Deterministic Compliance Policy Enforcement for Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic management systems face challenges in enforcing compliance policies deterministically and efficiently, particularly when immediate changes are needed to address security issues, as the scheduling of compliance policy execution is often based on variable parameters like system load and device enrollment, leading to ineffective and unpredictable enforcement.
Innovation Solution
A method and apparatus for deterministic enforcement of compliance policies, which involves receiving compliance policy changes, estimating the time required for enforcement, determining the acceptability of this time based on stored parameters, and enforcing the changes when acceptable, thereby ensuring quick and resource-efficient policy updates across enrolled devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If compliance policy execution is scheduled based on current and expected system load, then system resources are optimized, but the enforcement time becomes unpredictable and delayed
Solution Approach 1:
The system performs preliminary actions by pre-calculating and storing the estimated enforcement time for compliance policies before actual enforcement is needed. When a policy change occurs, the pre-computed time estimate is immediately available, eliminating the delay of real-time calculation while still allowing resource optimization based on historical data and system capacity.
2Reliability
If compliance checks involve processing substantial information from all enrolled devices, then comprehensive compliance verification is achieved, but system computing resources are heavily consumed
Solution Approach 1:
The system applies local quality by tailoring the compliance check scope to the specific policy requirements. Different compliance policies are enforced with appropriate depth and breadth - some policies require full device inspection while others only need specific parameter verification. This selective approach ensures comprehensive verification where needed while conserving computing resources for less intensive checks.
3Productivity
If compliance policy enforcement is scheduled based on variable parameters, then system capacity is optimized, but deterministic enforcement timing cannot be guaranteed
Solution Approach 1:
The system implements feedback by continuously monitoring actual enforcement times and comparing them against estimated times. This feedback loop allows the system to refine its time estimation algorithms and adjust scheduling parameters based on real-world performance data, progressively improving both timing accuracy and system capacity utilization without sacrificing deterministic enforcement capabilities.
Data Source
AI summary
Methods, non-transitory computer readable media, and mobile application manager apparatus that assists with deterministic enforcement of compliance policy includes receiving one or more compliance policy changes. An estimated time to enforce the received one or more compliance policy changes on one or more enrolled mobile devices is identified. It is determined whether the identified estimated time to enforce the received one or more compliance policy changes is acceptable based on one or more stored parameters. The received one or more compliance policy changes on the one or more enrolled mobile devices is enforced when the identified estimated time is determined to be acceptable and updating existing one or more compliancy policies with the received one or more compliance policy changes.