Perimeter Restriction System for Mobile Device Function Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technical limitations in restricting mobile device functions in secure perimeters are inadequate, often requiring device removal, which disrupts legitimate use and poses physical challenges for users.
Innovation Solution
A device function restricting system that uses a perimeter restriction channel to transmit credentials and security policies to devices, enabling selective function disabling based on these policies, with a communication system, server, and alarm system to monitor and enforce compliance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device removal is used to prevent unauthorized use in secure perimeters, then security reliability is improved, but user convenience and device availability deteriorate
Solution Approach 1:
The device functions are segmented into restricted and non-restricted categories. The system selectively disables only specific functions (camera, microphone, speaker, display) while leaving other functions operational, allowing users to maintain essential communication capabilities while preventing security violations.
Solution Approach 2:
The system dynamically adjusts device functionality based on location. When the device enters a secure perimeter, the system automatically activates function restrictions through policy enforcement. When exiting the perimeter, restrictions are lifted. This dynamic approach maintains security reliability while preserving user convenience outside restricted areas.
2Reliability
If complete device removal is implemented in secure perimeters, then information leakage prevention is improved, but device availability for legitimate use deteriorates
Solution Approach 1:
The system extracts and disables only the specific functions that pose security risks (camera for photographing, microphone for recording, speaker for audio output, display for visual output) while leaving the communication device itself operational. This selective extraction prevents information leakage through restricted functions while maintaining device availability for legitimate communication purposes.
Solution Approach 2:
Different quality states are applied to different device functions within the same device. Restricted functions are disabled while non-restricted functions remain fully operational. This local differentiation allows the device to coexist in secure perimeters with modified functionality, preventing information leakage while maintaining productivity for allowed operations.
3Reliability
If device functions are completely disabled in secure perimeters, then security policy compliance is improved, but user communication needs are not met
Solution Approach 1:
The system segments device functions into restricted and non-restricted categories based on security policy requirements. Communication functions such as voice calling and text messaging are classified as non-restricted and remain operational, while functions like camera, microphone, speaker, and display are restricted. This segmentation allows the device to comply with security policies while maintaining adaptability for essential communication needs.
Data Source
AI summary
An apparatus and method for restricting the functions of a device are provided. A restriction monitoring system includes a communication system that provides a location-limited communication channel that detects whether a device entering a perimeter is in an area for device inspection, a server that provides a credential and a security policy to the device and receives a report on whether the device violates the security policy through the location-limited communication channel, and an alarm system which triggers a security alarm when the device violates the security policy.