Context-Based Security Policy Adjustment for Mobile Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users face challenges in managing security and privacy policies on mobile devices, which can be complex and labor-intensive, often leading to inappropriate security settings due to user misunderstanding or inconvenience, such as unnecessary device locking and cumbersome content sharing processes.

Innovation Solution

A system that determines a safety score based on contextual factors, allowing for automatic adjustment and selection of security policies, including device locking mechanisms and content sharing settings, to enhance user experience while maintaining security by differentiating between trusted and untrusted environments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users manually manage security and privacy policies, then security control is maintained, but user effort and complexity increase significantly

Engineering Contradiction:
Improveease of security policy managementVSAvoidcomplexity of security policy management
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The system enables security policies to self-adjust based on contextual factors. The device automatically determines safety scores and selects appropriate security policies without user intervention, allowing the system to serve itself in managing security configurations based on real-time context assessment.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The security policy management system transitions from static manual configuration to dynamic automatic adjustment. The safety score and selected security policy change dynamically based on contextual factors such as location, time, and device state, enabling the system to adapt security levels automatically according to current conditions.

Inventive Principle:
Principle #15Dynamics

2Reliability

If strict security policies are applied, then security level is maintained, but user convenience and usability deteriorate

Engineering Contradiction:
Improvesecurity levelVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies different security policies to different contextual situations rather than using a uniform strict security approach. Based on the determined safety score from contextual factors, the system selects appropriate security policies that match the specific situation, providing strict security when needed and relaxed security when safe.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system changes security parameters dynamically based on the safety score. The safety score itself is a parameter that reflects contextual safety assessment, and the selected security policy parameters (such as locking requirements, content sharing restrictions) are adjusted according to this score, allowing flexibility in maintaining security while improving convenience.

Inventive Principle:
Principle #35Parameter changes

3Extent of automation

If context-based automatic security adjustment is implemented, then user effort is reduced, but system complexity increases

Engineering Contradiction:
Improveautomation of security policy selectionVSAvoidsystem complexity
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The system segments the security policy management process into distinct functional modules: context factor determination, safety score calculation, and security policy selection. This segmentation allows each module to handle specific tasks independently, making the overall automated system more manageable and less complex despite the increased automation level.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8898793B2Method and apparatus for adjusting context-based factors for selecting a security policy
Publication Date: 2014.11.25 NOKIA TECHNOLOGIES OY
  • US8898793B2 patent drawing
  • US8898793B2 patent drawing
  • US8898793B2 patent drawing

AI summary

An approach is provided for selecting a security policy. A security policy manager determines one or more factors for adjusting a safety score associated with a device. The safety score is based, at least in part, on a context associated with the device. The security policy manager then processes and/or facilitates a processing of the one or more factors and the safety score to calculate an adjusted safety score, and determines to select a security policy based, at least in part, on the adjusted safety score.