Action Management Agent for Enterprise Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing enterprise management solutions for mobile devices require users to actively select enterprise applications for tasks, leading to neglect or disregard of policies due to convenience or privacy concerns, resulting in unsecured enterprise data.

Innovation Solution

Implementing an action management agent on client devices to identify and manage individual actions, such as image capture, across native and third-party applications, using image recognition and context analysis to determine enterprise content and apply appropriate policies, ensuring secure storage and processing of enterprise data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If management service policies restrict device operations to protect enterprise data, then data security is improved, but user convenience and ease of operation deteriorate

Engineering Contradiction:
Improveenterprise data securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments device operations into individual actionable units that can be independently identified and managed. The action management agent breaks down user interactions into discrete actions, allowing selective application of enterprise policies only to relevant actions involving enterprise data, rather than restricting all device operations. This segmentation enables precise control that maintains security while preserving user convenience for non-enterprise tasks.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The action management agent serves as an intermediary between the user and enterprise data. It monitors and manages individual actions, determining whether each action involves enterprise data and applying appropriate policies accordingly. This intermediary layer enables automatic policy enforcement without requiring user awareness or active participation, thus maintaining security while preserving ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If users are required to actively select enterprise applications for tasks, then enterprise data security is improved, but productivity and time efficiency deteriorate

Engineering Contradiction:
Improveenterprise data securityVSAvoidtask completion efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The action management agent operates autonomously to identify and manage actions involving enterprise data without requiring user intervention. It automatically determines whether an action should be managed based on enterprise policies, eliminating the need for users to consciously select enterprise applications. This self-service approach maintains security while preserving natural user workflows and productivity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements continuous monitoring of device actions with automatic policy application based on real-time analysis. The action management agent receives feedback about user actions, determines enterprise data involvement, and applies appropriate policies dynamically. This feedback mechanism ensures security is maintained without requiring users to actively make decisions about application selection.

Inventive Principle:
Principle #23Feedback

3Reliability

If management service monitors all device actions to enforce policies, then enterprise data security is improved, but device complexity and processing overhead increase

Engineering Contradiction:
Improveenterprise data securityVSAvoidmanagement system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments monitoring into discrete actionable units rather than continuous comprehensive surveillance. The action management agent identifies specific actions that may involve enterprise data and applies policies only to those segments, reducing overall processing requirements and system complexity while maintaining security for relevant operations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The action management agent performs partial monitoring focused specifically on actions that may involve enterprise data, rather than exhaustive monitoring of all device operations. It applies enterprise policies selectively to relevant actions, reducing processing overhead and system complexity while maintaining adequate security coverage for enterprise data protection.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11721116B2Managing camera actions
Publication Date: 2023.08.08 OMNISSA LLC
  • US11721116B2 patent drawing
  • US11721116B2 patent drawing
  • US11721116B2 patent drawing

AI summary

Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one example, among others, a system includes a client device that is configured to display a camera user interface for capturing an image and identify an action that stores the image captured in the memory. An image tag that describes the image is generated. The client device is configured to determine that the image has enterprise content based on the image tag and determine an enterprise policy to apply to the enterprise content. Text content from the image is extracted based on the enterprise policy. The client device is configured to display a user interface that includes the text content extracted from the image and transmit the text content of the image to an application based on the enterprise policy.