method, system and device for application program

Info

Publication number: WO2015096695A1
Application number: PCT/CN2014/094653
Authority: WO
Inventors: 王鹏程; 李旋; 王力; 张瑞博
Original assignee: 北京奇虎科技有限公司; 奇智软件（北京）有限公司
Priority date: 2013-12-23
Filing date: 2014-12-23
Publication date: 2015-07-02
Also published as: CN103677935A

Abstract

An installation method, system and device for an application program, which solve the problems of waste of time and low efficiency when a user downloads an application program. In the method, for a mobile terminal corresponding to each user group, when it is detected that an enterprise management client (52) on the mobile terminal logs in, a server (51) provides an application program list to be pushed for same, so that the enterprise management client (52) installs various application programs in the application program list in a working area. In the solution, since for each user group, the server (51) sets the application program list to be pushed corresponding thereto, the information about an application program required by the user group can be contained in the application program list and is provided for the user group, thereby reducing the workload of each user in the user group to search and download corresponding application programs in the application program list, saving the time of the user and improving the working efficiency thereof.

Description

Installation control method, system and device for application

Technical field

The present application relates to the field of information security technologies, and in particular, to an installation control method, system, and apparatus for an application.

Background technique

With the maturity and popularity of mobile terminals, personal mobile terminal devices represented by smart phones and tablet PCs have gradually entered the enterprise field. According to Gartner, an international authoritative consulting firm, by 2014, 90% of enterprises will support employees to run corporate office applications on personal mobile devices. The use of personal mobile devices for employees has become an irreversible trend.

In BYOD (Bring Your Own Device), the same mobile terminal has both personal applications and data, as well as enterprise applications and data. The enterprise application is set in the enterprise management client, and the enterprise application is The data is also saved in the Enterprise Management client. To distinguish, the area where the personal application and data reside is called the personal area, and the area where the enterprise application and data are located, that is, the area created by the enterprise management client is called the work area.

With the popularity of the BYOD phenomenon, more and more enterprise users will use mobile terminals to work. In the existing BYOD phenomenon, each enterprise user downloads and installs the corresponding application according to his own needs. Different understandings of the work of the enterprise users may lead to different applications downloaded by the enterprise users. For example, an enterprise user needs to use an application in his work, but because he does not know enough about his work, he does not download the application. In the follow-up work, it will affect its work efficiency.

In addition, for enterprises with the same office nature, the applications that each enterprise user may need are basically the same. Each enterprise user downloads and installs the corresponding application in the above manner, and cannot guarantee the same application downloaded by each enterprise user. The version is consistent, so there may be problems with late data incompatibility; in addition, each enterprise user has to search and download for each application, which will consume a lot of time for enterprise users, and whether the application can be downloaded after downloading The compatibility of its own mobile terminal is also unknown, so this method wastes a lot of human resources, which is not conducive to improving the efficiency of the enterprise.

Summary of the invention

In view of the above problems, the present application has been made in order to provide an overcoming of the above problems or at least partially Or an installation control method, system, and apparatus for an application that alleviates the above problems.

An embodiment of the present application provides an installation control method for an application, where the method includes: determining, by the server, a mobile terminal of each user in the user group according to a list of applications to be pushed set for each user group; The mobile terminal of each user in the group detects whether the enterprise management client on the mobile terminal logs in; when detecting the enterprise management client login on the mobile terminal, the user group corresponding to the application list to be pushed The information of each application is provided to the enterprise management client, and the enterprise management client installs the applications in the work area.

An embodiment of the present application provides an application installation control system, where the system includes a server and an enterprise management client on at least one mobile terminal: a server configured to list a list of applications to be pushed according to each user group. Determining identification information of the mobile terminal of each user in the user group; detecting, for the mobile terminal of each user in the user group, whether the enterprise management client on the mobile terminal logs in; when detecting the enterprise management on the mobile terminal When the client logs in, the information of each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client; and at least one enterprise management client is configured to receive the application list sent by the server. Information for each application and install the various applications described in the workspace.

An embodiment of the present application provides an enterprise management client, including: a receiving module, configured to receive information about each application in a list of applications to be pushed provided by a server; and an installation module configured to install the in the work area Each application.

An embodiment of the present application provides a method, a system, and a device for installing an application, where the server provides a mobile terminal corresponding to each user group to the enterprise management client on the mobile terminal when it logs in. A list of pushed applications that enable the Enterprise Management client to install each application in the application list in the workspace. Since the server sets the corresponding application list to be pushed for each user group in the embodiment of the present application, the information of the application required by the user group may be included in the application list, and the user group is Provided to avoid the user's unclear understanding of their work, no problem of downloading or downloading the wrong application affects productivity, and reducing the workload of each user in the user group searching and downloading the corresponding application in the application list , saving users' time and improving their work efficiency.

The above description is only an overview of the technical solutions of the present application, and the technical means of the present application can be more clearly understood, and the above and other objects, features and advantages of the present application can be more clearly understood. The following is a specific embodiment of the present application.

DRAWINGS

Various other advantages and benefits will become apparent to those skilled in the art from a The drawings are only for the purpose of illustrating the preferred embodiments and are not intended to be limiting. Throughout the drawings, the same reference numerals are used to refer to the same parts. In the drawing:

1 is a schematic structural diagram of a system of an enterprise management system of a mobile terminal according to an embodiment of the present application;

FIG. 2 is a schematic diagram of an installation process of an application according to an embodiment of the present application;

3 is a diagram showing an installation process of an application program according to Embodiment 1 of the present application;

4 is a diagram showing an installation process of an application program according to Embodiment 2 of the present application;

FIG. 5 is a structural diagram of an installation control system of an application program according to an embodiment of the present application.

FIG. 6 is a structural diagram of an enterprise management client according to an embodiment of the present application;

Figure 7 is a block diagram of a server for performing a method in accordance with the present application;

Figure 8 illustrates a storage unit for holding or carrying program code that implements the method according to the present application.

Specific embodiment

In order to reduce the workload of the application search and download of the enterprise user in the BYOD scenario, reduce the time for the application to search and download, and improve the work efficiency, the embodiment of the present application provides an application installation method, system and device. .

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Rather, these embodiments are provided so that this disclosure will be more fully understood and the scope of the disclosure will be fully disclosed.

The embodiments of the present application are described in detail below with reference to the accompanying drawings.

First, the system architecture of the enterprise management system of the mobile terminal provided by the embodiment of the present application is described. As shown in FIG. 1 , the enterprise management system of the mobile terminal provided by the embodiment of the present application is a mobile terminal management platform for an enterprise, including a server deployed on the intranet of the enterprise and a client installed on the mobile terminal to be managed. In the embodiment of the present application, the server deployed on the intranet of the enterprise is referred to as a server, and the client installed on the mobile terminal to be managed is referred to as an enterprise management client. among them:

The main functions of the server include: managing and delivering the application of the intranet, as well as managing and delivering security policies. The server also provides a wealth of mobile terminal statistics and management tools. The enterprise administrator can view each of the servers to be managed through the server. Detailed information of the mobile terminal, including: terminal model, system version, IMEI (International Mobile Equipment Identification Number), serial number, MSISDN (Mobile Subscriber International ISDN/PSTN Number) Number, commonly known as mobile number), whether it is offline, whether it is Root (super user), password replacement time, whether to install security software, power information, wireless network information, etc.

The main functions of the enterprise management client include: data leakage prevention, enforcement of security policies, etc., data leakage prevention includes data encryption, data isolation, etc., encrypted data may be data related to system files; or user selected financial documents, production Data in documents, sales documents, market documents, human resources files, etc.; can also be data of user personal files, such as photos, videos, logs, etc. A brief description of data encryption is performed by taking an implementation on an Android system as an example. Data encryption is implemented by .so (dynamic link library) file, mainly injecting code into the application, so that the apk (Android Package, Android installation package) is initialized to call the .so file, to ensure the timing of the .so file is running. It is earlier than the time the file is read or written by the application. If it is late, the file will become "half encrypted", causing file corruption. Through data encryption, the .so file intercepts all file operations of the application and implements encryption.

The enterprise management system of the mobile terminal provided by the embodiment of the present application establishes a secure and independent working area on the mobile terminal based on the data leakage prevention mechanism of the enterprise management client, without affecting the feelings of the enterprise employees on the personal application. Memory space, work area memory space (referred to as work area) refers to the memory space allocated to the enterprise management client, all enterprise applications and data are stored in the protected workspace. Correspondingly, the memory space outside the working area memory space in the memory space of the mobile terminal is called a personal area memory space (referred to as a personal area), and all personal applications and data are stored in the personal area, and the personal application cannot access the working area, that is, Unable to access corporate data to prevent corporate data from being illegally accessed and accessed by personal applications. The enterprise management system of the mobile terminal provided by the embodiment of the present application not only completely isolates enterprise data and personal data, but also better protects enterprise applications and data, and provides an undifferentiated personal application experience for the enterprise employees, and achieves “one machine”. The dual use effect.

The Enterprise Management Server provides two application delivery methods: free installation and mandatory installation. The application delivered by the free installation method is freely available for enterprise users to download and install; the application that is issued by the mandatory installation method needs to be installed by the enterprise user before the working area can be used normally. In the specific implementation, for the enterprise application in the work area, the mandatory installation mode is generally adopted; for the personal application in the personal area, the free installation mode is generally adopted. Of course, it is also possible to use a free installation method for enterprise applications in the work area. The application that is delivered in the free installation mode will be displayed in the application list of the enterprise application market in the workspace. The client user can choose to download and install the application. The application delivered by the mandatory installation mode needs to be installed by the client user. Use the workspace.

Since the mobile terminal is generally distributed to the employees of the enterprise, the application black and white list can provide a security management mechanism for the personal application in the personal area. The name and version number of the application that is forbidden to be installed is listed in the application blacklist, and the name and version number of the application that is only allowed to be installed are listed in the application whitelist.

The settings for applying a blacklist or applying a whitelist are all configurable by the enterprise administrator. The settings for the enterprise administrator to apply the blacklist or apply the whitelist include the following scenarios:

Scenario 1. All mobile terminal devices of the enterprise only allow the employees of the enterprise to use the office. Therefore, the application that only allows the office to be installed is restricted, that is, the application-only whitelist can be used to limit the application that only allows the installation work to be related.

Scenario 2, prohibit the installation of applications that are exposed to security breaches or malicious behavior. For example, some specific applications, or applications whose security software detects malicious behavior, or vulnerable applications scanned by the vulnerability scanning function, can use the blacklist to prohibit security breaches or malicious attacks. The installation of the behavior of the application.

Scenario 3: The installation of certain file sharing applications, such as the installation of a network disk, is prohibited. Because the file sharing application causes the internal resources of the enterprise to be uploaded to the cloud, thereby destroying the privacy of the enterprise information, that is, The application of the file sharing application can be disabled by applying a blacklist.

Other specific scenarios are not listed one by one. In short, enterprises can flexibly control the installation of applications in each user group by applying blacklists or applying whitelists according to the actual needs of the enterprise.

The enterprise application is generally an application that is forcibly issued by the enterprise and installed on the mobile terminal of the enterprise employee. Generally, the enterprise application has high security and reliability, and the enterprise employee can use it with confidence; the embodiment of the present application is forced to be installed. The application that provides an application's installation control method. Use enterprise mandatory installation for enterprise applications in the workspace. The specific implementation manner is described below to explain the delivery process of the enterprise application.

FIG. 2 is a schematic diagram of an installation process of an application according to an embodiment of the present application, where the process includes the following steps:

S201: The server determines, according to the application list to be pushed set for each user group, the mobile terminal of each user in the user group.

Specifically, a dedicated space is set up in the server for storing the installation package of the application uploaded to the server. In the embodiment of the present application, the dedicated space is referred to as an enterprise application library. The server maintains the name and version number of all applications that have uploaded the installation package to the server. Of course, the application list may also include other information about the application, such as upload time, installation package size, and installation amount. For example, the application management list can be used to maintain related information of the application, so that the enterprise administrator can view and edit the application management list, and view statistics such as the installation amount of each application.

In general, the installation package of the application is uploaded by the enterprise to the enterprise management server. In order to ensure the security and reliability of the application used on the mobile terminal, the enterprise management server installs the application before saving the installation package of the application. The package performs virus detection and reinforcement processing.

Hardening the application's installation package prevents the application from being easily reversed to obtain the secret Key information such as the key system, while adding data encryption to the application, increasing the security factor. A brief description will be given on the implementation of the Android (Android) system to strengthen the installation package of the application. The hardening of the application installation package is mainly to change the content of the application's class.dex file, perform some algorithmic encryption on the content, and then dynamically decrypt the content when the apk (Android Package, Android installation package) is running, restore the content. When modifying the class.dex file, make sure it conforms to the native format of the dex file. The installation packages of all uploaded applications are virus-detected and hardened to prevent malicious tampering, code injection, memory modification, data theft, decompilation and other threats.

Many users in the BYOD scenario may use the same application. Users can be divided into different user groups according to the similarity of the applications used between users. Each user group contains at least one user. For example, users in the same functional department use similar applications. For example, users in the finance department use the same financial software, users in the R&D department use the same development software, and users in the administrative department use the same Office software, users in the marketing department will use instant chat tools, such as Fetion, WeChat, QQ and so on. Therefore, when the user is divided into different user groups, the user can be divided according to the functional part of the user. In addition, an application such as an anti-virus software or a firewall that monitors the security status of the work area of the mobile terminal can be pushed to each user group and installed in the work area of the corresponding user mobile terminal.

After the user is divided into different user groups, in order to facilitate the push and installation of the application, the server stores the identification information of the mobile terminal of each user included in each user group, where the identification information is configured as The mobile terminal performs identification, and the mobile terminal can be distinguished by the identification information. Thereby, it is possible to determine which mobile terminals to push information of each application in the application list to by the identification information.

In order to reduce the workload and time for each user to download an application in the work area in the BYOD scenario, in the embodiment of the present application, the user group may be determined according to the application program that needs to be used for different user groups in the server. A list of applications to be pushed, including information of at least one application in the application list.

Maintaining, in the server, a list of applications to be pushed for each user group, the application list including the name and version number of the application to be pushed to each enterprise management client in the user group, and may of course include the application Other information, such as upload time, package size, install amount, etc.

S202: Detect whether the enterprise management client on the mobile terminal logs in for the mobile terminal of each user in the user group, and if the detection result is yes, proceed to step S203; otherwise, proceed to step S202.

Detecting whether the enterprise management client on the mobile terminal is logged in includes many methods. For example, the enterprise management client sends the login information to the server every time the login is performed, so that the server delivers the latest policy to the enterprise management client, so the server can Whether to receive the login information of the enterprise management client for detection; Alternatively, the server sends an inquiry request to the enterprise management client to detect according to whether the enterprise management client responds. The detection method also includes a plurality of types, which are not described in the embodiment of the present application. It is believed that those skilled in the art can determine the corresponding detection method according to the description of the embodiments of the present application.

S203: The information about each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client, so that the enterprise management client installs the application in a work area.

The application list to be pushed includes information of at least one application, and the information of the application may be identification information of the application, such as the name of the application, or the code of the application, and the like. The information of the application may also include one or more of the version number information of the application and the download address information of the application.

When the server provides the application information to the enterprise management client, the information of the application can be carried in the control signaling. When the application list contains information of two or more applications, when the server provides the information of each application to the enterprise management client, the information of each application may be included in one control signaling. It is also provided to the enterprise management client; or, a control signaling may include information of an application, and the information of each application is separately provided to the enterprise management client. After the application information is provided to the enterprise management client, the enterprise management client can download and install the corresponding application in the work area according to the information of the application provided by the server.

Since the server sets the corresponding application list to be pushed for each user group in the embodiment of the present application, the information of the application required by the user group may be included in the application list, and the user group is Provided to avoid the user's unclear understanding of their work, no problem of downloading or downloading the wrong application affects productivity, and reducing the workload of each user in the user group searching and downloading the corresponding application in the application list , saving users' time and improving their work efficiency.

The information of each application in the list of applications to be pushed may be set by the administrator, and the administrator will set the name and version of each application when setting the corresponding application list to be pushed for each user group. The number and download address information are set in the application list for subsequent push to the corresponding user. The information of each application in the list of applications to be pushed may also be extracted by the server in the application store according to the corresponding rules. At this time, the installation package of the application uploaded to the server is saved in the application store, and the application store maintains the name and version number of all the applications that have uploaded the installation package to the server, and may of course include other information of the application, such as uploading. Time, installation package size, installation amount, etc. The enterprise administrator can set the name and version number information of each application in the list of applications to be pushed by the server. Based on the information set, the server looks up the installation package of the application with the corresponding name and version number in the application store, and adds the download address information of the installation package of the application to the application list.

The server maintains a list of applications to be pushed corresponding to the user group for each user group, which should The application list stores identification information, version number information, download address information, and the like of each application. Specifically, when the user group is divided into functional departments of the user, an application for monitoring security, such as anti-virus software and security guards, is stored in the application list to be pushed for each user group in the server. Wait.

For example, the application list to be pushed set by the user group corresponding to the R&D department stores the name, version number, and download address information of each programming software, and the list of applications to be pushed set for the user group corresponding to the finance department. The name, version number, and download address information of each financial software are stored in the file, and the name, version number, and download address information of each office software are stored in the application list to be pushed for the user group corresponding to the administrative department. The name of the instant chat tool, the version number, and the download address information are stored in the application list to be pushed set by the user group corresponding to the marketing department.

After the server determines the application list to be pushed corresponding to each user group, in order to ensure that there is no duplication of the application pushed to each user's enterprise management server, the workload of repeatedly pushing the same application by the server is reduced, and the application is implemented. The examples also include:

The server saves the information of the application to the list of applications that have been pushed for the mobile terminal according to the information of the application provided to the mobile terminal.

Before the information about each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client, the method further includes:

Determining, by the server according to the list of applications that have been pushed for the mobile terminal, whether the information of the application is pushed to the mobile terminal;

When it is judged that the information of the application has not been pushed to the mobile terminal, the subsequent providing step is performed.

In order to reduce the workload of the server repeatedly pushing the same application, the server locally stores, for each mobile terminal, a list of applications that have been pushed, and an application that has been pushed to the mobile terminal is saved in the list of applications that have been pushed. Information. The information of the application may be identification information of the application, and the version number information of the application is also included in the information of the application.

The server may carry the information of the application in the control signaling, and send the control signaling to the enterprise management client. In order to facilitate the enterprise management client to install the application, the information of the application carried in the control signaling may include the download address information of the application. When the specific server obtains the download address information of the application, when the application list includes the download address information of the application, the server directly obtains the download address information from the application list, when the application list is not When the download address information of the application is included, the server obtains the download address information of the corresponding application according to the information of each application provided by the application market.

The installation package of the application saved in each download address information is subjected to virus detection, hardening processing, and Encrypted processing. In general, the installation package of the application is uploaded to the server by a third party. In order to ensure the security and reliability of the application used on the mobile terminal, the server performs virus on the installation package of the application before saving the installation package of the application. Detection, hardening, and encryption processing. The installation packages of all uploaded applications are protected by virus detection and hardening, so as to prevent malicious tampering, code injection, memory modification, data theft, decompilation and other threats, so as to ensure the security of the workspace in the enterprise management client.

For example, the information of the application includes: identification information of the application, version number information of the application, and download address information of the application. At least one application is included in the list of applications to be pushed. Based on the above description, FIG. 3 is a diagram of an installation process of an application program according to Embodiment 1 of the present application, and the process includes the following steps:

S301: The server determines, according to the application list to be pushed set for each user group, the mobile terminal of each user in the user group.

Wherein, the application list contains information of at least one application.

S302: Determine, according to the list of application programs that have been pushed for each mobile terminal, whether the download address information of the application corresponding to the identification information is provided to the mobile terminal, and if the determination result is yes, proceed to step S303; otherwise, Go to step S305.

S303: Determine whether the version number information of the application that has been pushed to the mobile terminal is consistent with the version number information of the application. If the determination result is yes, proceed to step S304; otherwise, proceed to step S305.

S304: The information of the application is not pushed to the enterprise management client on the mobile terminal.

S305: Detect whether the enterprise management client on the mobile terminal logs in to the mobile terminal of each user in the user group, and if the detection result is yes, proceed to step S306; otherwise, proceed to step S305.

S306: The download address information of the application is carried in the control signaling, and is provided to the enterprise management client on the mobile terminal.

When the server obtains the download address information of the application, the server obtains the download address information of the application according to the information of each application provided by the application market.

S307: Add information of the application to the list of applications that have been pushed for the mobile terminal.

The above is the identification information of the application included in the application list, and the version number information of the application is taken as an example. When the application list only contains the identification information of the application, the In the above determination, only the determination of the above S302 is required, and if the determination result is YES, the process proceeds to step S304, otherwise, the process proceeds to step S305. When the information of the application included in the application list is the identification information of the application, the version number information of the application, and the download address information of the application, in step S306, the server lists the application in the application list. Download address information carried in control signaling Provided to the enterprise management client on the mobile terminal.

The application list contains more information about the application, such as the identification information of the application and the version number information of the application, which can reduce the probability of repeated push of the application, when the application included in the application list When there is less information, such as the identification information of the application, the efficiency of the server pushing the application to the enterprise management client can be improved.

In the embodiment of the present application, in order to further reduce the workload of the application downloading by the enterprise user and improve the work efficiency, the enterprise management client installs the application in the work area, including:

The enterprise management client downloads the installation package of the application to the corresponding address according to the download address information of the application carried in the received control signaling, and uses the extracted super user root authority to install the workstation in the work area. The installation package of the application; or,

The enterprise management client downloads the installation package of the application to the corresponding address according to the download address information of the application carried in the received control signaling, and provides the user with a prompt to install the installation package of the application. The information, after receiving the confirmation information that the user installs the installation package, install the installation package of the application in the work area.

The enterprise management client uses the implementation on the Android system as an example when installing the installation package of the application. The enterprise management client first extracts the root privilege through a root code, and uses the root privilege to start a service with the root privilege. After the Service with Root privileges is started, the local Socket (socket) interface is reserved for invocation. The enterprise management client calls the Socket interface, so that the Service Hook with root authority is on a core process System Service of the Android system, so that the Service with Root permission can monitor the mechanism of communication with the Binder (process in the Android system). ) related IOCTL (input and output control) function, if you monitor the content related to Package Manager (the service that manages the installation package in Android), you need to start the Package Manager and install the installation package of the application in the workspace. .

When the enterprise management client does not have root authority, the enterprise management client downloads the installation package of the corresponding application to the working area according to the download address information in the control signaling, and provides the user with installation of the application. The prompt information of the package, and according to the received user's instruction, perform subsequent operations, and when receiving the confirmation information that the user installs the installation package, install the installation package of the application in the work area; the received user does not install the installation When the package information is available, the application's installation process ends.

Root privileges can access and modify almost all files in the user's mobile terminal (Android system files and user files, excluding ROM). The root privilege is the only super administrator in the system and has the same privileges as the operating system. When the mobile terminal has root privileges, the installation package of the downloaded application can be directly installed.

When the enterprise management client determines whether the mobile terminal has root authority, the enterprise management client can detect whether the root authority identification file exists in the common directory of the mobile terminal, thereby detecting whether the mobile terminal has root authority. For example, for the mobile terminal of the Android system, the enterprise management client can detect whether there is a SU file in a directory such as /system/bin/system/sbin/system/xbin, and when it detects that the SU file exists, it is determined that the mobile terminal has root authority. Otherwise, it is determined that the mobile terminal does not have root authority; for the mobile terminal of the I0S system, the enterprise management client can detect whether there is a file that is usually not authorized to access in the /Applications directory, and when there is a file that is normally not authorized to access, It is determined that the mobile terminal has root authority; otherwise, it is determined that the mobile terminal does not have root authority.

4 is a diagram of an installation process of an application program according to Embodiment 2 of the present application, where the process includes the following steps:

S401: The server determines, according to the application list to be pushed set for each user group, the mobile terminal of each user in the user group.

Wherein, the application list contains information of at least one application.

S402: Determine, according to the list of the application programs that have been pushed for each mobile terminal, whether the download address information of the application corresponding to the identification information is provided to the mobile terminal, and if the determination result is yes, proceed to step S403; otherwise, Go to step S405.

S403: Determine whether the version number information of the application that has been pushed to the mobile terminal is consistent with the version number information of the application. If the determination result is yes, proceed to step S404; otherwise, proceed to step S405.

S404: The information of the application is not pushed to the enterprise management client on the mobile terminal.

S405: Detect whether the enterprise management client on the mobile terminal logs in for the mobile terminal of each user in the user group, and if the detection result is yes, proceed to step S406; otherwise, proceed to step S405.

S406: The download address information of the application is carried in the control signaling, and is provided to the enterprise management client on the mobile terminal.

S407: The enterprise management client obtains the download address information of the application carried in the received control signaling, and then downloads the installation package of the application to the corresponding address.

S408: The enterprise management client uses the extracted super user root authority to install the installation package of the application in the work area.

After the enterprise management client installs the corresponding application installation package, you can see the icon and name of the application on the desktop of the workspace, and click the icon of the application to use it.

Alternatively, the enterprise management client provides the user with prompt information for installing the installation package of the application, and after receiving the confirmation information that the user installs the installation package, installing the installation package of the application in the work area; When the user receives the information that the installation package is not installed, the installation process of the application ends.

FIG. 5 is a structural diagram of an installation control system of an application program according to an embodiment of the present application. The system includes a server 51 and an enterprise management client 52 on at least one mobile terminal:

The server 51 is configured to determine, according to the application list to be pushed set for each user group, the mobile terminal of each user in the user group; and detect, for the mobile terminal of each user in the user group, the mobile terminal Whether the enterprise management client 52 logs in; when detecting that the enterprise management client 52 on the mobile terminal logs in, the information of each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client. End 52;

At least one enterprise management client 52 is configured to receive information of each application in the application list sent by the server, and install the applications in the work area.

The server 51 is further configured to save the information of the application to the list of applications that have been pushed for the mobile terminal according to the information of the application provided to the mobile terminal.

The server 51 is further configured to determine, according to the list of applications that have been pushed for the mobile terminal, whether to push the information of the application to the mobile terminal; when it is determined that the application is not pushed to the mobile terminal When the information is available, follow-up steps are provided.

The server 51 is configured to acquire download address information of the application included in the application list to be pushed for each application, and the download address information is provided in the control signaling to be Enterprise management client.

The at least one enterprise management client 52 is configured to download the installation package of the application to the corresponding address according to the downloaded address information of the application carried in the received control signaling, and use the extracted super user root authority. Install the installation package for the application.

The at least one enterprise management client 52 is configured to download an installation package of the application to a corresponding address according to the downloaded address information of the application carried in the received control signaling, and provide the user with whether to install the The prompt information of the installation package of the application, after receiving the confirmation information that the user installs the installation package, installs the installation package of the application.

The server 51 is further configured to perform virus detection, reinforcement processing, and encryption processing on the installation package corresponding to each application included in the application list.

FIG. 6 is a structural diagram of an enterprise management client according to an embodiment of the present application, including:

The receiving module 61 is configured to receive information about each application in the application list to be pushed provided by the server;

The installation module 62 is configured to install the applications in the work area.

The installation module 62 is configured to download the installation package of the application to the corresponding address according to the downloaded address information of the application carried in the received control signaling, and use the extracted super user root permission to install in the work area. The installation package for the application.

The installation module 62 is configured to download an installation package of the application to a corresponding address according to the downloaded address information of the application carried in the received control signaling, and provide the user with installation of the application. The prompt information of the package, after receiving the confirmation information that the user installs the installation package, installs the installation package of the application in the work area.

It should be noted that the device in the embodiment of the present application may include various devices such as a computer device and a mobile device. The mobile device may be a variety of mobile devices, such as a game console, a laptop computer, a portable media player, a tablet computer, a tablet computer, a PDA, a mobile computer, and a mobile phone.

The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general purpose systems can also be used with the teaching based on the teachings herein. The structure required to construct such a system is apparent from the above description. Moreover, this application is not directed to any particular programming language. It should be understood that the content of the present application described herein may be implemented in a variety of programming languages, and the description of the specific language above is for the purpose of illustrating the preferred embodiments.

In the description provided herein, numerous specific details are set forth. However, it is understood that the embodiments of the present application may be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of the description.

Similarly, it should be understood that in order to streamline the present disclosure and to help understand one or more of the various inventive aspects, In the above description of the exemplary embodiments of the present application, various features of the present application are sometimes grouped together into a single embodiment, figure, or description thereof. However, the method disclosed is not to be interpreted as reflecting the intention that the claimed invention requires more features than those specifically recited in the claims. Rather, as the following claims reflect, inventive aspects reside in less than all features of the single embodiments disclosed herein. Therefore, the claims following the specific embodiments are hereby explicitly incorporated into the specific embodiments, each of which

Those skilled in the art will appreciate that the modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components. In addition to such features and/or at least some of the processes or units being mutually exclusive, any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined. Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are included in other embodiments and not in other features, combinations of features of different embodiments are intended to be within the scope of the present application. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

It should be noted that the above-described embodiments are illustrative of the present application and are not intended to limit the scope of the application, and those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as a limitation. The word "comprising" does not exclude the presence of the elements or steps that are not recited in the claims. The word "a" or "an" The application can be implemented by means of hardware comprising several distinct elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means can be embodied by the same hardware item. The use of the words first, second, and third does not indicate any order. These words can be interpreted as names.

It will be apparent to those skilled in the art that various modifications and changes can be made in the present application without departing from the spirit and scope of the application. Thus, it is intended that the present invention cover the modifications and variations of the present invention. The various component embodiments of the present application can be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or digital signal processor (DSP) may be used in practice to implement some or all of the installation control system of an application in accordance with embodiments of the present application. Some or all of the features. The application can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein. Such a program implementing the present application may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

For example, FIG. 7 shows a server that can implement an installation control method of an application according to the present application. The server conventionally includes a processor 710 and a computer program product or computer readable medium in the form of a memory 720. Memory 720 can be an electronic memory such as a flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), EPROM, hard disk, or ROM. Memory 420 has a memory space 730 for program code 731 for performing any of the method steps described above. For example, storage space 730 for program code may include various program code 431 for implementing various steps in the above methods, respectively. The program code can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards or floppy disks. Such a computer program product is typically a portable or fixed storage unit as described with reference to FIG. The storage unit may have a storage section, a storage space, and the like arranged similarly to the storage 720 in the server of FIG. The program code can be compressed, for example, in an appropriate form. Typically, the storage unit includes computer readable code 731', code that can be read by a processor, such as 710, which, when executed by a server, causes the server to perform various steps in the methods described above.

"an embodiment," or "an embodiment," or "one or more embodiments" as used herein means that the particular features, structures, or characteristics described in connection with the embodiments are included in at least one embodiment of the present application. In addition, it is noted that the phrase "in one embodiment" is not necessarily referring to the same embodiment.

In addition, it should be noted that the language used in the specification has been selected for the purpose of readability and teaching, and is not intended to be interpreted or limited. Therefore, many modifications and changes will be apparent to those skilled in the art without departing from the scope of the invention. The disclosure of the present application is intended to be illustrative, and not restrictive, and the scope of the application is defined by the appended claims.

Claims

An installation control method for an application, characterized in that the method comprises:

Determining, by the server, a mobile terminal of each user in the user group according to a list of applications to be pushed set for each user group;

Detecting, for the mobile terminal of each user in the user group, whether the enterprise management client on the mobile terminal logs in;

When the enterprise management client login on the mobile terminal is detected, the information of each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client, so that the enterprise management client The applications are installed in the workspace.
The method of claim 1 wherein the method further comprises:

The server saves the information of the application to the list of applications that have been pushed for the mobile terminal according to the information of the application provided to the mobile terminal.
The method according to claim 2, wherein before the providing, by the user group, the information of each application in the application list to be pushed corresponding to the user group to the enterprise management client, the method further includes:

Determining, by the server according to the list of applications that have been pushed for the mobile terminal, whether the information of the application is pushed to the mobile terminal;

When it is judged that the information of the application has not been pushed to the mobile terminal, the subsequent providing step is performed.
The method according to claim 1, wherein the application list includes one of identifier information of the application, version number information of the application, and download address information of the application. Several.
The method of claim 4, wherein the information of each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client, including:

The server acquires download address information of the application included in the application list to be pushed for each application;

The download address information is carried in the control signaling and provided to the enterprise management client.
The method according to any one of claims 1 to 5, wherein the enterprise management client installs the applications in a work area, including:

The enterprise management client downloads the installation package of the application to the corresponding address according to the download address information of the application carried in the received control signaling, and uses the extracted super user root authority to install the workstation in the work area. The installation package of the application; or,

The enterprise management client sends a download address letter according to the application carried in the received control signaling Download the installation package of the application to the corresponding address, and provide the user with the prompt information of whether to install the installation package of the application, after receiving the confirmation information that the user installs the installation package, in the work area Install the installation package for the application.
The method of claim 1, wherein the method further comprises: before the server determines the identification information of the mobile terminal of each user in the user group, the method further comprising:

The server performs virus detection, reinforcement processing, and encryption processing on the installation package corresponding to each application included in the application list.
The method of claim 1 wherein said application list includes information for at least one application.
An installation control system for an application, characterized in that the system comprises a server and an enterprise management client on at least one mobile terminal:

a server, configured to determine a mobile terminal of each user in the user group according to a list of applications to be pushed set for each user group; and detect a enterprise on the mobile terminal for each mobile terminal of the user group in the user group The management client is logged in; when the enterprise management client login on the mobile terminal is detected, the information of each application in the application list to be pushed corresponding to the user group is provided to the enterprise management client;

The enterprise management client is configured to receive information of each application in the application list sent by the server, and install the applications in the work area.
The system according to claim 9, wherein the server is further configured to save the information of the application to the already-pushed saved for the mobile terminal according to the information of the application provided to the mobile terminal. In the application list.
The system according to claim 10, wherein the server is further configured to determine, according to the list of applications that have been pushed for the mobile terminal, whether to push information of the application to the mobile terminal; When it is judged that the information of the application has not been pushed to the mobile terminal, the subsequent providing step is performed.
The system according to any one of claims 9 to 11, wherein the server is configured to acquire, for each application, download address information of the application included in the application list to be pushed; The download address information is carried in the control signaling and provided to the enterprise management client.
The system of claim 12, wherein the enterprise management client is configured to download the application to the corresponding address according to the download address information of the application carried in the received control signaling. The package, using the extracted super user root permission, installing the installation package of the application; or, according to the downloaded address information of the application carried in the received control signaling, downloading to the corresponding address The installation package of the application, and providing the user with prompt information of whether to install the installation package of the application, and after receiving the confirmation information that the user installs the installation package, installing the installation package of the application.
The system according to claim 9, wherein the server is further configured to perform virus detection, hardening processing, and encryption processing on the installation package corresponding to each application included in the application list.
An enterprise management client, which is characterized by comprising:

a receiving module configured to receive information about each application in the application list to be pushed provided by the server;

A module is installed that is configured to install the applications in a workspace.
The enterprise management client according to claim 15, wherein the installation module is configured to download the application to the corresponding address according to the download address information of the application carried in the received control signaling. Install the package, use the extracted superuser root permission to install the installation package of the application in the work area; or, according to the downloaded address information of the application carried in the received control signaling, download the application to the corresponding address The installation package provides the user with the prompt information of whether to install the installation package of the application, and after receiving the confirmation information that the user installs the installation package, install the installation package of the application in the work area.
A program comprising readable code causing the server to perform an installation control method of an application according to any one of claims 1-8 when the readable code is run on a server.
A readable medium storing the program of claim 17.