SMS Management Commands for Offline Device Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a bring-your-own-device (BYOD) enterprise setting, mobile devices may lack network connectivity, preventing the execution of management commands to erase enterprise data or perform factory resets, thereby exposing sensitive information to unauthorized users.
Innovation Solution
The implementation of short message service (SMS) messages or voice calls to transmit management commands, including authentication strings, to client devices, allowing them to execute security actions even without network connectivity, ensuring data protection and compliance with enterprise rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If management commands are transmitted over a network data connection, then the device can receive commands to erase data or perform factory reset, but the device cannot receive commands when network connectivity is lost
Solution Approach 1:
The patent introduces SMS messaging as an intermediary communication channel between the management service and the client device. When network connectivity is unavailable, the management service can transmit commands via SMS messages to the device's cellular modem, which then relays the commands to the management component. This intermediary approach ensures command delivery reliability regardless of network connection status.
Solution Approach 2:
The patent adds a new dimension to command transmission by utilizing the cellular voice/SMS channel alongside the traditional data network channel. Instead of relying solely on network connectivity (one dimension), the system now has two independent communication paths: network data connection and cellular SMS/voice connection. This dimensional expansion provides adaptability when one channel is unavailable.
2Ease of operation
If the device uses standard network communication for management commands, then integration with enterprise networks is simple, but the device cannot execute commands when disconnected from the network
Solution Approach 1:
The patent implements preliminary action by pre-configuring the device with a management component that can receive and execute commands through multiple channels. The device is预先 equipped with the capability to handle SMS messages containing management commands, so when disconnected from the network, it can still execute data erasure or factory reset commands without requiring real-time network connectivity.
3Reliability
If management commands require network connectivity for transmission, then security protocols are simplified, but enterprise data remains vulnerable when devices are lost or stolen without network access
Solution Approach 1:
The patent makes the communication infrastructure universal by enabling the device to handle multiple types of communication protocols through a single management component. The management component can process commands arriving via network data connections, SMS messages, or voice calls, all of which are routed through the same command execution pathway. This multi-functionality ensures data security without requiring separate security protocols for each communication channel.
Data Source
AI summary
Disclosed are various examples of transmitting management commands to a device using a short message service (SMS) message or voice call. A device may lack network connectivity with a management service. Network capabilities of the device may be disabled or impaired. The management service can generate a SMS message or voice call that includes the management command. The SMS message or voice call can be transmitted to the client device over a cellular network. The SMS message or voice call can include an authentication string with which the authenticity of the SMS message or voice call can be verified. The device can then execute the management command.