Mobile Device Auditing System for Feature Compliance Logging

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions for managing mobile devices in sensitive working environments are overly restrictive, as they either deactivate device features completely or use geo-position-based deactivation methods that lack context sensitivity, failing to log device feature utilization effectively.

Innovation Solution

A system and method that logs and monitors the utilization of mobile device features, allowing them to remain active while sending data to an auditing component for compliance, using a combination of mobile device management, geo fencing, and auditing to provide detailed logs and notifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If device features are deactivated to ensure compliance, then security is improved, but functionality is worsened

Engineering Contradiction:
ImprovecomplianceVSAvoidfunctionality
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

Instead of deactivating device features to ensure compliance, the patent inverts the approach by keeping features active and logging their usage. The auditing component monitors and records when features like camera, microphone, or GPS are used, allowing functionality to remain while compliance is maintained through visibility and accountability of feature usage.

Inventive Principle:
Principle #13The other way round (Inversion)

2Reliability

If geo-fencing is used to control device features, then location-based compliance is improved, but context sensitivity is worsened

Engineering Contradiction:
Improvelocation-based complianceVSAvoidcontext sensitivity
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the compliance control mechanism into multiple independent components: geo-fencing for location-based rules, feature-specific logging for individual device features, and context-aware auditing for comprehensive monitoring. This segmentation allows each component to operate independently with its own rules, enabling fine-grained control that is both location-based and context-sensitive.

Inventive Principle:
Principle #1Segmentation

3Reliability

If device features are completely deactivated, then security control is improved, but user productivity is worsened

Engineering Contradiction:
Improvesecurity controlVSAvoiduser productivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements feedback mechanisms where the auditing component continuously monitors device feature usage and provides information to administrators. This feedback loop allows security control without complete deactivation, as administrators can review logs and take action only when necessary, rather than preventing all feature usage upfront. Users maintain productivity while security is enforced through monitoring and selective intervention.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS9749453B2Relaxation of mobile device features restrictions leveraging embedded auditing system
Publication Date: 2017.08.29 SAP SE
  • US9749453B2 patent drawing
  • US9749453B2 patent drawing
  • US9749453B2 patent drawing

AI summary

Relaxation of mobile device features restrictions leveraging embedded auditing systems is presented. One or more managed applications are designated on the mobile device via a software plug-in to an application management adapter running on the mobile device, each of the one or more managed applications being associated with at least one mobile device feature that generates data related to a local environment of the mobile device. A front-end auditing component captures the data generated by the at least one mobile device feature, which transmits the data to a backend auditing component. The backend auditing component logs the data, and a notification of an event associated with the data is generated for one or more designated recipients.