Delegated Scope SDK for Secure Device Policy Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for managing delegated functionalities in devices face issues such as communication problems, loss of control, inefficiency, and the need for extensive updates due to changes in functionalities, leading to enterprise and device inefficiency.
Innovation Solution
A management-service-integrated scope delegation software development kit (SDK) that enables applications to implement features like delegation, monitoring, revocation, reclamation, and reassignment of delegated scopes, reducing the need for complete application updates and improving efficiency and power consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If third party applications are assigned delegated functionalities, then application versatility is improved, but control and security management deteriorates
Solution Approach 1:
The patent introduces a management service as an intermediary layer between the delegated functionality and third-party applications. This management service maintains control by mediating all interactions, allowing versatile application access while preserving security management capabilities through the intermediary control mechanism.
Solution Approach 2:
The patent implements feedback mechanisms where the management service continuously monitors application behavior and delegated functionality usage. This feedback loop enables the system to detect anomalies, track application success and failure, and maintain security control while allowing application versatility.
2Adaptability or versatility
If functionalities are updated, then system adaptability is improved, but device complexity and update requirements increase
Solution Approach 1:
The patent segments the functionality into modular components that can be independently updated. Instead of requiring complete application updates, the system allows granular updates of specific functionality modules, reducing device complexity and update overhead while maintaining system adaptability.
Solution Approach 2:
The patent creates a universal management service that handles multiple functionalities and applications through a common interface and control mechanism. This universal approach allows the system to adapt to different applications and functionalities without requiring separate update processes for each, thereby reducing overall device complexity.
3Reliability
If complete application updates are performed, then functionality reliability is improved, but power consumption and network bandwidth usage increase
Solution Approach 1:
The patent applies partial action by updating only the specific functionality components that need modification rather than performing complete application updates. This approach maintains functionality reliability for the updated portions while significantly reducing power consumption and network bandwidth usage compared to full application updates.
4Reliability
If complete application updates are performed, then functionality reliability is improved, but network bandwidth usage increases
Solution Approach 1:
The patent implements partial updates by transmitting only the specific functionality components that require updates over the network, rather than complete application updates. This maintains functionality reliability for the updated portions while reducing network bandwidth consumption and associated energy loss.
Data Source
AI summary
Disclosed are various approaches for management and monitoring of delegated scope on devices. In some examples, A management agent on a client device receives a scope delegation profile that specifies a scope to delegate from the management agent to a particular application. A scope delegation software development kit (SDK) consumed by the management agent invokes a function of an operating system (OS)-based policy manager to delegate the scope to the particular application. The management agent receives delegated scope data specifying that the particular application utilized the scope and provides it to the management service.


