Mobile Device Policy Enforcement via Integrated Communication Channel

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional mobile device management systems lack the ability to remotely enforce policies, leading to security issues such as unauthorized access to confidential information and non-compliance with corporate policies, and require dedicated hardware, resulting in inefficiencies and increased costs.

Innovation Solution

Implementing a policy delivery and enforcement logic integrated within the communication channel between mobile devices and servers, which proactively pushes down and enforces policies, verifies compliance, and denies service to non-compliant devices, allowing for flexible and extensible policy management without re-engineering the server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If dedicated hardware and separate communication channels are used for device management, then policy enforcement capability is improved, but system complexity and cost increase

Engineering Contradiction:
Improvepolicy enforcement capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges device management functionality with existing communication channels between mobile devices and servers. The policy enforcement logic is integrated into the synchronization process, eliminating the need for separate dedicated hardware and communication channels. This combining approach maintains reliable policy enforcement while reducing system complexity.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The existing communication infrastructure is made multi-functional by enabling it to handle both data synchronization and policy enforcement tasks. The server's communication channel serves dual purposes: transferring user data and delivering policy commands, thereby eliminating the need for dedicated management hardware.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If formal device management solutions with dedicated hardware are implemented, then policy enforcement is improved, but cost increases

Engineering Contradiction:
Improvepolicy enforcementVSAvoidcost
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

By combining policy enforcement with existing communication infrastructure, the patent eliminates the need for additional dedicated hardware purchases and maintenance, thereby reducing overall system cost while maintaining effective policy enforcement capability.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The mobile device's existing synchronization mechanism is leveraged to automatically receive and enforce policies without requiring separate management hardware or additional service channels, making the system cost-effective by utilizing already-deployed resources.

Inventive Principle:
Principle #25Self-service

3Productivity

If policies are pushed proactively from server to mobile device, then compliance speed is improved, but communication overhead increases

Engineering Contradiction:
Improvecompliance speedVSAvoidcommunication overhead
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The server proactively pushes policy updates to mobile devices before compliance issues arise, enabling immediate enforcement. Policies are delivered in advance during synchronization events, ensuring rapid compliance without waiting for device-initiated requests.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Policy enforcement is continuously integrated into the ongoing synchronization process between devices and servers. Rather than separate communication events, policy delivery occurs as part of the continuous data synchronization workflow, minimizing additional communication overhead.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS7516478B2Remote management of mobile devices
Publication Date: 2009.04.07 MICROSOFT TECHNOLOGY LICENSING LLC
  • US7516478B2 patent drawing
  • US7516478B2 patent drawing
  • US7516478B2 patent drawing

AI summary

Systems and methodologies that proactively push down and enforce policies of a server(s) on mobile devices, when such devices connect to the server(s) for data synchronization. The subject invention employs a policy delivery and enforcement logic that is integrated as part of a communication channel (e.g. a single communication channel) with the mobile device(s). A hand shake can take place between the mobile devices and the server every time that a new policy occurs. Accordingly, non-compliant devices are denied service from the server.