Decoupling Management Systems via Data-Driven Interfaces

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing management systems for enforcing enterprise security policies on diverse client devices, such as smartphones and laptops, face challenges in controlling features and enforcing policies due to intertwined components with various device platforms, operating systems, and manufacturers, making it difficult to support new features and platforms without updates.

Innovation Solution

A management system that decouples components from the platform, operating system, manufacturer, or type of client device, using a metadata transform service to generate data-driven interfaces and profile documents, allowing for dynamic rendering of user interfaces and device profiles, enabling administrators to enforce security policies without requiring updates to the management system components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If management system components are intertwined with specific device platforms and manufacturers, then the system can enforce security policies on known devices, but the system requires updates to support new platforms and features

Engineering Contradiction:

Improvesecurity policy enforcementVSAvoidsupport for new platforms and features

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the management system into distinct components: a platform-agnostic core engine and platform-specific adapters. The core engine handles security policy enforcement through standardized interfaces, while separate adapters handle platform-specific implementations. This allows the core system to remain stable and reliable while adapters can be updated or added to support new platforms without affecting the core functionality.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces platform adapters as intermediary components between the management system core and diverse device platforms. These adapters translate platform-specific features and capabilities into standardized interfaces that the core security policy engine can understand and enforce. This intermediary layer enables the system to support new platforms without requiring changes to the core enforcement logic.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If management system components are updated to support new features and platforms, then the system can maintain adaptability, but the complexity of the management system increases

Engineering Contradiction:

Improvesupport for new platforms and featuresVSAvoidmanagement system structure

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

By segmenting the system into a stable core and extensible adapters, the patent reduces overall complexity. The core remains simple and focused on security policy enforcement, while platform-specific complexity is isolated in separate adapter modules that can be developed, tested, and maintained independently.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent creates a universal adapter framework that can handle multiple platforms through a common interface structure. This universal design allows the same adapter architecture to work across different platforms, reducing the need for completely separate implementation code for each platform and thereby reducing overall system complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of manufacture

If management system components are tightly coupled with device platforms, then the system can optimize for specific platforms, but it becomes difficult to control features without updates to management system components

Engineering Contradiction:

Improveplatform optimizationVSAvoidfeature control

Core Design Contradiction:

Ease of manufactureVSEase of operation

Solution Approach 1:

The platform adapters serve as intermediaries that maintain optimized access to platform-specific features while presenting a standardized control interface to the management system core. This allows administrators to control features through uniform commands without needing to understand or update platform-specific implementations.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

By separating platform optimization logic into independent adapters, the patent allows each adapter to be optimized for its specific platform while the core management system remains platform-agnostic. This segmentation enables easy feature control through the standardized core interface without requiring changes to the optimization logic in the adapters.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS11916962B2Data driven interfaces for decoupling components of a management system from manufacturer and platform of managed client devices

Publication Date: 2024.02.27 OMNISSA LLC

AI summary

Disclosed are examples related to data driven interfaces for decoupling management system components from a manufacturer or a platform of client devices managed by the management system. In some examples, among others, a system can generate a data driven interface template that can be used to cause rendering of a data driven user interface for configuring a profile payload of a device profile for the client device. The system can generate, based on values associated with the data driven user interface, a profile document in an instance in which values are obtained from the data driven user interface. In some aspects, the profile document is a generic representation of the profile payloads for the platform, the manufacturer or the type of the client device.