Context based dynamically switching device configuration

• US 9,609,022 B2
• Filed: 12/10/2014
• Issued: 03/28/2017
• Est. Priority Date: 12/10/2014
• Status: Active Grant

• Current Assignee: Sybase Incorporated (SAP SE)
• Original Assignee: Sybase Incorporated (SAP SE)
• Inventors: Mamidi, Sumanth, Gupta, Keshav, Basrur, Hemanth
• Primary Examiner(s): CHANG, KENNETH W
• Application Number:
  US14/565,424
• Publication Number:
  US 20160173531A1
• Time in Patent Office: 839 Days
• US Class Current: 1/1
• CPC Class Codes: G07C 2009/00825 remotely by lines or wireless communication
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Various embodiments of systems and methods for dynamically switching device configuration based upon context are described herein. In an aspect, the method includes reading a tag attached to an entry gate of a restricted area through a device. Upon reading the tag, an application is executed to connect the device to a mobile device management (MDM) server. Upon establishing the connection, the restricted area identifier (ID) is sent to the MDM server. The device receives one or more policies applicable for the restricted area from the MDM server. The received one or more policies are executed on the device to change the device configuration. After execution, the device sends a confirmation message to the MDM server to indicate that the device is policy complaint. Upon receiving the confirmation, the MDM server instructs to open the entry gate to allow the device within the restricted area.

Claims

1. A non-transitory computer readable storage medium storing instructions, which when executed by a computer cause the computer to perform operations comprising:

at a device, receive a command from a tag to connect the device to a mobile device management (MDM) server;

based on the command, connect the device to the MDM server;

automatically install a tag reader on the device corresponding to the tag upon successful registration of the device;

send a restricted area identifier (ID) identifying a restricted area to the MDM server;

from the MDM server, receive one or more area specific policies for the restricted area;

apply the received one or more area specific policies on the device to change configuration of the device; and

send a confirmation message to the MDM server to indicate that the configuration of the device is changed based on the one or more area specific policies, to allow the device to enter the restricted area.

2. The computer readable medium of claim 1, wherein the tag is adjacent to an entry gate of the restricted area.

3. The computer readable medium of claim 1, wherein the restricted area ID and the command are read from the tag through a tag reader installed on the device.

4. The computer readable medium of claim 1, wherein applying the received one or more area specific policies comprises one of switching off a camera of the device, switching off radio transmission of the device, disabling Wi-Fi connection of the device, disabling internet connection of the device, disabling the device, switching off Bluetooth of the device, switching on recorder of the device, disabling the recorder of the device, putting off alarm of the device, putting off notification on the device, authenticating a user carrying the device, putting the device in silent mode, sending an alert to an administrator and blow an alarm on the device after a predefined time period from the entry of the device in the restricted area.

5. The computer readable medium of claim 1 further comprising instructions, which when executed by the computer cause the computer to perform operations comprising:

receive a request from the MDM server to withdraw the applied one or more area specific policies when the device is outside the restricted area; and

based upon the received request, withdraw the applied one or more area specific policies to revert the device to original configuration.

6. The computer readable medium of claim 1 further comprising instructions, which when executed by the computer cause the computer to perform operations comprising at least one of:

requesting a security unit to open at least one of an entry and exit gate whenever the device is swiped at one of the entry and exit gate from inside the restricted area;

instructing an application to store the one or more area specific policies related to the restricted area in a device local database for a predefined time period once the one or more area specific policies are applied on the device to allow subsequent execution of the one or more area specific policies on the device without connecting to the MDM server whenever subsequently the device tries to enter the restricted area within the predefined time period;

receiving a notification of change in the received one or more area specific policies;

based upon the received notification, withdrawing the one or more area specific policies stored in the device local database and connecting to the MDM server for receiving the changed one or more area specific policies for the restricted area;

instructing the application to track a movement of the device and store tracking information comprising at least date, time, and area ID in the device local database; and

instructing the application to upload the tracking information onto at least one of the MDM server and a tracking unit, wherein the tracking information is uploaded after at least one of a predefined time interval and connection with the at least one of the MDM server and the tracking unit is established.

7. The computer readable medium of claim 1 further comprising instructions, which when executed by the computer cause the computer to perform operations comprising:

upon determining that an area specific policy of the one or more area specific policies are violated within the restricted area, sending an alert to at least one of the MDM server and an administrator to inform about the violation of the area specific policy along with the restricted area ID and information of the device.

8. The computer readable medium of claim 1, wherein the device is registered with the MDM server by:

determining whether a device registration portal is accessed from the device; and

upon determining that the device registration portal is accessed from the device, automatically retrieving an ID of the device from an operating system of the device.

9. The computer readable medium of claim 8, wherein the device registration portal authenticates a user carrying the device prior to registering the device.

10. The computer readable medium of claim 8, wherein upon registering the device, the MDM server automatically installs a tag reader corresponding to the tag on the device.

11. A computer-implemented method for dynamically switching device configuration based upon context, the method comprising:

at a device, receiving a command from a tag to connect the device to a mobile device management (MDM) server;

based on the command, connecting the device to the MDM server;

automatically installing a tag reader on the device corresponding to the tag upon successful registration of the device;

sending a restricted area identifier (ID) identifying a restricted area to the MDM server;

from the MDM server, receiving one or more area specific policies for the restricted area;

applying the received one or more area specific policies on the device to change the device configuration; and

sending a confirmation message to the MDM server to indicate that the device configuration is changed based on the one or more area specific policies, to allow the device to enter the restricted area.

12. The computer-implemented method of claim 11 further comprising:

receiving a request from the MDM server to withdraw the applied one or more area specific policies when the device is outside the restricted area; and

based upon the received request, withdrawing the applied one or more area specific policies to revert the device to original configuration.

13. A computer system for dynamically switching device configuration based upon context comprising:

at least one memory to store executable instructions; and

at least one processor communicatively coupled to the at least one memory, the at least one processor configured to execute the executable instructions to;

at a device, receive a command from a tag to connect the device to a mobile device management (MDM) server;

based on the command, connect the device to the MDM server;

automatically install a tag reader on the device corresponding to the tag upon successful registration of the device;

send a restricted area identifier (ID) identifying a restricted area to the MDM server;

from the MDM server, receive one or more area specific policies for the restricted area;

apply the received one or more area specific policies on the device to change the device configuration; and

send a confirmation message to the MDM server to indicate that the device configuration is changed based on the one or more area specific policies, to allow the device to enter the restricted area.

14. The system of claim 13, wherein the processor is further configured to execute the executable instructions to:

upon determining that an area specific policy of the one or more area specific policies are violated within the restricted area, sending an alert to at least one of the MDM server and an administrator to inform about the violation of the area specific policy along with the restricted area ID and information of the device.

15. The system of claim 13, wherein the processor is further configured to execute the executable instructions to:

receive a request from the MDM server to withdraw the applied one or more area specific policies when the device is outside the restricted area; and

based upon the received request, withdraw the applied one or more area specific policies to revert the device to original configuration.

16. A computer system for dynamically switching device configuration based upon context comprising:

at least one memory to store executable instructions; and

at least one processor communicatively coupled to the at least one memory, the at least one processor configured to execute the executable instructions to;

identify a device requesting to enter a restricted area;

authenticate a user carrying the device by inquiring at least one of a user ID and name;

upon successful authentication of the user, authenticate the device based upon a device ID retrieved from an operating system (OS) of the device and mapping the retrieved device ID with IDs of devices registered with the computer system;

upon successful authentication of the device, send one or more area specific policies related to the restricted area to the authenticated device;

instruct the device to cache the one or more area specific policies related to the restricted area in a local database of the device for a predefined time period;

and

upon unsuccessful authentication of at least one of the user and the device, send a command not to allow the device in the restricted area.

17. A computer system of claim 16, wherein the command is sent to one of a security unit controlling access to the restricted area and a lock attached to an entry gate of the restricted area.

18. A computer system of claim 16, wherein the processor is further configured to execute the executable instructions to:

receive a confirmation message from the device that the device configuration is changed based on the one or more area specific policies; and

based upon the received confirmation message, send a command to one of a security unit controlling access to the restricted area and a lock attached to an entry gate of the restricted area to allow the device in the restricted area.

19. A computer system of claim 16, wherein the processor is further configured to execute the executable instructions to:

determine whether the device is outside the restricted area; and

upon determining the device is outside the restricted area, send a command to the device to withdraw the applied one or more area specific policies to revert the device to original configuration.

20. A computer system of claim 16, wherein the processor is further configured to execute the executable instructions to:

prior to sending the one or more area specific policies, determine a profile of a user carrying the device;

based upon the user'"'"'s profile, modify the one or more area specific policies; and

send the modified one or more area specific policies to the authenticated device.