EP4186047A1 - Geo-radius based mobile device management - Google Patents
Geo-radius based mobile device managementInfo
- Publication number
- EP4186047A1 EP4186047A1 EP21752434.7A EP21752434A EP4186047A1 EP 4186047 A1 EP4186047 A1 EP 4186047A1 EP 21752434 A EP21752434 A EP 21752434A EP 4186047 A1 EP4186047 A1 EP 4186047A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- mobile device
- zone
- application
- server
- alarm
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 238000012544 monitoring process Methods 0.000 claims abstract description 66
- 238000000034 method Methods 0.000 claims abstract description 41
- 230000009471 action Effects 0.000 claims abstract description 23
- 230000008859 change Effects 0.000 claims abstract description 7
- 230000003213 activating effect Effects 0.000 claims description 2
- 238000007726 management method Methods 0.000 description 15
- 238000010586 diagram Methods 0.000 description 12
- 238000004590 computer program Methods 0.000 description 8
- 238000003384 imaging method Methods 0.000 description 6
- 238000009434 installation Methods 0.000 description 6
- 230000006870 function Effects 0.000 description 5
- 230000003993 interaction Effects 0.000 description 5
- 238000012545 processing Methods 0.000 description 5
- 230000004913 activation Effects 0.000 description 4
- 230000001413 cellular effect Effects 0.000 description 4
- 230000000875 corresponding effect Effects 0.000 description 4
- 230000004044 response Effects 0.000 description 4
- KJLPSBMDOIVXSN-UHFFFAOYSA-N 4-[4-[2-[4-(3,4-dicarboxyphenoxy)phenyl]propan-2-yl]phenoxy]phthalic acid Chemical compound C=1C=C(OC=2C=C(C(C(O)=O)=CC=2)C(O)=O)C=CC=1C(C)(C)C(C=C1)=CC=C1OC1=CC=C(C(O)=O)C(C(O)=O)=C1 KJLPSBMDOIVXSN-UHFFFAOYSA-N 0.000 description 3
- 230000008901 benefit Effects 0.000 description 3
- 230000010267 cellular communication Effects 0.000 description 3
- 238000004891 communication Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 230000000007 visual effect Effects 0.000 description 3
- 239000000853 adhesive Substances 0.000 description 2
- 230000001070 adhesive effect Effects 0.000 description 2
- 239000003795 chemical substances by application Substances 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 239000013307 optical fiber Substances 0.000 description 2
- 230000000737 periodic effect Effects 0.000 description 2
- 230000001960 triggered effect Effects 0.000 description 2
- HBBGRARXTFLTSG-UHFFFAOYSA-N Lithium ion Chemical compound [Li+] HBBGRARXTFLTSG-UHFFFAOYSA-N 0.000 description 1
- 239000002390 adhesive tape Substances 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 238000012550 audit Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 239000003086 colorant Substances 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- VJYFKVYYMZPMAB-UHFFFAOYSA-N ethoprophos Chemical compound CCCSP(=O)(OCC)SCCC VJYFKVYYMZPMAB-UHFFFAOYSA-N 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 229910001416 lithium ion Inorganic materials 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 239000000700 radioactive tracer Substances 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 230000004043 responsiveness Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
- G08B21/02—Alarms for ensuring the safety of persons
- G08B21/0202—Child monitoring systems using a transmitter-receiver system carried by the parent and the child
- G08B21/0269—System arrangements wherein the object is to detect the exact location of child or item using a navigation satellite system, e.g. GPS
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B13/00—Burglar, theft or intruder alarms
- G08B13/02—Mechanical actuation
- G08B13/14—Mechanical actuation by lifting or attempted removal of hand-portable articles
- G08B13/1427—Mechanical actuation by lifting or attempted removal of hand-portable articles with transmitter-receiver for distance detection
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
- G08B21/02—Alarms for ensuring the safety of persons
- G08B21/0202—Child monitoring systems using a transmitter-receiver system carried by the parent and the child
- G08B21/0272—System arrangements wherein the object is to detect exact location of child or item using triangulation other than GPS
Definitions
- Retailers sell handheld electronic devices to the public in a range of shapes and sizes, with a range of functionality. Encouraging customers to examine and use the functionality of the devices at display locations is a valuable marketing technique employed by retailers. To decrease the risk of theft associated with this marketing strategy, retailers employ various security measures.
- One common security measure is the use of an alarm sensor that is placed in contact with the surface of the handheld electronic device and alarms when it loses contact with the device (e.g., when the sensor is removed).
- a typical alarm sensor is attached to one portion of the handheld electronic device using an adhesive tape or similar adhesive product.
- the adhesives often fail, resulting in the alarm sensor losing contact with the handheld electronic device and causing alarms to sound and startle innocent customers, negatively affecting their shopping experience.
- retailers tend to ignore the alarms or even turn them off to avoid disrupting customer shopping experiences, leaving retailers vulnerable to theft.
- these alarm sensors are only activated when the alarm sensor loses contact with the portion of the handheld electronic devices to which it has been attached.
- the alarm sensor is attached to the battery cover of a wireless phone
- a thief can remove and steal the remainder of the wireless phone (i.e., all components but the battery cover) without activating the alarm sensor.
- retailers often install a plurality of alarm sensors in multiple locations on the handheld electronic devices (e.g., front and back, inside the battery compartment, etc.). These alarm sensors often hinder customer inspection of the device. In some cases, these alarm sensors installed within the handheld electronic devices can ignite when subjected to excessive heat within the devices.
- a mobile device management system and method includes a global positioning system (GPS) tracker for locating the mobile device.
- the method includes establishing a zone boundary defining a first zone and a second zone in a monitoring area using the GPS tracker, wherein the mobile device is maintained in a first operating mode when the mobile device is located in the first zone and a second operating mode when the mobile device is located in the second zone; sending one or more characteristics of the zone boundary to a management system; receiving at least one change to the one or more characteristics of the zone boundary from the management system; and upon the mobile device being located outside the first zone for longer than a predetermined time period, performing alert actions.
- GPS global positioning system
- FIGS. 1A-1C are high-level diagrams showing the components of an embodiment of a system for managing mobile devices
- FIGS. 2A-2C depict GPS mode monitoring of multiple mobile devices of FIG. 1C, in accordance with one or more aspects set forth herein;
- FIG. 3 is depict beacon mode monitoring of multiple mobile devices of FIG. 1C, in accordance with one or more aspects set forth herein;
- FIG. 4 depict combined GPS and beacon mode monitoring of multiple mobile devices of FIG. 1C within a multi-floor building, in accordance with one or more aspects set forth herein;
- FIGS. 5A-5B are flow diagrams of a method of providing security to a mobile device, in accordance with one or more aspects set forth herein.
- FIG. 1A is a high-level diagram of the end-to-end architecture of a mobile device security system.
- the system generally includes corporate sites 20 having stores 22 which have numerous mobile devices 10 under management.
- the system connects via a network 30 with a push notification server 32, a cloud messaging service 34, and intelligent agent nodes 40.
- Each node 40 includes mobile device management servers 42, 46, an intelligent agent 43, an email/SMS capability 44, a system server 128, a database 51, and configuration user interface 53.
- the hierarchy of user accounts includes admin users 60, corporate users 70, regions 80, states 90, and stores 95.
- FIG. 1C is a high-level diagram of a mobile device security system 102.
- the system 102 includes a mobile device 10, such as a cellular phone or tablet, among others. While the system 102 is illustrated as including a single mobile device 10, it is to be understood that the security system 102 can include a plurality of mobile devices 10.
- the mobile device 10 is a display model for a retail store.
- the mobile device 10 includes a processor 112 and memory 114.
- the memory 114 can be any suitable type of memory.
- the mobile device 10 can include an imaging device 118.
- the imaging device 118 can be any suitable type of device including a still-shot camera, a video camera, or a combination thereof.
- the mobile device 10 can include a front- facing imaging device, a rear-facing imaging device, or a combination thereof.
- the mobile device 10 includes a power source 120, such as a battery.
- the power source 120 can be a lithium-ion battery.
- the power source 120 can be recharged via a charging cable coupled to an interface port (not shown) of the mobile device 10.
- the mobile device 10 includes an alarm 116.
- the alarm 116 can be any suitable type of alarm.
- the alarm can be an audible alarm, a visual alarm, or a combination thereof.
- the alarm 116 can be activated for a variety of reasons, as will be further discussed below.
- the alarm 116 can include different levels, such as different tones or different colors, depending on the reason the alarm 116 was activated.
- the alarm 116 can be activated when the mobile device 10 enters an alarm mode (also known as an alert mode).
- the alarm 16 can be activated when a charging cable is disconnected from the power source 120.
- the alarm 116 when the alarm 116 is activated due to disconnection of the charging cable, the alarm can be deactivated by use of a password or passcode. In an embodiment, when the alarm 116 is deactivated by use of a passcode, only the sound is disabled, while the mobile device 10 is still monitored.
- the mobile device 10 can include a location tracker 122.
- the location tracker 122 can be used to locate the mobile device 10.
- the location tracker 122 is a global positioning system (GPS) device.
- GPS global positioning system
- the location tracker 122 is used to establish a geographical radius, or geo-radius, about the device 10 for the purposes of maintaining security of the device 10.
- the mobile device 10 further includes a wireless transmitter/receiver 124 and a Bluetooth receiver 126.
- the wireless transmitter/receiver 124 can receive and transmit data via a WiFi connection or a cellular network.
- the Bluetooth receiver 126 can both receive and transmit signals via a Bluetooth connection.
- receiver 126 and wireless transmitter/receiver 124 may be a single radio frequency subsystem, or may be a software based radio subsystem operating on the processor 112.
- the system 102 may additionally include a server 128.
- the server 128 is a security server.
- the server 128 receives data from the mobile device 10 via the wireless transmitter/receiver 124 or device data service.
- the mobile device 10 can transmit the current device status, images, alarm data, and location information, among others, to the server 128.
- the mobile device 10 can transmit a record of people enabling the alarm 116 or disabling the alarm 116.
- the mobile device 10 can transmit identifying information, such as a passcode or sign-in information, as well as image data to the server 128.
- the server 128 can maintain a record of when and who enabled or disabled the alarm 116.
- the server 128 can correlate data records with image records.
- the server 128 can maintain a record of the cause of each alarm activation.
- the server 128 can monitor the mobile device 10. For example, the mobile device 10 can send regular signals to the server 128. When a signal is not received in the server 128, the server 128 can send a signal or ping the mobile device 10 to test responsiveness of the mobile device 10. If the mobile device 10 does not response, the server 128 can create an alarm or notification.
- the system 102 further includes an optional beacon 130 having a Bluetooth transmitter 132.
- the beacon 130 is any radiofrequency transceiver, including near field communications, WiFi, cellular communication, etc.
- the beacon 130 sends a signal, via the Bluetooth transmitter 132, to the Bluetooth receiver 126 of the mobile device 10.
- the receiver 126 is any radiofrequency transceiver, including near field communications, WiFi, cellular communication, etc.
- the beacon 130 can be placed in a fixed location and, in an embodiment, when the signal is not received in the Bluetooth receiver 126, such as when the mobile device 10 is beyond the range of the Bluetooth transmitter 132, the alarm 116 can be activated.
- the alarm 116 can be activated when the mobile device 10 is moved into range of the Bluetooth transmitter 132 and a Bluetooth signal is received by the Bluetooth receiver 126.
- the beacon 130 can push notifications to the mobile device 10, such as advertisements, via the Bluetooth transmitter 132.
- the optional beacon 130 is described above as having a Bluetooth transmitter 132, the transmitter 132 can transmit any suitable type of wireless signal, such as a WiFi signal or radio frequency signal.
- the beacon 130 is described as a discrete device, it is to be understood that the functionality of the beacon 130 can be included in existing devices.
- the beacon 130 can be a wireless router that transmits a wireless or RF signal in addition to the typical operation of a wireless router.
- the Bluetooth receiver 126 of the mobile device 10 can be configured to receive any suitable type of signal in accordance with the signal transmitted by the transmitter 132 of the beacon 130.
- the beacon 130 includes a power source (not shown), such as a battery.
- the battery has an average life of five (5) years.
- the battery life of the beacon can be monitored to ensure timely replacement of the beacon battery.
- different instances of the beacon 130 are labeled as the letter B followed by a number, for ease of understanding.
- the system 102 can manage mobile device security in several different modes of operation.
- the system 102 can make use solely of GPS location trackers 122 of one or more mobile devices 10 to keep track of multiple mobile devices 10.
- the system 102 can make use of a combination of the GPS location trackers 122 of one or more mobile devices 10 as well as one or more beacons 130 for mobile device security.
- the system 102 can make use of just the beacons 130 to manage security of one or more mobile devices 10.
- these modes of operation will generally be referred to as GPS mode, combination GPS and beacon mode, and beacon mode.
- a retailer operating multiple stores may use a combination of these modes.
- a retailer could have three types of point of sales locations, such as dedicated stores, kiosks (e.g., in a mall or airport), and multi-level stores.
- the retailer may choose to operate the security system in GPS mode, because it can allow for a simpler deployment.
- each mobile device 10 will be set up as explained below to have a geo-radius safe zone which corresponds to the footprint of the store.
- the retailer may choose to operate the security system in beacon mode, because the sales kiosk may be a relatively small size and a beacon can be used to establish a more rigidly defined safe zone around the kiosk.
- a combination GPS and beacon mode may be deployed for mobile device security, to allow for resolution of the location of a mobile device on a first floor versus a second floor located directly above, or to track a mobile device when crossing a specific threshold such as leaving the floor or the front door of the store.
- a specific threshold such as leaving the floor or the front door of the store.
- application 150 may be a client for iOS or Android platforms.
- the application may perform the zone related actions described above, and at the same time may send a periodic heartbeat to the server so that the server can alarm if the device 10 stops sending the heartbeat, e.g., if the device is stolen or put into a Faraday cage.
- communication between the application 150 and the server is via a REST application programming interface (API).
- API application programming interface
- the server 128 may include a web user interface for administration.
- the server 128 may include an alert framework for local and email alerts, as well as SMS alerts.
- the server 128 may include an interactive dashboard to view and manage devices, stores & users.
- server 128 may display a live view of all devices 10 on a map and visual display of Safe/Lost status. This display, in one embodiment, includes automated captured image upload on alarm and Admin UI to for browsing by an administrator. Further displayed by the server is inventory tracking (indoor beacon location and installation date) and management of beacons. In embodiments that use beacons, beacon installation and in store/location beacon details like location, specific notes, installation time are input and uploaded to server via application 150.
- the server 128 includes WiF i/Bluetooth safety check allows the system to alert if the radio interfaces are no longer available.
- the server 128 may also include remote ping of individual devices 10, and manual override to cancel alarm states.
- the application 150 Upon entering an alarm state due to exit from a safe zone, in one example, the application 150 will alert the server 129. In such a case, the server 128 can upload and install a specific profile remotely on the device 10. For example, a kiosk profile can be installed. In another example, the home and volume buttons can be locked out. In a further example, the application 150 can receive a message to wipe the device 10 from a mobile device management server.
- the server 128 can differentiate between alarm causes (e.g. Beacon loss, Charger Loss, Heartbeat Lost).
- the administrative user interface of the server 128 can report device status (e.g. Warning, Armed, Disarmed etc.) and heartbeat statuses.
- the application 150 in response to an alarm condition, can capture camera images and upload to server any time device is disarmed or deactivated or password entered locally. The application 150 can automatically cancel alarms as soon as device 10 is moved into a safe zone.
- the server 128 can alert reporting if heartbeat from device is lost for more than a specific pre-configured time period.
- the server 128 can automatically trigger a ping to a device if no device Heartbeat received in a configurable time.
- the heartbeat can be correlated with battery levels to determine if a device has lost power.
- the server 128 can also log and manage passwords of each device, mark devices as recovered/cancel alarms on server, and control screen saver timeouts for the devices.
- the server 128 can queue alerts for a period of time to give the devices time to return to safe zones.
- the application 150 can trigger the alarm based on a combination of one or more conditions, including zone exit or entry, movement and velocity, and charging status of the device.
- the application 150 can disable any critical functions on the phone, such as power off or factory reset, to prevent unauthorized configuration.
- the system can be operated in a GPS mode only.
- the geo-radius and other characteristics e.g., shape and size of zones
- a configurator program may be used to install the application 150 on the devices 10.
- the configurator can supervise so-called “retail operating system” versions of device 10 system software, to allow demonstration mode programming to continue to be available on the devices.
- the configurator operates by starting with a “retail operating system” loaded device 10.
- a full backup of the device 10 is performed.
- the full backup includes a backup of “retail operating system” contents and settings.
- the device 10 is updated to the latest commercial firmware that allows a supervision process to be installed.
- the application 150 is loaded onto device 10, e.g., via a golden image that is loaded onto device 10.
- the application 150 is launched and the device 10 is enrolled and registered with a server, a geo-radius zone is established, etc.
- the device 10 is restored with the “retail operating system” version that had been previously backed up, so that the device will continue to offer demonstration modes for customers.
- application 150 includes certain additional parameters (Speed, Tilt, Heading, Position Error) in the Heartbeat message periodically sent to the server 128. With respect to the messages sent from application 150 to server 128, in order to overcome certain restrictions imposed by the mobile device operating system, the application 150 performs certain additional steps when using cellular connectivity or operating on low battery.
- application 150 establishes a secure tunnel to send heartbeat and other status messages to the server 128. In such a case, the application 150 can send to the server 128 periodic device status including location, speed, position error, battery status, app status (safe or in alarm state). Once in an alarm condition, the application 150 can switch from, e.g., every 2 minutes to every 5 seconds.
- the application 150 can switch between different messaging mechanisms based on the background or foreground status of the application 150. For example, the application 150 can use direct HTTP(s) API calls to server 128 when in foreground and use HTTP(s) API call over a secure tunnel (as described above) when in background. In addition, while running in background, application 150 can also a have a fall back mechanism for Heartbeat retry to send the Heartbeat message via direct HTTP(s) API call to server in case secure tunnel establishment fails for any reason in any attempt.
- the server 128 monitors heartbeats of devices 10 in real time and wakes up the application 150, e.g., by using a mobile device management enable Kiosk command if no heartbeat received in last time period (e.g., 5 minutes) configurable at server 128. Both the server 128 and the application 150 can automatically disable Kiosk mode with in short time period to ensure that application 150 is not locked to screen moves to the background in a timely manner to avoid any user experience issues.
- Other alerting actions can include making a black screen upon alarm, and performing a keep alive check. Additional alerting actions include disallowing WiFi, Bluetooth settings, cellular communication.
- application 150 can detect permission changes and perform an alert action based on the permission changes and/or zone status information.
- FIG. 2 is an illustration of a monitoring area 200.
- the monitoring area 200 may represent a retail store, a stock trading floor, a library, a secured facility, a business enterprise, or any other location in which monitoring of mobile devices is desired.
- the monitoring area 300 may represent a variety of different usage models, in order to provide clarity, the examples set forth below will be stated from the point of view of a retail store, and it will be understood that such a description for clarity only will not limit the scope of the disclosure.
- the monitoring area 200 includes the perimeter of a building 201, which has in this example one table Tl, which may be used to display different models of mobile devices, such as a plurality of mobile devices, including two specific devices 10-1, 10-2 as described in detail in FIG. 1C.
- table Tl which may be used to display different models of mobile devices, such as a plurality of mobile devices, including two specific devices 10-1, 10-2 as described in detail in FIG. 1C.
- different brands or different models of devices from the same brand may be placed on the table Tl for consumer interaction.
- tables may be used to hold devices, such as eBook readers, for reading about different topics.
- each of the devices 10-1, 10-2 includes an application 150 (commonly referred to as an “app”) which provides mobile device management, including security monitoring.
- Each of the devices 10-1, 10-2 includes a GPS location tracker 122 (see FIG. 1C).
- a zone boundary Z1 is established as a geo-radius about the GPS location as determined via GPS location tracker 122 of 10-1.
- a user setting up application 150 can be standing at table Tl, and can set up the zone boundary Z1 as a geo-radius with a specific size.
- the establishment of zone boundary Z1 in turn establishes two zones, zone Zlin, at or inside the zone boundary Zl, and zone Zlout, outside the zone boundary Zl.
- the user can install an application 150 on device 10-2 to establish a zone boundary Z2 as a geo-radius about the GPS location as determined via the GPS location tracker 122 of device 10-2.
- the establishment of zone boundary Z2 in turn establishes two zones, zone Z2in, at or inside the zone boundary Z2, and zone Z2out, outside the zone boundary Z2.
- the zone boundaries Zl, Z2 are offset from one another. This offset can occur due to changes in the exact location that the user is standing when setting up the devices 10-1, 10-2, and has been exaggerated in FIG. 3 in order to show the difference.
- the present disclosure advantageously allows for the zone boundaries to be synchronized among multiple devices 10-1, 10-2, in a monitoring area for consistency. Such synchronization may be accomplished as follows. Each mobile device 10-1, 10-2 sends its configuration to the server 128. The server 128 then can fine tune various characteristics of the zone boundaries Zl, Z2, and send those fine-tuned configurations back to devices 10-1, 10-2 for implementation.
- the server 128 can average the zone boundaries of multiple devices to create a single zone boundary for all the devices to follow.
- the server could command each mobile device 10-1, 10-2 to increase or decrease the zone boundaries in order to relax or tighten the zone definitions in response to various conditions.
- zones can be contracted at a time when users are expected to start returning devices to a central location, e.g., at closing time of a library or store.
- the system of the present disclosure offers the significant benefit of allowing each device to be set up independently but still allow centralized management as needed, which provides the best of both centralized and independent configuration approaches.
- the system allows for multiple zone boundaries Z1-Z2, which may be overlapping or non-overlapping, to be established using GPS location trackers 122 of respective devices 10-1, 10-2. Indeed, tens or hundreds of devices could be located in monitoring area 200, each of which is running application 150 to manage mobile security by establishing corresponding zone boundaries.
- the devices 10-1, 10-2, which are running the monitoring application 150 continue to receive GPS location information from their corresponding GPS location trackers 122 as they move about the monitoring area 200.
- the monitoring application 150 of the mobile device 10 may optionally communicate with server 128 as desired, or may allow for a self-contained monitoring system without a server.
- Each deployment alternative has advantages, with a server- based model including the ability to have a centralized point from which to inventory and monitor all mobile devices, and the client-only device model including the simplicity of deployment afforded by a serverless installation.
- the devices 10-1, 10-2 may follow paths through the monitoring area, for example when picked up and used by a consumer in the retail store example.
- the device 10-1 initially is present in zone Zlin as depicted in FIG. 2A, but then is later present in zone Zlout.
- device 10-2 initially is present in zone Z2in as depicted in FIG. 2A, but then is later present in zone Z2out.
- the devices 10-1, 10-2 move within the monitoring area 200, the devices 10-1, 10-2 continues to receive GPS signals, and by comparing with the zone boundaries, may determine entry and/or exit of zones, and may perform zone-specific entry and/or exit functionality, as described in detail with respect to FIGS. 5A-5B, below.
- zone boundaries Zl, Z2 are depicted as circles, these zones may be of any conceivable shape, as depicted in FIG. 3C. In such a case, the zone boundary cannot be described simply as a circle with a radius, but can nonetheless be defined mathematically to cover a specific area.
- FIG. 3 is an illustration of another monitoring area 300.
- the monitoring area 300 includes a single exit 310 for either entering of exiting the monitoring area 300.
- the monitoring area 300 may represent a retail store, a stock trading floor, a library, a secured facility, a business enterprise, or any other location in which monitoring of mobile devices is desired.
- the monitoring area 200 may represent a variety of different usage models, in order to provide clarity, the examples set forth below will be stated from the point of view of a retail store, and it will be understood that such a description for clarity only will not limit the scope of the disclosure. [0053] Continuing with the embodiment of FIG.
- the monitoring area 300 includes three tables T1-T3, which may be used to display different models of mobile devices, such as a plurality of devices 10’, including one specific device 10 as described in detail in FIG. 1C.
- the tables T1-T3 may be used to hold devices, such as eBook readers, for reading about different topics.
- each of the devices 10, 10’ includes an application 150 (commonly referred to as an “app”) which provides mobile device management, including security monitoring.
- Each of the devices 10, 10’ includes a radiofrequency receiver, such as a Bluetooth receiver 126 (see FIG. 1C).
- beacons B1-B3 Adjacently disposed to the tables T1-T3 are beacons B1-B3, respectively. Each of the beacons B1-B3 include wireless transmission capabilities for sending a signal that is present within a corresponding zone Z1-Z3, respectively. In addition, the exit 210 also includes an adjacently disposed beacon B4, which establishes a corresponding zone Z4. Signals from the beacons B1-B4 may be received and processed by the devices 10, 10’. [0056] The beacons B1-B4 may be Bluetooth low energy beacons, such as Estimote beacons, including Estimote location beacons or Estimote proximity beacons, available from Estimote, Inc., of New York, New York.
- the beacons B1-B4 may be purpose-built beacons that include any suitable radiofrequency technology, such as WiFi, CDMA, etc., for sending a configurable signal that can define a zone, either through signal strength, data information, etc.
- the beacons B1-B4 send a specific signal that has a specific signal strength, and based on either the signal itself, the signal strength, the presence of a signal, or the lack of a detectable signal, or a combination of any of these factors, the zones Z1-Z4 may be established.
- the beacon itself may include multiple beam forming antennas that are programmable to create a non-symmetric zone.
- the actual zone created may be dependent on the presence of walls and materials within the monitoring area 300.
- the beacons B1-B4 are deployed near the tables T1-T3 and the exit 310, respectively.
- an individual beacon such as the beacon B2 may be deployed on the table T2 to establish the zone Z2 that includes the table T2 and surrounding floor space within the monitoring area 300.
- the beacon such as the beacon B4 may be deployed in or near the ceiling of the building that houses the monitoring area 300, and more specifically in the ceiling above the area of the exit 310, to establish the zone Z4.
- a specific beacon may be deployed inside a hidden ceiling or wall panel, inside a display case, in a locked office or closet, etc.
- Beacon deployment tools such as beacon receiving software operational on a mobile device such as the devices 10, 10’ can be used to show the signal strength of a beacon as an installer walks around the monitoring area 300.
- zones Z1-Z4 are depicted as circles, these zones may be of any conceivable shape, as noted above, due either to intrinsic characteristics of the monitoring area, such as walls and ceilings, etc., or due to configuration of the beacons to enable beam forming antennas, etc.
- the monitoring area 300 allows for multiple zones Z1-Z4, which may be overlapping or non-overlapping, to be established using the beacons B1-B4.
- the device 10 which has been configured with a monitoring application 150, then receives the beacon signals from the beacons B1-B4 as the device 10 moves about the monitoring area 300.
- the beacon signals may be received using the radiofrequency transceiver, such as the Bluetooth receiver 126 (FIG. 1C) of the device 10.
- the monitoring application 150 of the mobile device 10 may optionally communicate with a server if desired, or may allow for a self-contained monitoring system without a server.
- the device 10 may follow a path through the monitoring area, for example when picked up and used by a consumer in the retail store example. In such a case, in the illustrated example, the device 10 initially is present on the table Tl. Next, the device 10 follows the path PI to a location that is not within any of the zones Z1-Z4.
- the device 10 follows the path P2 to a location that is within both Z1 and Z2, then to through zone Zl, and to a location that is not within any of the zones Z1-Z4.
- the device 10 follows the path P3 through zone Z2 and into zone Z3.
- the device 10 follows the path P4 from the zone Z3 to a location that is not within any of the zones Z1-Z4, ending up in the zone Z4, near the exit 310.
- the device 10 As the device 10 traverses the paths P1-P5 within the monitoring area 300, the device 10 continues to receive signals from the beacons B1-B5. Upon receiving the signals from the beacons B1-B5, the device 10 may determine entry and/or exit of zones, and may perform zone-specific entry and/or exit functionality, as described in detail with respect to FIGS. 5A-5B, below.
- the monitoring area 400 includes a first-floor monitoring area 401, a stairwell monitoring area 402 and a second-floor monitoring area 403. Deployed within the monitoring area 400 are eight beacons B5-B12 which are used to establish zones Z5-Z12 in a manner similar to that described above with respect to FIG. 2.
- application 150 sets up a geo-radius based zone Z13 using the GPS location tracker 122 of the device 10’.
- six different mobile devices 10’ are depicted in five zones Z5, Z6, Z8, Z10 and Z12, and in the stairwell monitoring area 302 outside of any of zones Z5-Z12.
- the monitoring area 300 includes four tables T6, T8, T10 and T12.
- the alerting actions can be activated based on leaving the GPS established zone.
- the monitoring system may include numerous beacons, such as the beacons B5, B7, B9 and B11 (i.e., in the odd numbered zones) which are not affiliated with a table.
- FIGS. 5A-5B set forth detailed flow diagrams of a method 500 for providing security to the mobile device 10 of FIG. 1C.
- Each of FIGS. 5A-5B includes interconnected flow charts from the points of view of the mobile device 10 and the server S, with vertical flows representing actions within each of those four elements, and horizontal flows representing actions between two or more of those four elements.
- zones may be established in a monitoring area, such as the monitoring area 200 (FIG. 2), the monitoring area 300 (FIG. 3), or the monitoring area 400 (FIG. 4).
- the zones may be established using GPS only, beacons only, or by a combination of beacons and GPS.
- the zones may be established separately on each mobile devices 10.
- the zones may be first established on mobile devices 10 and then the zone definitions and characteristics, such as radius, may be tuned or changed by the server 128.
- An application 150, at block 501 may be installed on the device 10, either at the factory or at the monitoring area as devices are put out for display. At the time of installation, the zones may be set up for each device using GPS.
- the device 10 may send its configuration data to the server 128.
- the device may register itself, its location, its zone definitions, etc.
- the server receives the configuration data from the device and updates an internal database with the information at block 506. Meanwhile, not shown, numerous other devices in the same monitoring area (or different monitoring area) will send their information to the server 128, which will update its database to store the data.
- the server 128 at block 508 will modify the characteristics of one or more zone definitions of one or more devices.
- the device 10 at block 510 will receive the configuration change and will at block 512 revise its configuration, including, e.g., the geo-radius, distance, direction, and or shape of the zone.
- the mobile device itself will configure the zones without need of a server.
- the mobile device application 150 that is loaded onto the mobile device e.g ., at the factory or at a store
- this “server-less” mode of operation allows for the system to be comprised only of mobile devices, and eliminates the cost, ongoing management expense, and complexity of a server-based deployment.
- a person of ordinary skill in the art will readily understand that any of the features recited below that use a server could instead be deployed on one or more mobile devices when the system is operated in a “server-less” mode.
- the device 10 at block 514 determines that entry into a first zone Z1 has occurred and at block 516 performs zone Z1 entry actions.
- the device 10 at block 518 determines that entry into a second zone Z2 has occurred and at block 520 performs zone Z2 entry actions, and optionally zone Z2 exit actions, if so configured.
- the monitoring application 150 on the device 10 may deem that zone Z1 is its home zone, and the device 10 may allow normal operation of the device 10 by a user, while the monitoring application 150 recedes into the background so as not to impede the users interaction with the device 10.
- the device 10 may take note of the zone Z2 entry and switch the user interface of the device to a different foreground application or message, or may perform any other action, such as locking out some device applications but not others depending on the zone that has been entered.
- the camera may be disabled upon entry or exit to a specific zone that may include secret information that is not to be photographed.
- zone specific actions may disable access to non-secure internet subnets.
- the device 10 at block 522 enters the idle state, in which the device 10 is present in the same zone, and allows whatever access to the device by the user as has been indicated in the zone specific logic stored within the monitoring application 150. Again, the monitoring application 150 may continue to run in the background to detect zone exits and entries so that appropriate action may be taken.
- FIG. 5B is a flow diagram illustrating additional details of the alarming techniques.
- the method 500 begins at block 530 with the processor 12 (see FIG. 1C) determining if the device 10 is located in a safe zone, e.g., zone Zl. For example, the processor 12 can determine this based on GPS coordinates of the mobile device 10 being within the previously set geo-radius, and maintain the device 10 within a normal operating mode at block 532. If the processor 12 determines the device enters zone Z2 (FIG. 2), which may be denoted as a caution zone, the processor 12 activates an alarm mode at block 534. When the device 10 transitions to the alarm mode, the alarm 16 of the mobile device 10 is activated at block 536.
- the alarm can have various trigger options.
- the alarm 16 can be triggered when the device 10 is outside of a designated three to six foot radius. In another example, in large room monitoring, the alarm 16 can be triggered when the device 10 is beyond a fifty to seventy foot radius.
- the alarm 16 can be an audible alarm, visual alarm, or a combination thereof.
- the alarm 16 when the alarm 16 is activated during the alarm mode, the alarm 16 cannot be deactivated and the intensity of the alarm 16 cannot be lowered.
- the alarm 16 is an audible alarm, the volume of the alarm 16 cannot be lowered.
- the alarm issues directly from the mobile device 10, such as via a speaker at maximum volume.
- an alert email or message can be transmitted to a retail associate or manager. Notification of activation of the alarm mode is transmitted from the mobile device 10 to the server 128.
- the settings of the mobile device 10, such as the WiFi or cellular network settings, of the mobile device 10 are locked down to prevent the settings from being changed. Lockdown of these settings enables the mobile device 10 to continue to transmit data to the server 28 while the device 10 is in the alarm mode. Data can be monitored and the device data can be reset to factory settings. In addition, power button, device factory reset functionality, or program uninstall can be disabled to block device tampering and prevent the security measures from being removed from the device 10. In addition, an alarm screen can be activated to over-ride all activity of the device, rendering the device unusable. Furthermore, device proprietary information can be remotely deleted from the device 10. In addition, at block 538, the lockdown can include a lockdown of all buttons, and/or an activation lock so that the device is prevented from being activated or re-activated in the future.
- tracking of the mobile device 10 via the location tracker 22 is activated.
- the location of each mobile device 10 is shown on a GPS map at all times, even when the device 10 is in a home location.
- the location of a mobile device 10 is identified on a GPS map in response to activation of the alarm mode. Tracking of the device 10 via the location tracer 22 enables the device 10 to be retrieved in the event the device 10 is misplaced or stolen.
- a device inventory audit can be carried out without requiring a physical visit to each retail location.
- the data from the location tracker 22 can be transmitted to the server 28.
- the location tracker 22 can emit a tracking signal that can be used, such as by authorities, to locate the device 10.
- the location of the beacon 30 and mobile device 10 is continually tracked or monitored, even when in a retail environment.
- the imaging device 18 is activated to gather image data.
- the imaging device 18 can capture still shot or video data of a physical environment or a person holding the device.
- the image data can be transmitted to the server 28, from which the image data can be made accessible, such as to authorities.
- an image of a person enabling or disabling an alarm can be captured and transmitted to the server 28.
- the alarm mode can be activated when entering a zone instead of when exiting a zone.
- beacons are used to establish both comfort zones and alarm zones.
- a combination of security methods can be employed in which beacons are used to establish both comfort zones and alarm zones.
- aspects of the present invention may be embodied as a system, method, or computer program product. Accordingly, aspects of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, micro-code, etc.), or an embodiment combining software and hardware aspects that may all generally be referred to herein as a “service,” “circuit,” “circuitry,” “module,” and/or “system.” Furthermore, aspects of the present invention may take the form of a computer program product embodied in one or more computer readable medium(s) having computer readable program code embodied thereon. [0082] Any combination of one or more computer readable medium(s) may be utilized.
- the computer readable medium may be a computer readable signal medium or a computer readable storage medium.
- a computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing.
- a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
- Program code and/or executable instructions embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
- Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the “C” programming language or similar programming languages.
- the program code may execute entirely on the user's computer (device), partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server.
- the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider).
- LAN local area network
- WAN wide area network
- Internet Service Provider for example, AT&T, MCI, Sprint, EarthLink, MSN, GTE, etc.
- These computer program instructions may also be stored in a computer readable medium that can direct a computer, other programmable data processing apparatus, or other devices to function in a particular manner, such that the instructions stored in the computer readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
- the computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
Landscapes
- Health & Medical Sciences (AREA)
- Child & Adolescent Psychology (AREA)
- General Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Radar, Positioning & Navigation (AREA)
- Business, Economics & Management (AREA)
- Emergency Management (AREA)
- Alarm Systems (AREA)
- Position Fixing By Use Of Radio Waves (AREA)
Abstract
Description
Claims
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US202063054544P | 2020-07-21 | 2020-07-21 | |
US17/153,502 US11622275B2 (en) | 2017-02-21 | 2021-01-20 | Geo-radius based mobile device management |
PCT/US2021/042332 WO2022020325A1 (en) | 2020-07-21 | 2021-07-20 | Geo-radius based mobile device management |
Publications (1)
Publication Number | Publication Date |
---|---|
EP4186047A1 true EP4186047A1 (en) | 2023-05-31 |
Family
ID=77265325
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP21752434.7A Withdrawn EP4186047A1 (en) | 2020-07-21 | 2021-07-20 | Geo-radius based mobile device management |
Country Status (2)
Country | Link |
---|---|
EP (1) | EP4186047A1 (en) |
WO (1) | WO2022020325A1 (en) |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8593276B2 (en) * | 2006-02-01 | 2013-11-26 | Qualcomm Incorporated | Method and apparatus for asset geofencing |
EP3586531A4 (en) * | 2017-02-21 | 2020-11-18 | Scorpion Security Products, Inc. | Mobil device management system and method |
US10223553B2 (en) * | 2017-05-30 | 2019-03-05 | Apple Inc. | Wireless device security system |
US10645534B1 (en) * | 2019-02-01 | 2020-05-05 | Tile, Inc. | User presence-enabled tracking device functionality |
-
2021
- 2021-07-20 EP EP21752434.7A patent/EP4186047A1/en not_active Withdrawn
- 2021-07-20 WO PCT/US2021/042332 patent/WO2022020325A1/en unknown
Also Published As
Publication number | Publication date |
---|---|
WO2022020325A1 (en) | 2022-01-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11337074B2 (en) | Mobile device management method | |
US11527149B2 (en) | Emergency alert system | |
US10650593B2 (en) | Holographic technology implemented security solution | |
US11622275B2 (en) | Geo-radius based mobile device management | |
US11756394B2 (en) | Wireless tracking system for merchandise security | |
US10198922B2 (en) | Active infrared sensor | |
US10854058B2 (en) | Emergency alert system | |
US20160189514A1 (en) | Emergency monitoring of tagged objects | |
KR20150132379A (en) | Security system access profiles | |
EP1815685A2 (en) | Remote image tracking and methods thereof | |
US20200252430A1 (en) | Integrated security monitoring via watchdog trigger locking | |
US9449479B2 (en) | Security system | |
WO2023014583A1 (en) | Beacon-based integrated security monitoring | |
US9111432B2 (en) | Mobile duress dynamic registration and pendant management system | |
EP4186047A1 (en) | Geo-radius based mobile device management | |
WO2015073107A1 (en) | Mobile user interface for security panel | |
US11755716B2 (en) | MDM-based persistent security monitoring | |
KR102456405B1 (en) | Method and firefighting apparatus for alarming occurrence of fire at building | |
US20220373639A1 (en) | Asset tracker, method of tracking an asset and security server for locating the asset | |
CA3129046A1 (en) | Integrated security monitoring via watchdog trigger locking and mdm-based persistence | |
GB2622999A (en) | Asset Tracker | |
JP2020024583A (en) | Object detection device and object detection system | |
GB2501605A (en) | Mobile duress pendant management system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: UNKNOWN |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE |
|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
17P | Request for examination filed |
Effective date: 20230221 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
P01 | Opt-out of the competence of the unified patent court (upc) registered |
Effective date: 20230601 |
|
DAV | Request for validation of the european patent (deleted) | ||
DAX | Request for extension of the european patent (deleted) | ||
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20230914 |