AT&T Toggle is a Model for Location
Data Privacy Management

Mobeen Khan, Executive Director for Mobility
Marketing, AT&T Business and Home Solutions

attimage


orangeasktrikBACKGROUND AT&T set out to solve the problem of dual use mobile phones – for work and personal use – one mobile phone, two usage pro les, and an IT administrator trying to manage and control the use of enterprise mobile applications on the work side of the phone. AT&T Toggle is a software solution that enables a mobile phone to be compartmentalized into distinct personas with specific privileges or restrictions. In the era of BYOD (Bring Your Own Device) where employees are increasingly rejecting company-issued phones and devices, this presents an interesting technology approach to addressing mobility management in general and location data privacy management in particular. We spoke with Mobeen Khan, Executive Director for Mobility Marketing about the role of AT&T Toggle in enterprise mobility management and how it ts into location data privacy.

LBX:  What were the market drivers behind the development of AT&T Toggle?

KHAN:  There are two converging trends taking place. One is that mobile devices are becoming expensive for companies to procure. Second is that IT managers are in a technology race they cannot win. Devices and technology are changing too fast and IT managers are operating in an environment that is increasingly difficult and too costly to control.

There are four key issues for IT managers in the management of mobility:

1. to ensure that the devices in the hands of the employees are secure,
2. to make sure corporate policies are extended to the devices,
3. to manage the applications on the devices, and
4. to monitor how enterprise apps are used in the workplace.

We launched AT&T Toggle and ToggleHub to allow the IT manager to provision a container on an employee’s mobile phone. This gives the IT administrator complete control over that container, fully secured and password protected. A geo-fence can be placed around the usage of the device to restrict access to the container outside a geography, or restrictions can be based on time. For example a union worker can only access the work related features within a certain radius from the workplace or within a shift time.

LBX:  How does AT&T Toggle work?

KHAN:  AT&T Toggle creates a container on the mobile device that is accessible by the IT manager. For the personal side of the device, the IT
adminstrator has no visibility into the employee’s personal usage in terms of applications or location. The container has ToggleHub as the enterprise app store and the method for downloading content and applications. We also plan to bundle AT&T Toggle with anti-virus software to address increasing security concerns resulting from malware trends in mobile devices, in particular Android devices.


Toggle Custom Application Features

TOGGLEHUB – Allows simple access to the latest corporate-approved mobile business apps, tools, and content.

TOGGLE MAIL – Enables access to corporate Exchange servers for approved and managed email on the device.

TOGGLE CONTACT – Supports two-way synchronization of corporate contacts.

TOGGLE BROWSER – Provides a secure internet browser inside the Toggle workspace

TOGGLE CALENDAR – Enables access to corporate calendar.

TOGGLE MESSENGER – Includes a user-friendly experience such as push
alerts from the enterprise to users.

TOGGLE GPS – enables the end user to control GPS locate functionality of the device.

TOGGLE ENCRYPTION – The end user is able to view encrypted attachments. An encrypted copy of an attachment is stored in the cache (temporarily) and then it is decrypted when viewed by a third party app (PDF reader, etc).


LBX: How is AT&T Toggle being received in the marketplace?

KHAN:  We launched AT&T Toggle in the Fall of 2011 and only on Android devices. We recently announced AT&T Toggle’s availability on iOS and may expand to other major mobile operating systems. We are still in beta and have been getting incredible feedback from our customer trials of large and mid-market customers.


AT&T Toggle does not create a shield to other applications or data collection means. It merely protects the privacy of the user, when in ‘personal’ mode, from the employee’s IT administrator.


LBX: How is AT&T Toggle dealing with privacy concerns?

KHAN:  Regarding employer-procured devices it is important to remember that the organization sets specific policies and can monitor the entire device if they want. However, if the employee brings his own device, then the IT administrator only has access to the work container. That means that the company does not have access to the employees’ personal usage of the device. Regarding location information, the IT administrator does have access to location data within the work container and can chose to enable or disable this feature. AT&T Toggle does not protect the mobile user from the collection of location data that occurs through the network, applications
or the mobile device. It does not create a shield to other applications or data collection means. It merely protects the privacy of the user, when in “personal” mode, from the employee’s IT administrator.


AT&T Toggle Manager Features

TOGGLEHUB PORTAL – Administrators can deploy corporate-approved custom and third-party applications, enforce specific licensing terms, and track app usage by groups and users through one portal.

DEVICE INVENTORY – Administrators have access to device details ranging from model number to business applications loaded and policy settings.

TOGGLE DEVICE MANAGEMENT – Administrators have the ability to manage individual devices with a range of options from screen lock to workspace wipe.

TOGGLE POLICY MANAGEMENT – Allows the administrator to set policies for users at a company-wide level or at a group level.

TOGGLE SECURITY – Data is pushed directly from the company application to the company server over Secure Socket Layers (if the enterprise server developed with SSL).


LBX: How does the employee really know that they are no longer being monitored when in “personal” mode?

KHAN: There is still a fair amount of education that needs to take place to make sure that the employee is comfortable. AT&T Toggle was designed to limit the IT administrator’s reach.

LBX:  How much will AT&T Toggle cost the enterprise?

KHAN:  The AT&T Toggle solution is $6.50 per device, per month with a minimum 20 licenses per order. This includes the antivirus software, basic support, Toggle-Hub and AT&T Toggle workspace. There is also a one-time configuration and training charge of $750.


A geo-fence can be placed around the usage of the device to restrict access to the container outside a geography, or restrictions can be based on time. For example, a union worker can only access the work related features within a certain radius from the workplace or within a shift time.”


LBX:  How much training is needed?

KHAN:  AT&T Toggle is a cloud-based service, which makes it easy to use. But it still requires some training…4 hours of training for the IT manager, and no training for the user.

LBX: Where do you see AT&T Toggle going in the future?

KHAN: We see AT&T Toggle moving to provisioning separate voice and data plans on a single device. This would enable separate billing between personal and work usage, and would complete the journey of one device. It also raises ownership issues. The container is owned by the enterprise and connectivity to and from the device is the responsibility of the enterprise. AT&T Toggle allows you to partition the device…almost like creating a time share for the mobile device.


khanimage Mobeen Khan is the Executive Director of Marketing for Advanced Mobility Solutions, a business unit of AT&T Business and Home Solutions. His responsibilities include marketing strategy and execution for AT&T’s broad portfolio of mobile enterprise solutions for business and government customers of all sizes.