Remote MDM Workflow Authorization via QR Code Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile device management systems require frontline managers to submit IT tickets for resolving issues on managed devices, leading to delayed remediation and potential device erasure, which disrupts frontline staff operations.
Innovation Solution
A manager device is authorized to initiate workflows on managed devices by scanning a unique code, enabling direct communication with a mobile device management server to perform tasks like unlocking or erasing devices, bypassing the need for IT administrator intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If frontline managers submit IT tickets for minor issues on managed devices, then IT administrators can resolve the issues, but remediation is delayed and frontline staff are negatively impacted
Solution Approach 1:
The patent enables frontline managers to self-service by directly initiating workflows on managed devices without requiring IT administrator intervention. The manager device can scan the unique code on the managed device and execute authorized actions (unlocking, erasing, reconfiguring) immediately, eliminating the ticket submission delay and enabling instant remediation while maintaining security through pre-configured authorization policies.
2Reliability
If IT administrators remotely erase managed devices, then device security is maintained, but additional re-configuration steps are required
Solution Approach 1:
The patent applies preliminary action by pre-configuring authorization policies that define which workflows can be initiated by manager devices under specific conditions. Instead of erasing devices and then re-configuring them, the system pre-establishes the rules and permissions that allow managers to perform necessary actions (including selective erasing and immediate reconfiguration) in a single authorized operation, eliminating the need for separate re-configuration steps.
3Productivity
If manager devices are authorized to initiate workflows on managed devices, then timely resolution is achieved, but system security requirements increase
Solution Approach 1:
The patent introduces an intermediary layer - the unique code and authorization policy system - that mediates between manager devices and managed devices. The unique code acts as a secure identifier that the manager device scans to verify authorization, while the mobile device management server enforces pre-configured policies. This intermediary mechanism enables fast, direct manager-to-device workflows while maintaining security through automated policy enforcement, avoiding the need for complex real-time authentication negotiations.
Data Source
AI summary
In certain aspects of the present disclosure, a computer-implemented includes generating a unique code for display on a managed device, and authorizing a manager device to selectively initiate at least one workflow on the managed device. The method includes, responsive to the manager device scanning the unique code, verifying the manager device is authorized. The method includes displaying on the manager device, based on verification that the manager device is authorized, an option corresponding to the at least one workflow. The method includes receiving, from the manager device, a selected workflow. The method includes, responsive to receiving the selected workflow, transmitting a message to a push notification server initiating the managed device to communicate with an MDM server. The method includes transmitting a command to the managed device causing performance of the selected workflow on the managed device. Systems and machine-readable media are also provided.