DEVICE MANAGEMENT BASED ON WIRELESS BEACONS

• US 20160037333A1
• Filed: 10/13/2015
• Published: 02/04/2016
• Est. Priority Date: 04/16/2014
• Status: Active Grant

• Current Assignee: JAMF Software, LLC (Jamf Holding Corp.)
• Original Assignee: JAMF Software, LLC (Jamf Holding Corp.)
• Inventors: Amundsen, Nicholas, Sippert, Rebekah, Ingraham, Cyrus IV, Becker, Bradley, Levenhagen, Eric
• Granted Patent: US 10,313,874 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 3/1454 involving copying of the display data of a local workstation or window to a remote workstation or window so that an actual copy of the data is displayed simultaneously on two or more displays, e.g. teledisplay
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A particular method includes detecting, at a managed computing device, a signal from a wireless beacon device via a first wireless connection. The signal is detected while particular functionality is inaccessibly at the managed computing device. The method further includes, in response to detecting the signal, transmitting a first message from the managed computing device to a device management server via a second wireless connection, where the first message identifies the wireless beacon device. The method further includes receiving, at the managed computing device in response to the identification of the wireless beacon device in the first message, a second message that grants the managed computing device access to the particular functionality while the managed computing device is within a transmission range of the wireless beacon device.

Claims

1. A method comprising:

detecting, at a managed computing device, a signal from a wireless beacon device via a first wireless connection, wherein the signal is detected while particular functionality is inaccessible at the managed computing device;

in response to detecting the signal, transmitting a first message from the managed computing device to a device management server via a second wireless connection, wherein the first message identifies the wireless beacon device; and

receiving, at the managed computing device in response to the identification of the wireless beacon device in the first message, a second message that grants the managed computing device access to the particular functionality while the managed computing device is within a transmission range of the wireless beacon device.

2. The method of claim 1, further comprising:

detecting, at the managed computing device, an exit of the managed computing device from the transmission range of the wireless beacon device;

in response to detecting the exit, transmitting a third message from the managed computing device to the device management server, wherein the third message indicates the exit; and

receiving, at the managed computing device from the device management server in response to the third message, a fourth message that revokes access by the managed computing device to the particular functionality.

3. The method of claim 2, wherein the exit from the transmission range is detected based on:

a detected absence of the signal;

a signal strength of the signal being less than a threshold;

a second signal strength of a second signal associated with a second wireless beacon being greater than the signal strength of the signal;

or

any combination thereof.

4. The method of claim 1, wherein the first wireless connection comprises a personal area network connection.

5. The method of claim 1, wherein the second wireless connection comprises an IEEE 802.11 connection, a fourth generation (4G) connection, or a third generation (3G) connection.

6. The method of claim 1, wherein granting access to the particular functionality comprises providing an access credential for a wireless access point.

7. The method of claim 6, wherein the second message includes a certificate that enables communication via the wireless access point.

8. The method of claim 1, wherein granting access to the particular functionality comprises configuring the managed computing device to access a particular printer.

9. The method of claim 1, wherein granting access to the particular functionality comprises includes triggering installation of an application.

10. The method of claim 1, wherein the second message further includes at least one command to be executed by an operating system of the managed computing device.

11. The method of claim 1, wherein the signal carries an identifier associated with the wireless beacon and the first message includes the identifier.

12. A method comprising:

receiving, at a device management server, an input indicating that access to particular functionality is to be granted to a managed computing device that is within range of a wireless beacon device;

receiving a first message from a first managed computing device indicating that the first managed computing device is within range of the wireless beacon device; and

in response to the first message, initiating transmission of a second message to the first managed computing device granting the first managed computing device access to the particular functionality.

13. The method of claim 12, wherein initiating transmission of the second message includes requesting a push notification service to send an instruction to the first managed computing device to cause the first managed computing device to check-in with the device management server.

14. The method of claim 12, wherein the first message includes an identifier associated with the wireless beacon.

15. The method of claim 14, wherein the identifier is associated with a wireless beacon region associated with one or more transmission ranges of one or more wireless beacon devices.

16. The method of claim 15, wherein the device management server stores an association between the wireless beacon region and a rule indicating that access to the functionality is to be granted to managed computing devices in the wireless beacon region.

17. The method of claim 15, wherein the identifier includes one or more sub-identifiers that identify one or more sub-regions of the wireless beacon region.

18. The method of claim 17, wherein the device management server stores an association between a particular sub-region and a rule indicating that access to the functionality is to be granted to managed computing devices in the particular sub-region.

19. The method of claim 12, wherein granting access to the functionality includes granting the managed computing device access to a virtual private network (VPN).

20. A computer-readable storage device storing instructions that, when executed by a processor, cause the processor to perform operations including:

receiving, at a device management server, input indicating that access to particular functionality is to be granted to each computing device associated with a particular user that is within range of a wireless beacon device;

receiving a first message from a managed computing device associated with the user indicating that the managed computing device is within range of the wireless beacon device; and

in response to the first message, initiating transmission of a second message to the managed computing device granting the managed computing device access to the particular functionality.