Dynamic Lockout Policy for Mobile Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mobile computing devices face challenges in balancing convenience and security, as aggressive lockout policies can be onerous and lead users to adopt less secure authentication methods, while static policies fail to adapt to changing contexts such as location and user identity.

Innovation Solution

Implementing a dynamic lockout policy that adjusts lockout parameters based on contextual information, including location, device usage, and user identity, to provide varying degrees of security and convenience by activating or maintaining a lockout mode only when necessary.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If aggressive lockout policies are implemented to enhance security, then security is improved, but user convenience deteriorates and users may adopt less secure authentication methods

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements a dynamic lockout policy that adjusts lockout parameters based on contextual information such as device location, user behavior patterns, and authentication history. The system transitions from static to dynamic control by continuously monitoring context and adapting authentication requirements in real-time, allowing aggressive lockout only when security risks are detected while maintaining convenience during normal usage patterns.

Inventive Principle:
Principle #15Dynamics

2Device complexity

If static lockout policies are used to simplify system design, then device complexity is reduced, but adaptability to changing contexts such as location and user identity deteriorates

Engineering Contradiction:
Improvesystem design complexityVSAvoidcontextual adaptability
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The system incorporates feedback mechanisms that continuously monitor contextual parameters including device location, user identity, and authentication patterns. This feedback loop enables the lockout policy to automatically adjust based on real-time conditions, with the system detecting contextual changes and responding by modifying authentication requirements without requiring complex manual configuration.

Inventive Principle:
Principle #23Feedback

3Reliability

If frequent lock screen activations occur to maintain security, then security is improved, but device resources are consumed and user productivity decreases

Engineering Contradiction:
ImprovesecurityVSAvoiduser productivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent dynamically changes lockout parameters such as timeout duration, authentication method requirements, and lock trigger conditions based on contextual assessment. By adjusting these parameters in real-time according to security risk levels, the system maintains strong security posture when needed while reducing authentication frequency during low-risk periods, thereby conserving device resources and maintaining user productivity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10979896B2Managing dynamic lockouts on mobile computing devices
Publication Date: 2021.04.13 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US10979896B2 patent drawing
  • US10979896B2 patent drawing
  • US10979896B2 patent drawing

AI summary

A dynamic lockout technique for mobile computing devices is provided. A mobile computing device having a user interface in an active mode identifies foreign computing devices that are connected to a shared network. The mobile computing device determines determining that each foreign computing device is a recognized device, and in response, determines whether a paired device is in proximity to the mobile computing device based on a signal transmitted by the paired device. The mobile computing device maintains the active mode if the paired device is in proximity. The mobile computing device identifies a new foreign computing device that is connected to the shared network. The mobile computing device activates a lockout mode for the user interface while the paired device is in proximity to the mobile computing device if the new foreign computing device is an unrecognized device in proximity to the mobile computing device.