EP3921789A1 - Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm - Google Patents

Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm

Info

Publication number
EP3921789A1
EP3921789A1 EP20752513.0A EP20752513A EP3921789A1 EP 3921789 A1 EP3921789 A1 EP 3921789A1 EP 20752513 A EP20752513 A EP 20752513A EP 3921789 A1 EP3921789 A1 EP 3921789A1
Authority
EP
European Patent Office
Prior art keywords
mdm
processor
security
instructions
server computer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
EP20752513.0A
Other languages
German (de)
English (en)
Other versions
EP3921789A4 (fr
Inventor
Brian PEACOCK
Dale R. Liff
Stephen M. STROM
George Liff
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sennco Solutions Inc
Original Assignee
Sennco Solutions Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sennco Solutions Inc filed Critical Sennco Solutions Inc
Publication of EP3921789A1 publication Critical patent/EP3921789A1/fr
Publication of EP3921789A4 publication Critical patent/EP3921789A4/fr
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/88—Detecting or preventing theft or loss
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07G—REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS
    • G07G1/00—Cash registers
    • G07G1/12—Cash registers electronically operated
    • G07G1/14—Systems including one or more distant stations co-operating with a central processing unit
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B13/00—Burglar, theft or intruder alarms
    • G08B13/02—Mechanical actuation
    • G08B13/14—Mechanical actuation by lifting or attempted removal of hand-portable articles
    • G08B13/1409—Mechanical actuation by lifting or attempted removal of hand-portable articles for removal detection of electrical appliances by detecting their physical disconnection from an electrical system, e.g. using a switch incorporated in the plug connector
    • G08B13/1418—Removal detected by failure in electrical connection between the appliance and a control centre, home control panel or a power supply
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B13/00—Burglar, theft or intruder alarms
    • G08B13/02—Mechanical actuation
    • G08B13/14—Mechanical actuation by lifting or attempted removal of hand-portable articles
    • G08B13/1427—Mechanical actuation by lifting or attempted removal of hand-portable articles with transmitter-receiver for distance detection
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B13/00—Burglar, theft or intruder alarms
    • G08B13/02—Mechanical actuation
    • G08B13/14—Mechanical actuation by lifting or attempted removal of hand-portable articles
    • G08B13/1436—Mechanical actuation by lifting or attempted removal of hand-portable articles with motion detection
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • H04W12/126—Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/30—Security of mobile devices; Security of mobile applications
    • H04W12/37—Managing security policies for mobile devices or for controlling mobile applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/61—Time-dependent

Definitions

  • the disclosure relates generally to security monitoring of electronic merchandise on display.
  • the security mechanism is a tether that ties the merchandise to a display fixture.
  • the security mechanism is a security device, such as an electronic tag, affixed to the product and configured to support a proximity detection scheme in either case, the security mechanism attempts to deter theft while providing a consumer an opportunity to evaluate the product.
  • the security device may allow the consumer to lift or otherwise inspect the product to assess its function and/or aesthetics. Allowing the consumer to lift the product gives the consumer a better opportunity to assess the weight and feel of the product, as well as interact with the various features and other aspects of the product.
  • security devices and other security mechanisms may nonetheless undesirably restrict or inhibit consumer evaluation of the merchandise.
  • a method of monitoring a device on retail display includes receiving, by a processor of a server computer, a message from the device indicative of whether security instructions stored in a memory of the device are being executed on the device, determining, by the processor, whether time elapsed since the message was received exceeds a threshold, and if the time elapsed exceeds the threshold, sending, by the processor, a command to automatically cause the device to enter into a locked state.
  • a method of monitoring a device on retail display includes receiving, by at least one server computer, data indicative of whether a security trigger event has occurred in connection with the device, sending, by the at least one server computer, a request to the device that the device send a check-in message to the server computer, the check-in message being indicative of whether security instructions are being executed on the device, and sending, by the at least one server computer, a command to automatically cause the device to enter into a locked state if the check-in message is not received within a predetermined time period.
  • a system for providing security for a device on retail display includes a memory on which security monitoring instructions are stored, and a processor configured to execute the security monitoring instructions to implement a security monitoring service for the device.
  • the processor is further configured via execution of the security monitoring instructions to receive a message from the device indicative of whether security instructions stored in a memory of the device are being executed on the device, determine whether time elapsed since the message was received exceeds a threshold, and if the time elapsed exceeds the threshold, send a command to automatically cause the device to enter into a locked state.
  • Sending the command includes directing, by the processor, a mobile device management (MDM) server to cause the device to enter the locked state.
  • MDM mobile device management
  • Directing the MDM server includes generating, by the processor, an application programming interface (API) call to the MDM server.
  • the command includes a mobile device management (MDM) communication.
  • Sending the command includes sending, by the processor, the command to the device.
  • the method further includes receiving, by the processor, data indicative of a security trigger event involving the device.
  • the method further includes sending, by the processor in response to receiving the data, a command to lock ail devices at a retail location at which the device is located.
  • the method further includes sending, by the processor, a request to the device that the device check-in with the server computer to indicate that the security instructions are being executed on the device.
  • the message includes data
  • Sending the command includes directing, by the at least one server computer, a mobile device management (MDM) server, via an application programming interface (API) call to the MDM server, to cause the device to enter the locked state.
  • the command includes a mobile device management (MDM) communication.
  • Sending the command includes sending, by the at least one server computer, the command to the device.
  • the method further includes sending, by the at least one server computer in response to receiving the data, a command to lock all devices at a retail location at which the device is located.
  • the system further includes a mobile device management (MDM) server directed by the processor, via an application programming interface (API) call to the MDM server, to cause the device to enter the locked state.
  • MDM mobile device management
  • API application programming interface
  • the system further includes a management computer configured to send a further command to lock or unlock the device, and a command to lock ail devices at a retail location at which the device is located.
  • a method of establishing security monitoring functionality on a device on retail display includes obtaining, by a processor of a server computer, a mobile device management (MDM) startup message from the device, determining, by the processor, whether the device is enrolled for MDM supervision, and if the device is enrolled for MDM supervision, downloading, by the processor to the device, configuration data to support the MDM supervision and implementation of the security monitoring functionality.
  • MDM mobile device management
  • a method of establishing security monitoring functionality on a device on retail display includes obtaining, by a processor of a server computer, a mobile device management (MDM) startup message from the device, the MDM startup message being sent by the device as a result of a boot sequence implemented by the device, determining, by the processor, whether the device is enrolled for MDM supervision, and if the device is enrolled for the MDM supervision, downloading, by the processor to the device, configuration data to support the MDM supervision and implementation of the security monitoring functionality.
  • MDM mobile device management
  • a system for establishing security monitoring functionality for a device on retail display includes a memory on which security provisioning instructions and mobile device management (MDM) instructions are stored, and a processor configured to execute the MDM instructions to implement a MDM service for the device.
  • the processor is configured via execution of the security provisioning instructions to obtain a mobile device management (MDM) startup message from the device, determine whether the device is enrolled for MDM supervision, and if the device is enrolled for the MDM supervision, download configuration data to support the MDM supervision and implementation of the security monitoring functionality.
  • MDM mobile device management
  • the configuration data includes instructions of an MDM agent on the device, the MDM agent being configured to cause the device to enter into a locked state upon receipt of a command from the server computer.
  • the configuration data includes instructions of a security monitoring app on the device, the securing monitoring app being configured to monitor the device for a security trigger event.
  • the security monitoring app is further configured to communicate with a further server computer to indicate that the security monitoring app is operational.
  • the security monitoring app is further configured to provide a singie-app mode in which the device resides in response to an MDM command from the server computer to enter a locked state.
  • the device is configured to enable remote supervision via data stored in persistent memory, the data leading to the device sending the MDM startup message.
  • the data causes the device to contact an enrollment service, the enrollment service identifying the server computer as an MDM service for the device.
  • the method further includes determining, by the processor, whether the device has previously been provided with the MDM supervision by the server computer. If the device has not been previously provided with the MDM supervision, adding, by the processor, the device to an MDM service list of the server computer, and if the device has been previously provided with the MDM supervision, directing the device to enter into a locked mode after downloading the configuration data.
  • Obtaining the MDM startup message occurs while the device is implementing a boot sequence.
  • Obtaining the MDM startup message includes receiving the MDM startup message from the device.
  • the processor is configured via execution of the security provisioning instructions to determine whether the device has previously been provided with the MDM supervision, and the processor is configured via execution of the MDM instructions to direct the device to enter into a locked mode after the configuration data is downloaded if the device has been previously provided with the MDM supervision.
  • Figure 1 is a block diagram of a system for providing integrated security monitoring for an electronic device on retail display in accordance with one example.
  • FIG. 2 is a flow diagram of a method of establishing persistent security monitoring functionality for an electronic device on retail display using mobile device management (MDM) in accordance with one example.
  • MDM mobile device management
  • Figure 3 is a flow diagram of a method of providing security monitoring functionality for an electronic device on retail display using via a watchdog trigger check-in procedure in accordance with one example.
  • Figure 4 is a flow diagram of a method of managing integrated security protection services for an electronic device on retail display in accordance with one example.
  • the merchandise is or includes an electronic device. Aspects of the security monitoring techniques of the disclosed systems and methods are implemented by the electronic device itself. The security monitoring may thus be provided in a manner integrated with the electronic device on display.
  • the communications may be or include supervised mode communications, e.g., mobile device management (MDM) communications.
  • MDM mobile device management
  • the MDM or other supervision-related aspects of the disclosed methods and system may also be used to maintain the persistence of the security monitoring functionality on the device being protected.
  • the disclosed systems and methods implement the security monitoring techniques to support an automatic bricking or other benefit denial of the merchandise.
  • the device enters into a locked state upon occurrence of one or more trigger events.
  • the locked state may also be initiated via an operator of a management service.
  • the locked state may be an operational mode (e.g., a single app mode) of the security application (e.g., app) running on the device. Theft attempts are therefore deterred.
  • the integrated nature and other aspects of the security monitoring may permit the retail environment to avoid relying on tethers, security tags, proximity sensors, or other security mechanisms to deter theft.
  • the integrated security monitoring provided by the disclosed devices and methods may be used in conjunction with such other security
  • the security monitoring is provided in a persistent manner despite using elements installed on the device that are non-persistent. For example, operation of an agent or app installed on the device to provide or otherwise support the security monitoring may be discontinued by, for instance, a power cycle or device reset.
  • the security monitoring is nonetheless provided by the disclosed methods and systems in a persistent manner via MDM- or other supervision-related techniques to ensure that the elements are re-installed and operational.
  • the manner in which the security monitoring is provided is useful in connection with electronic devices that do not allow access to boot instructions or other firmware. Lack of access to the device firmware presents a technical problem. The firmware cannot be reconfigured to ensure that security monitoring instructions are persistently executed by the electronic device. Execution of the security monitoring instructions on the electronic device may thus be discontinued by a would-be thief or other user simply by, for instance, closing a security application (e.g , app), rebooting the device, or power cycling the device.
  • a security application e.g , app
  • the boot instructions may nonetheless be relied upon to support persistence and provisioning of the security monitoring functionality on the device in some cases, the boot instructions may enable the enrollment of the device in a supervision scheme or system. The execution of the boot instructions may thus provide an opportunity to confirm that the security monitoring functionality is installed on the device. In this way, a factory or other hard reset of the device that removes elements of the security monitoring functionality from the device may be thwarted.
  • the disclosed techniques differ from other attempts to deter theft via benefit denial by allowing such discontinuation. That is, the disclosed techniques allow, rather than prevent, a would-be thief to close the security application or otherwise terminate the execution of the security instructions on the electronic device.
  • the security application may be an application (e.g., app) that may be closed just like all other user-initiated applications.
  • the security application and/or other security instructions running on the electronic device are thus not persistent. For instance, the security instructions are not automatically or otherwise persistently executed due to storage in the firmware of the electronic device. Not relying on the firmware is useful, insofar as a manufacturer of the electronic device may not allow the firmware to be modified to include the security instructions
  • the disclosed techniques provide security monitoring and benefit denial - despite the possibility of discontinuation of a security monitoring routine on the device - by relying on DM- based or other supervision of the device.
  • the supervision allows the device to send and receive supervised mode communications via a supervisory computer (e.g., a supervisory server computer) associated with implementing the supervision.
  • the supervised mode communications involve a command to enter into a locked mode in other cases, the supervised mode communications involve provisioning the device with an agent, app, or other instructions or data used to implement the security monitoring functionality.
  • Some aspects of the security monitoring functionality involve a watchdog timing determination.
  • the security monitoring may involve determining whether too much time has passed since receipt of a check-in message from the device being monitored.
  • This timing analysis may be configured as a watchdog service implemented by a server computer. If too much time has passed since the previous message, the supervised mode communications are used to deliver a command to the electronic device to enter the locked mode.
  • the supervised mode communications may also be useful for maintaining the execution of the security instructions on the electronic device.
  • This aspect of the disclosed methods and systems addresses the possibility that a would-be thief doses the app or otherwise discontinues the security monitoring routine on the electronic device.
  • the supervised mode communications may be used to re-initiate the execution of the security instructions on the electronic device.
  • the supervised mode communications may also be used to re-download and/or re-install a security application or other security instructions. In this way, the persistence of the security monitoring is effectiveiy provided, albeit indirectly.
  • the disclosed methods and systems may provide the security monitoring services in conjunction with other integrated security services.
  • the security instructions running on the electronic device may receive commands or other instructions to lock the electronic device, e.g., as a result of an alarm detected by an alarm system. Such commands may also be manually initiated from a management computer, e.g., a server computer associated with the alarm system.
  • the security instructions may be configured to delay or prevent a lock - even when the check-in message was delayed - due to the absence of an alarm. In these ways, the decision to lock or not lock the electronic device may occur at the device or server level.
  • Integrated security monitoring presents a technical problem or challenge involving how to continue or sustain the implementation of the security monitoring if a user attempts to disable, shutdown, or otherwise discontinue the security monitoring. For instance, a user attempting to steal the electronic merchandise may close an application providing security monitoring, shutdown the electronic device, or perform a factory reset of the electronic device.
  • the disclosed devices and methods provide a technical solution(s) to this technical problem despite not having to rely on, for instance, (i) execution of security monitoring instructions in boot instructions during a boot (e.g., startup) sequence, (ii) storing security instructions on a persistent memory (e.g., as firmware) of the electronic device, (iii) execution of security monitoring instructions within a background service (as opposed to, for instance, an application running in the foreground or otherwise accessible to the user via a user interface), or (iv) special, proprietary background services, such as an Android Persistent Service (APS).
  • APS Android Persistent Service
  • the disclosed systems and methods address other technical problems and challenges presented by integrated security monitoring. For instance, the amount of space available In persistent memory may be limited. The disclosed methods and systems may conserve space in the persistent memory by effectively providing persistence without relying on or consuming persistent memory.
  • the disclosed systems and methods are not limited to any particular type of electronic merchandise or type of retail environment or site.
  • the integrated nature of the disclosed systems and methods allows the nature of the retail environment to vary considerably.
  • the retail site may be a kiosk rather than a standalone store with a dedicated entrance or exit.
  • the nature of the electronic merchandise may also vary considerably. While the disclosed methods and systems may be useful in connection with smartphones and other portable electronic devices, the electronic devices may or may not be handheld or portable. For instance, the disclosed systems and methods may be useful in connection with televisions and other large scale devices.
  • Figure 1 depicts a security system for providing security for an electronic device 100 on retail display.
  • the electronic device 100 may be merchandise for sale and/or part of an exhibit or other display of items for sale.
  • the electronic device 100 may be a smartphone, tablet, or laptop computer.
  • the electronic device 100 may or may not be considered to be or include a computer or computing device.
  • the electronic device 100 may be a television or monitor.
  • the size, form factor, and other characteristics of the electronic device 100 may thus vary considerably.
  • the retail display may be in a store or other retail site or environment.
  • the retail display may include one or more fixtures, such as a display stand, base, etc.
  • the retail display and environment may have other security monitoring systems in operation to prevent or deter theft of the electronic device 100 and other merchandise on display.
  • a wireless security system may be provided, such as the system described in U.S. Patent Publication No. 2016/0307415 (“Apparatus, System and Method for Monitoring a Device within a Zone”), the entire disclosure of which is hereby incorporated by reference.
  • tethers or other cable-based security measures may be used, including, for instance, cable- based apparatus having a retractable reel and other components for securing merchandise to a display fixture as described in U.S. Patent Publication No. 2014/0059828 (“Apparatus, System and Method for Securing, Attaching and/or Detaching a Device to a Fixture”), the entire disclosure of which is hereby incorporated by reference.
  • the electronic device 100 is configured to provide security monitoring or other security- related functions for itself.
  • Such seif-monitoring may replace or augment the security measures established by other items in the retail environment.
  • the seif-monitoring may provide redundancy, which may be useful in circumstances in which a site system fails or is otherwise disabled, or when the cutting of a tether or cable is not detected.
  • the self-monitoring may also be used as a theft deterrent as described herein.
  • the electronic device 100 includes a processor 102.
  • the processor 102 executes instructions to implement security monitoring methods as described herein.
  • the processor 102 may not be dedicated to implementing security-related tasks. Indeed, the processor 102 may be the primary processor of the electronic device 100. For instance, the processor 102 may be used to perform any number of non-security-related processing tasks or operations for the electronic device 100.
  • the processor 102 is or includes a central processing unit (CPU) or other general-purpose processing unit.
  • the processor 102 may be a microprocessor, microcontroller, programmable logic array (PLA), or field programmable gate array (FPGA).
  • the processor 102 is or includes dedicated or specific processing functionality.
  • the processor 102 may be or include a graphics processing unit (GPU), a digital signal processor (DSP), or other type of application-specific processor or processing unit in some cases, the processor 102 is implemented as an application-specific integrated circuit (ASIC).
  • the processor 102 may include one or more processing cores or other units integrated with one another to any extent.
  • the processor 102 may be provided on one or more integrated circuits or integrated circuit (iC) chips.
  • the processor 102 may be integrated with one or more other components of the electronic device 100, such as a memory unit or a communications module.
  • the processor 102 is a component of a system-on-a-chip (SoC).
  • SoC system-on-a-chip
  • the electronic device 100 includes one or more memory units on which instructions are stored. The instructions configure the processor 102 or other cause the processor 102 to implement tasks or other operations.
  • the electronic device includes a random access memory (RAM) or other volatile memory 104 and a persistent memory 106. Both of the memories 104, 106 may be directly addressable and accessible by the processor 102 via, for instance, a memory bus.
  • the persistent memory 106 may be read-only memory (ROM) or other non-volatile memory.
  • Firmware for the electronic device 100 may be stored on the persistent memory 106.
  • Each of the RAM 104 and the persistent memory 106 may include one or more memory units or memories (e.g., memory chips).
  • the electronic device 100 includes one or more user interfaces 108 and one or more communication modules 1 10.
  • the user interface 108 establishes the manner in which a user interacts or otherwise uses the electronic device 100.
  • the user interface 108 may include a display, such as a touchscreen.
  • Alternative or additional user interfaces may be provided, including, for instance, a keyboard, speaker, microphone, or other inpui/output device.
  • the communication module 1 10 supports
  • the communication module 1 10 may include an antenna, a transceiver, and/or other components for supporting the communications.
  • the communications may be in accordance with various communication protocols.
  • the electronic device 100 also includes a storage device 1 12 Data stored on the storage device 1 12 is not directly addressable by the processor 102, in contrast to the memories 104, 106. In the example shown, data on the storage device 1 12 is copied to the RAM 104 prior to use by the processor 102.
  • the storage device 1 12 may be or include flash storage in the form of a solid state drive (SSD). Alternatively or additionally, the storage device 1 12 is or includes a hard disk drive.
  • the storage device 1 12 may include one or more storage devices. The configuration, construction, storage technology, and other characteristics of the storage device 1 12 may vary.
  • Boot instructions 1 14 are stored on the persistent memory 106.
  • the boot instructions 1 14 are stored as firmware of the electronic device 100
  • the firmware of the electronic device 100 may thus include the boot instructions 1 14 in some cases.
  • the processor 102 is configured to execute the boot instructions 1 14 during a boot sequence of the electronic device 100.
  • the boot sequence may be any startup sequence, including, for instance, a sequence implemented at a power cycle, power-on, factory or other reset, or other restart or startup.
  • the boot instructions 1 14 are implemented as a basic input/output system (BIOS) routine or a portion thereof in other cases, the boot instructions 1 14 may be called by a BIOS routine as, for instance, a subroutine.
  • BIOS basic input/output system
  • the boot instructions 1 14 are not limited to instructions set forth in, or called by, a BIOS routine.
  • the boot instructions 1 14 may be implemented in connection with a loading of an operating system for the electronic device 1 14.
  • the boot instructions 1 14 may include instructions directed to supervision of the electronic device 100. Execution of the supervision instructions by the processor 102 may involve generation of a message during the boot sequence to establish whether the device 100 will reside in a supervised mode. As described herein, the message may be sent to a server computer having a data store identifying those devices as being enrolled in a supervision program. In the example of Figure 1 , the message is sent to a Device Enrollment Program (DEP) server 180, which may be useful in connection with establishing supervision of mobile devices manufactured by Apple Computer and operating the iOS operating system. The message may inciude a device identification number (ID) 124, such as a serial number or international mobile equipment identity (IMEI) number. Other servers and service arrangements may be used in connection with other devices and operating systems. The supervision instructions may thus ultimately cause the device 100 to run in a supervised mode.
  • ID device identification number
  • IMEI international mobile equipment identity
  • Operation in the supervised mode allows the electronic device 100 to be managed by a server computer or other remote device, e.g., of an enterprise.
  • the supervisory server computer is or includes an MDM server computer 128.
  • the DM server computer 128 is used to provision and otherwise maintain the security monitoring functionality of the device 100 and to support the automatic locking of the device in connection with security events, as described below.
  • the supervision is provided in accordance with a mobile device management (!VIDM) or enterprise mobility management (EMM) platform, protocol or standard. Other platforms, protocols or standards may be used. Any supervision sea'ices provided by such platforms, protocols, or standards are considered to be MDM services as the terms“mobile device management” and“MDM” are used herein
  • Instructions 1 18 may be stored in the storage 1 12. Alternatively or additionally, such data may be stored as firmware in the memory 108, and/or elsewhere on the device 100 in some cases, the boot instructions 1 14 may include instructions directed to triggering the execution of the supervision- related instructions 1 18.
  • the processor 102 is configured to execute the boot instructions 1 14 during the boot sequence to initiate execution of the supervision-related instructions 1 16
  • the boot instructions 1 14 may include one or more subroutine or other calls or other references to the supervision-related instructions 1 18. The supervision functionality is thus initiated upon any rest or restart of the electronic device 100
  • the nature of the supervision-related instructions 1 16 may vary.
  • the supervision-related instructions 1 16 may alternatively or additionally Include or otherwise be directed to specifying configuration details for the device 100 and/or data indicative of the supervisory server computer or other remote device.
  • the supervision-related instructions 1 16 may be stored in the storage device 1 12 alongside applications 1 18 and user data 12Q
  • the applications 1 18 may be or include applications (e.g , apps) installed on the electronic device 100.
  • the user data 120 may be or include data generated as a result of execution of, or stored for use by, one of the applications 1 18 (e.g., configuration data).
  • the nature of the boot instructions 1 14 related to the supervision-related functionality may vary. For instance, the manner in which the boot instructions 1 14 initiates execution of the supervision-related instructions 1 18 may vary. In some cases, the supervision-related portions of the boot instructions 1 14 are configured as a callout or other reference to the supervision- related instructions 1 16. The callout or other reference may be set forth in the boot instructions 1 14 in the context of establishing a persistent or other background application or service 122 to be executed or implemented by the electronic device 100. As described below, the background service 122 may be or include an agent configured to support MDM or other supervised mode communications with the server computer 128. Instructions and/or other data associated with the background service 122 may be stored in the RAM 104 for use by the processor 102. The callout or other reference limits the amount of persistent memory consumed by the security- related boot instructions 1 14
  • the boot instructions 1 14 set forth instructions beyond a callout or reference to the supervision-related instructions 1 16.
  • the boot instructions 1 14 may include instructions directed to determining whether the supervision instructions 1 16 should be called or otherwise initiated.
  • the device ID 124 may be accessed from the persistent memory 106. Processing of the boot instructions 1 14 may cause fhe processor 102 to send a query with the device ID 124 to determine whether the electronic device 100 (e.g., this particular instance of the electronic device 100) should be subjected to supervision.
  • the query is sent via fhe internet 126 to either the DEP server 180 and/or the supervisory server computer device 128 (e.g., MDM server computer) or other server computer.
  • Network communications with the server computer 128 may be supported by an antenna 130 of the electronic device 100.
  • the supervisory computer device 128 may be configured to provide or otherwise support the impiementation of the supervision functionality (e.g., a supervised mode of operation) on the electronic device 10Q
  • Other networked and non-networked devices may be contacted or accessed to determine whether the supervision functionality should be implemented.
  • the supervision functionality may be initiated in other ways, inciuding, for instance, a fiag or other configuration data setting in the memory 106.
  • Security monitoring functionality is not directly provided via execution of the boot instructions 1 14 or the supervision instructions 1 16.
  • Security monitoring functionality is instead provided via execution of security monitoring instructions 132.
  • the security monitoring instructions 132 may be stored on the storage device 1 12 as an app or other application.
  • the security monitoring instructions 132 are thus not executed or otherwise provided as a persistent service.
  • the execution of the security monitoring instructions 132 may be subject to control via the user interface 108.
  • the app or other application in which the security monitoring instructions 132 are executed may thus be closed, discontinued, or otherwise controlled by an employee of the retail site or another user, including a would-be thief. Persistence of the security monitoring functionality is instead established indirectly via operation in the supervised mode.
  • the processor 102 may be configured, via fhe execution of the security monitoring instructions 132, to monitor the retail display of the electronic device 100 for a security trigger event.
  • the monitoring for the security trigger event may use one or more components of the electronic device 100.
  • the electronic device 100 may include an accelerometer or other sensor device 134 configured to detect and characterize a theft attempt or other activity.
  • One or more antennas or other electromagnetic circuitry of the electronic device 100 may be used to detect or determine distances.
  • the monitoring may also involve detecting a
  • disconnection at one or more ports or interfaces of the electronic device 100 such as a data port 138 and/or a power port 138.
  • trigger events involving such sensors and circuitry include removing the electronic device 100 from a proximity zone, moving the electronic device 100 in a manner indicative of theft, or one or more disconnections of the electronic device 100, such as disconnection form a power source or a wired or wireless network (e.g., wifi network).
  • the monitoring for a trigger event may also involve communications or other interaction with another device.
  • the electronic device 100 may receive a signal or message from an alarm unit or other system 140. An attempted theft of some merchandise in the retail environment may thus trigger an alarm event for other merchandise on display.
  • Other types of trigger events may be used, including, for instance, trigger events involving the operation of the electronic device 100 itself.
  • the security system includes a management computer device 142 directed to managing security services for one or more electronic devices.
  • the management computer device 142 may be or include a server computer in communication with the electronic device 100 via the internet 126.
  • the management computer device 142 may provide an operator with an option of manually or otherwise triggering device locks or other security events.
  • the management computer device 142 includes a processor 144 and a memory 148 on which management instructions 148 are stored for execution by the processor 144.
  • the management instructions 148 may be loaded from a storage device 150, on which a database 152 of a list of electronic devices being monitored may also be stored.
  • the management instructions 148 may cause the processor 144 to generate one or more user interfaces (on the management computer device 142 or a client device or other computing device in communication therewith) so that an operator may access the list to view the electronic devices being monitored and to select various operations (e.g., a device lock) to implement thereon.
  • the manner in which the management functionality is provided may vary from the example shown.
  • the management computer device 142 provides the management functionality as a service to a number of client computing devices.
  • the client computing devices may be portable or other computing devices associated with a particular retail site, retailer, or other user entity.
  • the management computer device 142 may be integrated to any desired extent with other components of the security system described herein.
  • the management computer device or a client thereof may be integrated with the alarm system 140 or other on-site component of the security system.
  • the execution of the security monitoring instructions 132 may cause the processor to lock the user interface(s) 108 of the electronic device 100.
  • a touchscreen or other display may display a warning message regarding a locking of the electronic device 100 until the trigger event ends. The warning message may continue to be displayed until the trigger event is no longer present.
  • the nature of the locking may vary with the type of trigger event.
  • the security monitoring instructions 132 define multiple levels of locking. For instance, a major trigger event may cause the security monitoring instructions 132 to configure the processor 102, upon the detection of the trigger event, to generate an alarm that cannot be deactivated by merely discontinuing the trigger event. Unlocking the electronic device 100 may need to involve a key, code, or other disarming mechanism in contrast, some trigger events may be sufficiently minor, such that removal of the trigger event automatically unlocks the electronic device 100.
  • trigger events may be defined and used, such as primary and secondary trigger events, as described below.
  • the trigger events may be defined by the security monitoring instructions 1 16 such that the user interface 108 is locked before removal of the electronic device 100 from the retail site. Such immediacy of the locking may help to deter and/or prevent theft. The nature, extent, duration, unlocking and/or other characteristics of the lock may vary considerably.
  • the trigger event and locking may not involve a theft attempt.
  • the security monitoring instructions 132 may be directed to preserving a display state of the electronic device 100.
  • the trigger event may involve a user attempt to sign in/out of an application or service. Signing out of a service may load personal data or otherwise personalize the electronic device 100 in a manner inappropriate for a retail environment.
  • the monitoring instructions 132 may detect an attempt at signing out of a user account directed to retail display. The locking may thus inhibit the customization of the electronic device 100.
  • the monitoring instructions 132 may alternatively or additionally alert a store employee of the need to wipe or clear user data from the electronic device 100.
  • the monitoring instructions 132 configure the processor 102 to prompt the store employee, e.g., after an unlocking, to initiate a device wipe or other housekeeping.
  • the supervision instructions 1 18 may be used to address circumstances in which the execution or other functionality of the security instructions 132 is discontinued or disabled.
  • the security functionality is not provided by implementing instructions stored in the persistent memory 106 or provided by a persistent service, such as the persistent service 122.
  • the security app, application, or other set of functions supported by the security instructions 132 may be closed by a user, such as a would-be thief. The security app or application is thus not necessarily protected from such discontinuation circumstances.
  • the security functionality relies on check-in or other messaging provided by the security app or other instructions 132 to address such circumstances. Execution of the security instructions 132 causes the processor 102 to send a message to a watchdog computer 154.
  • the message may be sent periodically or regularly. As described below, receipt of the message within a predetermined timeframe is used to determine whether the device 100 should remain unlocked li the message is not received within the predetermined timeframe, the device 100 may be locked (e.g., be directed to enter into a locked mode) due to a possible theft attempt, as described below.
  • the message may be configured as a check-in message, i.e., a message in which the device 100 checks in with the watchdog computer 154.
  • the message may include status data regarding the operational status of the device 100. For instance, the status data may indicate whether one or more trigger events have occurred.
  • the watchdog server computer 154 is configured to determine whether the amount of time elapsed since a previous message from the device 100 exceeds a predetermined time if the device 100 fails to check-in via the message within the predetermined time, then the electronic device 100 is directed to enter into a locked mode. Alternatively or additionally, the message is sent in response to a request from the watchdog server computer 154. The watchdog server computer 154 then determines whether the message is received or sent within a predetermined time relative to the request. [0062] In the example of Figure 1 , the check-in messaging and the determination is handled and provided by the watchdog computer 154 The messaging may involve additional or alternative server computers. For instance, the check-in message and/or request may be sent via the MDM server computer 128. The check-in messaging may thus be configured as a supervised mode communication. The supervisory server computer 128 and the watchdog computer 154 may be integrated with one another to any desired extent
  • the supervisory server computer 128 may be or include one or more networked computing devices in communication with the electronic device 100.
  • the computing device(s) may be disposed in, or made available via, a private or public cloud computing infrastructure in communication with the internet 128.
  • the supervisory server computer 128 includes a processor 158, a memory 160, and a storage device 162.
  • Supervisor instructions 164 are stored on the memory 160 for execution by the processor 158.
  • the processor 158 of the supervisory server computer 128 is configured via execution of the supervisor instructions 164 to implement MDM or other supervision functionality, including the supervised mode communications.
  • the supervisor instructions 164 and/or other instructions define an application program interface (API) 168.
  • API application program interface
  • the API 186 is used by the watchdog computer 154 and other server computers to direct the supervisory server computer 128 to, in turn, direct the device 100 to enter into the locked state.
  • the watchdog computer 154 may send an API call to the supervisory server computer 128.
  • API calls may also be used by, for instance, the management computer 142 to direct the device 100 to enter into the locked state.
  • a store manager or other operator of the management computer 142 may wish to lock one or more devices within a respective retail location.
  • management instructions 148 may configured a processor 144 of the management computer 142 to issue a storewide locking of all devices within a respective retail location.
  • the watchdog computer 154 may be or include one or more networked computing devices.
  • the watchdog computer 154 and the supervisory server computer 128 are in communication with one another.
  • the computing device(s) may be disposed in, or made available via, a private or public cloud computing infrastructure in communication with the internet 126.
  • the watchdog computer 154 includes a processor 168, a memory 170, and a storage device 172.
  • Watchdog or other security monitoring instructions 174 are stored on the memory 170 for execution by the processor 168.
  • the processor 168 of the watchdog computer 154 is configured via execution of the watchdog or other security monitoring instructions 174 to implement a security monitoring service for the electronic device 100
  • the watchdog computer 154 is configured via execution of the security monitoring instructions 174 to determine whether a predetermined amount of time has elapsed since a timing of a previous message from the electronic device 100.
  • the electronic device 100 may be configured via the supervision instructions 1 16 to send a message at least once every two minutes, but other time intervals may be used.
  • the watchdog computer 154 is configured via execution of the security monitoring instructions 174 to direct the supervisory server computer 128 to send, to the electronic device 100, a command via the supervised mode communications to enter into a locked state if the timing of the message is not within the predetermined amount of time.
  • the supervised server computer 128 may be directed by other computers to send the command.
  • the management computer 142 may rely on the supervisory server computer 128 and the supervised mode communications to send a command to cause the electronic device 100 to enter the locked state.
  • the manner in which the device 100 is locked may vary.
  • the security app or other security instructions 132 being executed on the electronic device 100 are used to implement the device lock.
  • the device lock may be implemented by entering a single app mode defined by the security instructions 132.
  • the single app mode may be enforced or otherwise supported via the supervision instructions 1 16.
  • the supervised mode may enable the supervisory server computer 128 to direct the electronic device 100 to enter the single app mode of the security app or other instructions 132.
  • Other commands may be sent via the supervised mode communications to address various circumstances present at the electronic device 10Q.
  • the supervised mode communications may address the closing or disabling of the security application on the electronic device 100.
  • the closing of the security application may, for instance, lead to the lack of a timely check-in or other message to the supervisory server computer 128.
  • the check-in message may indicate that the security application has been closed.
  • the supervised mode communications may be used to restart the security application on the device 100.
  • the server computer 128 and the watchdog computer 154 may be use to implement a number of security monitoring techniques. Further details regarding the security monitoring techniques are set forth below
  • the MDM instructions 1 16 may be configured to cause the processor 102 to implement functions related to device management, persistency, locking, various local triggers (e.g., power loss, geofence, SSID tether), device data collection, and other security-related functions, such as an audible alarm.
  • the security instructions 132 may be configured to cause the processor 102 to implement functions related to functionality not provided via the supervision, such as enhanced geolocation, additional local triggers (e.g , power-loss lock, etc.), additional data reporting (e.g., lift/place events), audible alarm, custom lock screens, etc.
  • functions related to functionality not provided via the supervision such as enhanced geolocation, additional local triggers (e.g , power-loss lock, etc.), additional data reporting (e.g., lift/place events), audible alarm, custom lock screens, etc.
  • the supervision may be supported via various enrollment services, and are not limited to Apple DEP.
  • the enrollment service may or may not be provided by the manufacturer (e.g., OEM) of the device. Examples include Samsung Knox and Google ZTE.
  • the enrollment service may support various functions, including, for instance, mass deployment, additional levels of persistency, and additional remote device management.
  • the MDM or other supervision server computer 128 may provide backend services directed to remote device management, persistency, iocking, and various remote triggers, such as geoiocation, device data reporting, etc.
  • the MDM server computer 128 may be linked with an GEM enrollment service (e.g., the DEP server 180) for additional security and functionality.
  • the management server computer 142 may provide a remote user interface to manually lock, unlock, and monitor the status of the device 100.
  • the management server computer 142 may communicate through API calls to the MDM server 128 and/or other cloud servers, such as the watchdog server computer 154. Examples of actions include lock a device or lock all devices in a user’s list of secured devices.
  • the watchdog server computer 154 may provide additional security by remotely monitoring the device 100 via, e.g., the app or other security instructions 132 running on the device 100, to make sure the app is operating correctly and, if not, communicate (e.g , directly or indirectly) with the MDM server 128 (e.g., through API calls) to perform actions, such as auto locking of the device 100.
  • Device management, locking and other functionality may be triggered locally by the MDM agent or other instructions 1 16, remotely from the MDM server 128 communicating with the MDM agent 1 16, or remotely through API calls to the MDM server 128 from the security app 132, the management computer 142, or the watchdog server computer 154.
  • the device 100 is enrolled in one or more supervision accounts to maintain the effective persistence of the MDM instructions 1 16 and the security instructions 132 (e.g., an MDM agent and a security app) on the device 100.
  • the device 100 is enrolled in a DEP account, which, in turn, is linked to an MDM account associated with the MDM server computer 128.
  • the device 100 may be a DEP-enabled device via incorporation of one or more instructions in the boot instructions 1 14 directed to DEP and supervision enrollment.
  • the device ID 124 Is added to a DEP account stored or otherwise associated with the DEP server 180.
  • the data stored on the DEP server 180 associates the DEP account with the MDM server computer 128, thereby establishing supervision of the device 100 by the MDM server computer 128.
  • the device 100 is enrolled in only a single account for supervision.
  • the device 100 when the device 100 is first powered up, execution of the boot sequence will cause the device 100 to automatically check to see if the device 100 is assigned to a DEP account (because the device 100 is a DEP- enabled device) if the device 100 is assigned to a DEP account, the device 100 may auto- enroil itself in the DEP account and then connect with the MDM server computer 128 linked to the DEP account.
  • the DEP server 180 thus automatically enables the device 100 to be supervised by the linked MDM server computer 128.
  • the device 100 may also auto-enroli itself in the linked MDM account and loads whatever MDM profile is set up on that account.
  • the MDM profile may include configuration settings and other data (including data enabling supervision), the MDM instructions 1 16 (e.g., an MDM agent), and the security instructions 132 (e.g., the security app).
  • the device 100 Having supervision of the device 100 allows the device 100 to be directed to enter into a locked state. The supervision may also be used to unlock a device. Such locking and unlocking may be implemented through the MDM server computer 128, e.g., through an MDM console or through MDM API calls.
  • the device 100 is enrolled in DEP, enrolled In an MDM service, provisioned with settings, and software, and remotely supervised by the MDM server computer 128. At this point even if a thief were to factory reset the device 100, the device 100 will repeat all the steps above as soon as it goes through the setup and the device will be re enrolled and supervised again.
  • Figure 2 is a flow diagram of a method 200 of establishing security monitoring for an electronic device on retail display.
  • the method 200 is implemented by one or more of the above-described processors.
  • the method 200 may be implemented by the processor 158 of the MDM server computer 128 described above in connection with Figure 1 .
  • the characteristics of the processor and the server computer may vary from the examples described above.
  • the acts of the method 200 may be implemented in accordance with supervisor instructions 164 ( Figure 1 ) and/or other instructions.
  • the method 200 establishes security monitoring functionality for a device, such as the device 100 ( Figure 1 ).
  • the method 200 includes obtaining, by a processor of a server computer, a mobile device management (MDM) startup message from the device, determining, by the processor, whether the device is enrolled for MDM supervision, and if the device is enrolled for MDM supervision, downloading, by the processor to the device, configuration data to support the MDM supervision and implementation of the security monitoring functionality.
  • MDM mobile device management
  • the configuration data may include instructions of an MDM agent on the device, the MDM agent being configured to cause the device to enter into a locked state upon receipt of a command from the server computer.
  • the configuration data may include instructions of a security monitoring app on the device, the securing monitoring app being configured to monitor the device for a security trigger event.
  • the security monitoring app may be further configured to communicate with a further server computer to indicate that the security monitoring app is operational.
  • the security monitoring app may be further configured to provide a single-app mode in which the device resides in response to an MDM command from the server computer to enter a locked state.
  • the device may be configured to enable remote supervision via data stored in persistent memory, the data leading to the device sending the MDM startup message.
  • the data may cause the device to contact an enrollment service, the enrollment service identifying the server computer as an MDM service for the device.
  • the method may further include determining, by the processor, whether the device has previously been provided with the MDM supervision by the server computer, if the device has not been previously provided with the MDM supervision, adding, by the processor, the device to an MDM service list of the server computer, and if the device has been previously provided with the MDM supervision, directing the device to enter into a locked mode after downloading the configuration data.
  • Obtaining the MDM startup message may occur while the device is implementing a boot sequence. Obtaining the MDM startup message may include receiving the MDM startup message from the device.
  • Figure 3 depicts a method 30Q of monitoring an electronic device on retail display.
  • the method 300 is implemented by one or more of the above-described processors.
  • the method 300 may be implemented by the processor 168 of the watchdog server computer 154 described above in connection with Figure 1 .
  • the characteristics of the processor and the server computer may vary from the examples described above.
  • the acts of the method 200 may be implemented in accordance with watchdog instructions 174 ( Figure 1 ) and/or other instructions.
  • the method 300 includes receiving, by a processor of a server computer, a message from the device indicative of whether security instructions stored in a memory of the device are being executed on the device, determining, by the processor, whether time elapsed since the message was received exceeds a threshold, and if the time elapsed exceeds the threshold, sending, by the processor, a command to automatically cause the device to enter into a locked state.
  • the method 300 alternatively or additionally includes receiving, at least one server computer, data indicative of whether a security trigger event has occurred in connection with the device, sending, by the at least one server computer, a request to the device that the device send a check-in message to the server computer, the check-in message being indicative of whether security instructions are being executed on the device, and sending, by the at least one server computer, a command to automatically cause the device to enter into a locked state if the check-in message is not received within a predetermined time period.
  • Sending the command may include directing, by the processor, a mobile device management (MDM) server to cause the device to enter the locked state.
  • Directing the MDM server may include generating, by the processor, an application programming interface (API) cal! to the MDM server.
  • the command may include a mobile device management (MDM) communication.
  • Sending the command may include sending, by the processor, the command to the device.
  • the method 300 may further include receiving, by the processor, data indicative of a security trigger event involving the device.
  • the method 300 may further include sending, by the processor in response to receiving the data, a command to lock all devices at a retail location at which the device is located.
  • the method 300 may further include sending, by the processor, a request to the device that the device check-in with the server computer to indicate that the security instructions are being executed on the device.
  • the message may include data representative of a timing of the message.
  • the security instructions may be executed on the device in a non-persistent application.
  • the locked state may be an operational mode of an application defined by the security instructions in which the application causes the device to run in a single-application mode.
  • the method 300 may further include sending, by the at least one server computer in response to receiving the data, a command to lock ail devices at a retail location at which the device is located.
  • Figure 4 is a flow diagram of a method 400 of managing security functionality for an electronic device on retail display.
  • the method 400 is implemented by one or more of the above-described processors.
  • the method 40Q may be implemented by the processor 144 of the management computer 142 described above in connection with Figure 1 .
  • the characteristics of the processor and the server computer may vary from the examples described above.
  • the methods include or involve monitoring the electronic device for a trigger, and locking, upon detection of the trigger, the electronic device.
  • the devices include a memory configured to store firmware instructions that, when executed, configure a processor of the electronic device to provide security monitoring and benefit denial.
  • the processor may be configured to monitor, via the firmware instructions, the electronic device for a trigger, and lock, with the firmware upon detection of the trigger, the electronic device.
  • aspects of the method may be performed via a background application or other service running on the processor. Examples of triggers are disconnection from an external power source, loss of data integrity, movement of the device, and loss of communication.
  • the methods and devices may provide the security monitoring in connection with a security system configured to generate an alarm upon detection of the trigger. Ins some cases, the alarm is generated prior to locking the device as a result of, for instance, an attempted theft of other merchandise on display.
  • the above-described devices and methods may be used or implemented to provide a software solution for instant theft deterrence for electronic products and devices.
  • the disclosed devices and methods may provide for data analytics and alerts regarding the status of, and user interactions with, electronic products and devices.
  • Aspects of the disclosed devices and methods may be implemented via, or otherwise involve, the firmware of the electronic device.
  • Other aspects may be implemented via, or otherwise involve, a software application or other instructions running on the device.
  • a combination of firmware and application software may be used.
  • the software solution may be installed in the basic inpui/oiitpui system (BIOS) or other boot instructions (e.g., bootloader) or other firmware of a device in order to lock and unlock the device based on one or more triggers.
  • BIOS basic inpui/oiitpui system
  • boot instructions e.g., bootloader
  • the software solution may also be configured to provide local and remote status, alerts and other data regarding the device. Data analytics and alerts regarding the status of and
  • the software solution cannot be overcome by hard resetting the device (e.g., a hardware or factory reset). For example, during a hard reset, the core hardware components are reset to factory settings, deleting most software installed on the device.
  • a hard reset of the device does not delete or otherwise remove the software solution. In some cases, a hard reset triggers a locking or benefit denial.
  • One or more aspects of the software solution may be installed as a software application (e.g., an app) on the device installation of a software application may be useful in connection with electronic devices for which the firmware is not capable of being customized.
  • a software application may be used in connection with electronic devices commercially available from Apple.
  • these aspects of the solution are implemented as a persistent appllcaiion(s). For example, persistent applications reload or are reinstalled upon being closed or uninstalled. Additionally, in some cases, if the software application is uninstalled, the application will reinstall itself, such as using an internet, mobile or other network connection. Therefore, if a user deletes the software application, the application will be auto re-downloaded and installed on the device.
  • the disclosed methods and systems are well suited for implementation by, and use with, any electronic product capable of executing instructions, including any electronic devices having firmware or other persistent memory, such as laptops, computer, tablets, mobile phones, wearables, smart televisions and other computing-based consumer, commercial and/or industrial electronic products.
  • the software solution may be implemented via any combination of firmware and software.
  • the disclosed devices and methods provide a software solution for immediate benefit denial of an electronic device.
  • the benefit denial locks the device based on one or more triggers. By locking the device, the device is rendered unusable (e.g., bricked). If one or more of the triggers are no longer present, the benefit denial is removed and the device is unlocked.
  • the security monitoring need not rely on an internet connection, key, user intervention or other connectivity to lock and unlock the device, although such elements may be optional in some cases.
  • alarms or benefit denial may vary as described above.
  • One or more alarms and/or benefit denials may be activated based on one or more triggers. Any trigger detectable by the software solution may be used.
  • the software solution may trigger the alarm and/or benefit denial based on losing connection to an external power source. For example, in a low security environment (e.g., a corporate or educational environment) where the device may not be physically secured to the location, the device may be plugged into external power. Therefore, unplugging the device from a power source may trigger an alarm or the benefit denial. Further, the software solution may only trigger an alarm and may not include benefit denial (e.g., in a low security environment).
  • a low security environment e.g., a corporate or educational environment
  • the software solution may only trigger an alarm and may not include benefit denial (e.g., in a low security environment).
  • the software solution may use loss of data integrity as a trigger. For example, using the external USB or other port on the device, the software solution may communicate with an external USB“dongle,” such as a solid-state memory stick or other custom USB device attached to the device integrity of the USB port may be determined and used as a trigger.
  • the software solution may monitor the USB data connection (e.g , data activity) and may trigger based on losing the connection.
  • the software may also read and/or write a specific data“key” or other data to a USB solid state memory. Further, the software solution may read and validate periodic“pings” from the USB device.
  • the software solution may use specific motion as a trigger.
  • the device may include an accelerometer to detect movement of the device.
  • the software solution may detect mechanical shock or other movements to be used as triggers.
  • a mechanical shock might indicate that the device is being forcibly removed from a display or other security product, or may have been dropped or damaged.
  • the software solution may detect that the device is being picked up and moved (e.g , a user walking or running with the device).
  • the software solution may also trigger on being removed from a display or fixed location, such as if the device is removed from a location for longer than a threshold (e.g., long dwell times).
  • the software solution may also access a near field communication (NFC) or radio frequency identification (RFID) reader on the device (e.g., in a mobile handset).
  • NFC near field communication
  • RFID radio frequency identification
  • the software solution may read and/or write to external NFC tags and/or other NFC-enabled devices monitor the device location, identification, etc.
  • the software solution may also read and/or monitor connection with RFID-enabled tags and/or other device. For example, low-frequency (LF), high- frequency (HF), ultra-high-frequency (UHF), or other RFID technology may be used.
  • the software solution may also access other functionality of the device (e.g., wi-fi, mobile, Bluetooth, etc.) to monitor the device and trigger the alarms and/or benefit denial.
  • the software solution may be triggered if the device can no longer communicate with a networking device, such as a router, hub, main alarm, etc.
  • a Wi-Fi, Bluetooth, or other communication channel is configured to be invisible or inaccessible to unapproved users.
  • a communication channel used for triggering is not directly visible or accessible to the general public (e.g., users who are shopping for or using the products in the retail environment).
  • the communication channel and/or the security solution is more difficult to disable and/or modify (e.g., settings, passwords, etc.).
  • use of the communication channel may be limited (e.g., preventing users from using the network and/or from incurring data charges).
  • the benefit denial may be removed manually and/or automatically.
  • the device may be unlocked automatically if one or more of the triggers are no longer present.
  • User intervention may also be used (e.g., needed) to unlock the device in other cases, for example, if one or more of the triggers are no longer present, a PIN, key or other security information may be used (e.g., needed) to unlock the device.
  • Other manual intervention may be used
  • the disclosed devices and methods may also provide local and remote instant status, alerts and alarms.
  • instant visual and audible notifications and alarms may be displayed on the device display and through the device speaker(s).
  • device status may include a physical position, an“armed” setting, a device in motion alert, etc. Any status may be provided based on the capabilities of the device. E-mail and text notifications and other alerts may be provided based on the device status.
  • the disclosed devices and methods may also capture interactive data from the device.
  • the disclosed devices and methods may log user interactions and usage on the device, such as device lift and place events and dwell times.
  • the disclosed devices and methods may also log electronic interactions with the device, such as communication events with other devices.
  • the interactive data may be captured and stored as timestamps in a database.
  • the disclosed devices and methods may be configured to provide analytics for the device based on the data.
  • the data and/or analytics may be uploaded to a local or remote (e.g., cloud-based) server. The uploaded data may be used by the server or other device to provide analytics on the device.
  • the disclosed devices and methods may also provide for preventative maintenance and remote monitoring. For example, when a device is used by a large number of users, such as when displayed for sale or used in multi-user environment, the disclosed devices and methods may be used to perform maintenance and“housekeeping” for the device. Using the software solution, installed applications, pictures, browsing histories, etc. may be deleted from the device. The“housekeeping” may be performed manually or automatically, such as periodically (e.g., once per day or other periodic rate specified) to automatically search and dean the devices of unwanted clutter. The software solution may also factory reset the device remotely. Additionally, configuration of the firmware or software application may be performed remotely (e.g.,“over-the-alr” configurability from a remote connection).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • Signal Processing (AREA)
  • General Engineering & Computer Science (AREA)
  • Telephonic Communication Services (AREA)
  • Burglar Alarm Systems (AREA)

Abstract

L'invention concerne un procédé de surveillance d'un dispositif sur un dispositif d'affichage de vente au détail qui comprend la réception, par un processeur d'un ordinateur serveur, d'un message provenant du dispositif indiquant si des instructions de sécurité stockées dans une mémoire du dispositif sont exécutées sur le dispositif, la détermination, par le processeur, si le temps écoulé depuis que le message a été reçu dépasse un seuil, et, si le temps écoulé dépasse le seuil, l'envoi, par le processeur, d'une instruction pour amener automatiquement le dispositif à entrer dans un état verrouillé.
EP20752513.0A 2019-02-05 2020-02-05 Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm Pending EP3921789A4 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US201962801624P 2019-02-05 2019-02-05
US201962801623P 2019-02-05 2019-02-05
PCT/US2020/016807 WO2020163486A1 (fr) 2019-02-05 2020-02-05 Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm

Publications (2)

Publication Number Publication Date
EP3921789A1 true EP3921789A1 (fr) 2021-12-15
EP3921789A4 EP3921789A4 (fr) 2022-10-19

Family

ID=71947808

Family Applications (1)

Application Number Title Priority Date Filing Date
EP20752513.0A Pending EP3921789A4 (fr) 2019-02-05 2020-02-05 Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm

Country Status (3)

Country Link
EP (1) EP3921789A4 (fr)
CA (1) CA3129046A1 (fr)
WO (1) WO2020163486A1 (fr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11870285B2 (en) * 2019-10-09 2024-01-09 Mobile Tech, Inc. Systems and method for electronically disconnecting batteries

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
SE0300252D0 (sv) * 2003-02-03 2003-02-03 Hamid Delalat Blueguards
US20080120716A1 (en) * 2006-11-21 2008-05-22 Hall David N System and method for enhancing security of an electronic device
KR20120065762A (ko) * 2010-12-13 2012-06-21 에스케이플래닛 주식회사 이동체 도난 방지 시스템과, 이동체 단말, 사용자 단말, 도난 방지 서비스 장치 및 방법
US8892904B2 (en) * 2012-09-13 2014-11-18 Intel Corporation Hardware enforced security governing access to an operating system
US20140359777A1 (en) * 2013-05-31 2014-12-04 Fixmo, Inc. Context-aware risk measurement mobile device management system
US10096216B1 (en) * 2014-12-16 2018-10-09 Amazon Technologies, Inc. Activation of security mechanisms through accelerometer-based dead reckoning
EP3373627B1 (fr) * 2017-03-07 2023-08-30 Sennco Solutions, Inc. Surveillance intégrée et persistante de la sécurité de marchandises électroniques

Also Published As

Publication number Publication date
CA3129046A1 (fr) 2020-08-13
EP3921789A4 (fr) 2022-10-19
WO2020163486A1 (fr) 2020-08-13

Similar Documents

Publication Publication Date Title
US20200252430A1 (en) Integrated security monitoring via watchdog trigger locking
US20220156413A1 (en) Integrated, persistent security monitoring of electronic merchandise
WO2015077793A1 (fr) Système de verrouillage de téléphone
TWI516977B (zh) 包括總是可用之盜竊保護系統的平台與使用總是可用之保全系統來保護平台的方法
TWI567583B (zh) 總是可用的嵌入式盜竊反應子系統（六）
TWI506473B (zh) 總是可用的嵌入式盜竊反應子系統（一）
EP2812842B1 (fr) Politique de sécurité pour des données de dispositifs
TWI544359B (zh) 總是可用的嵌入式盜竊反應子系統（二）
TWI474214B (zh) 總是可用的嵌入式盜竊反應子系統（四）
TWI526874B (zh) 總是可用的嵌入式盜竊反應子系統（三）
TWI502395B (zh) 永久有效的內嵌竊盜反應子系統
CN101794361A (zh) 用基于位置的数据向平台提供附加的安全性的系统和方法
TWI610193B (zh) 永久有效的內嵌竊盜反應子系統
US11755716B2 (en) MDM-based persistent security monitoring
EP3921789A1 (fr) Surveillance de sécurité intégrée par verrouillage de déclenchement de surveillance et persistance basée sur mdm
EP3373627B1 (fr) Surveillance intégrée et persistante de la sécurité de marchandises électroniques
WO2023014583A1 (fr) Surveillance de sécurité intégrée basée sur une balise
US20210334925A1 (en) Network detection-based monitoring of electronic merchandise
CN111819563B (zh) 边缘设备禁用
US20220284781A1 (en) Multi-alarm monitoring of electronic merchandise

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20210825

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
A4 Supplementary search report drawn up and despatched

Effective date: 20220920

RIC1 Information provided on ipc code assigned before grant

Ipc: G08B 13/14 20060101ALI20220914BHEP

Ipc: G07G 1/14 20060101ALI20220914BHEP

Ipc: G06F 21/55 20130101ALI20220914BHEP

Ipc: G06F 21/88 20130101ALI20220914BHEP

Ipc: H04W 12/61 20210101ALI20220914BHEP

Ipc: H04W 12/126 20210101ALI20220914BHEP

Ipc: H04W 12/37 20210101AFI20220914BHEP