Abstract: Managed real-time communications between user devices may be provided. Upon receiving a request to instantiate a communication connection from an application, a secure session may be established between the application and a remote application. Input from a user of the application may be received, subjected to at least one management policy, and transmitted to the remote application.

Abstract: Time-based configuration profile toggling of a client device can be provided. A computing device in data communication with a client device over a network can be configured to identify an enterprise configuration profile associated with a client device stored in a memory. Further, the computing device can determine whether a current time associated with the client device complies with a compliance rule that specifies at least one time period during which the client device is authorized to enable the enterprise configuration profile. In response to the current time associated with the client device complying with the compliance rule, the computing device can remotely enable the enterprise configuration profile on the client device.

Abstract: Authentication via accelerometer may be provided. Upon receiving a request to unlock a device, a user may perform an authentication movement that may be detected by an accelerometer on the device. If the authentication movement is determined to match an approved movement, the device may be unlocked.

Abstract: Methods, systems, apparatuses, and/or computer-readable media for providing device management via application modification may be provided. In some embodiments, upon identifying an available wireless network, a determination may be made as to whether the available wireless network comprises an authorized wireless network. In response to determining that the available wireless network comprises the authorized wireless network, a connection may be established with the available wireless network and at least one data communication may be performed via the available wireless network instead of a second network.

Abstract: Disclosed are systems and methods that facilitate encryption of email messages that are transported between mail servers. In some cases, email messages may be relayed through relay mail servers as well. An email message can be encrypted using a public key that corresponds to an organization associated with the recipient rather than a public key associated with the particular recipient. The email message can then be decrypted by the recipient mail server and deposited into a mailbox of the recipient.

Abstract: Disclosed are various embodiments for enforcing restrictions or compliance rules specified by a dialer application or messaging application executed by a client device such as a smartphone. Such a device can be managed by an enterprise and assigned to a particular user. Restrictions can be based on a location of the client device, a network to which the client device is communicating, or other environmental variables.

Abstract: Aspects of information integration and assessment are described. In one embodiment, one or more individuals are identified for information research. The identification may be made with reference to an attendee list, contact list, facial recognition, or user input among other ways. At least one source is identified to survey for information related to the individuals, and the source is surveyed for the information. In various embodiments, the source may comprise one or more social media or enterprise networks, services, or indexed search results, for example. The information is assembled into one or more integrated records, and various reports may be generated using the records. The reports and records may be ranked, displayed, compared, annotated, indexed and stored based on a surrounding context metric, for example. With reference to the reports and records, a user may be able to easily assemble and identify relevant information for reference in various contexts.

Abstract: Aspects of image capture challenge access are described. In one embodiment, an access service of a computing device directs an imaging system to capture an image including facial fiducial features and determine whether the features correspond to an expected set of features. The access service may also issue a request for a response including, for example, a request to tilt or move the computing device, move an individual's face, or contort an individual's facial features. After the request for the response, the access service may capture a response image. The response image may include an adjustment to facial fiducial features. The access service may further determine whether the adjustment to the facial fiducial features corresponds to the request. Depending upon whether the adjustment corresponds to the request, the access service may permit or deny access to features of the computing device.

Abstract: Disclosed are various embodiments for relaying data from a device that may not be equipped with a network interface. A data representation can be generated by the device on a display or via any other localized communication interface. The data representation can be captured by a computing device, which can relay the data to another computing device via a network. The data may be related to the operation of the device, such as status data with respect to the device or information about consumable resources associated with the device.

Abstract: Disclosed are various embodiments for issuing security commands, such as a wipe command, to a client device. An application executed by the client device can include a mail proxy that can act as a proxy to a remote mail server and determine compliance with compliance rules. Should the client device violate a compliance rule, the mail proxy executed by the client device may issue a security command to a mail client executed by the client device.

Abstract: A computing device obtains a request from a user device to access a network beacon. The computing device obtains a device profile for the user device. The computing device determines whether the user device satisfies an authorization rule based on the state of the user device as indicated by the device profile. The computing device authorizes the user device to access the network beacon responsive to determining that the user device satisfies the authorization rule.

Abstract: Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

Abstract: In a networked environment, a client side application executed on a client device may transmit a request to an authorization service for access to a resource. The authorization service may authenticate the user of client device and/or the client device based on user credentials and/or a device identifier. In response to authenticating the user and/or the client device, the authorization service may send to the client side application a request for confirmation that the client device complies with a distribution rule associated with the resource, where the distribution rule requires a specific application or specific type of application to be installed, enabled and/or executing on the client device as a prerequisite to accessing the resource. If the client device complies with the distribution rule, the client side application accesses the resource. Accessing the resource may include receiving an authorization credential required for access to the resource.

Abstract: A request to obtain data items associated with an entity is received from a client device. One or more computing devices determine whether access to the data items is restricted by an access control policy and whether the client device complies with the access control policy. In response to determining that the client device complies with the access control policy, at least a portion of the data items that the access control policy permits the client device to access are identified. An integration of the at least a portion of the data items with additional data items is initiated.

Abstract: Authentication via accelerometer may be provided. Upon receiving a request to unlock a device, a user may perform an authentication movement that may be detected by an accelerometer on the device. If the authentication movement is determined to match an approved movement, the device may be unlocked.

Abstract: Telecommunications data usage management may be provided. A network state associated with a communication network may be identified. Upon determining that the network state is not in compliance with a data usage policy, access to the communication network may be restricted for at least one application.

Abstract: Secure application leveraging of a filter proxy service may be provided. In response to receiving a request to access a resource, a filter proxy service may be used to determine whether the request to access the resource is approved. If the request to access the resource is approved, the access to the resource may be allowed to continue.

Abstract: Disclosed are various embodiments for systems and methods for controlling access of networks. In one embodiment, an access control service receives requests to access network beacons from client devices. In response, the access control service determines whether the client devices satisfy authorization rules associated with the network beacons. If the access control service determines that the client devices satisfy the authorization rules associated with the network beacons, the access control service authorizes the client devices to access the network beacons. Subsequently, if the client devices cease to satisfy the authorization rules associated with the network beacons, the access control service terminates the authorization of the client devices to access the network beacons.

Abstract: Methods, systems, apparatuses, and/or computer-readable media for providing device management via application modification may be provided. In some embodiments, upon receiving a request to perform an action associated with an application, a determination as to whether performing the action will utilize a metered resource may be made. If so, a further determination may be made as to whether the request complies with at least one cost compliance policy and, in response to determining that the request complies with the at least one cost compliance policy, the action may be caused and/or authorize to be performed.

Abstract: Disclosed are various embodiments for issuing security commands, such as a wipe command, to a client device. An application executed by the client device can include a mail proxy that can act as a proxy to a remote mail server and determine compliance with compliance rules. Should the client device violate a compliance rule, the mail proxy executed by the client device may issue a security command to a mail client executed by the client device.