Method and system for remote management of access to appliances
Embodiments described herein include methods and systems for remotely managing appliances associated with a user. A mobile phone is but one example of a controlled appliance. A third party operating system (OS) resident on the appliance and is in communication with a third party infrastructure. The appliance receives communications from the third party infrastructure related to management of the appliance, wherein management comprises controlling when the appliance is operable, and which functions the appliance can perform.
1. A method for remote management of a device, method comprising the steps of:
transmitting, wirelessly, a third party operating system (OS) to the device;
registering an online account associated with a user of the device;
tracking a period of authorised use of the device;
storing a copy of a whitelist on the device, the whitelist listing data that will be allowed to be transferred to the device;
controlling the device so that the device can be locked;
transmitting, wirelessly, communications related to management of the device; and
preventing tampering with the third party OS by locking a bootloader of the device based on the transmitted communications;
wherein locking the bootloader includes:
altering a bootloader binary code to prevent the bootloader from receiving or validating new software packages;
altering third party OS files to make them unrecognizable to the bootloader, while maintaining functionality for the user;
altering storage system drivers so that the bootloader is unable to write any new data files;
modifying memory addresses for a storage system for an embedded memory chip in the device so that the bootloader write operations have no effect on the device; and
engaging a built in lock of the bootloader, and additionally disabling an unlock command of the bootloader.
2. The method as claimed in claim 1 , wherein the step of controlling the device further comprises the steps of:
checking which app is being run, and if the app is not on the white list of approved apps, hiding the app and replacing it with a third party app;
checking a phone number of an incoming call, and if the phone number is not on the white list, sending the incoming call to a voicemail instead of ringing the device;
checking a phone number of an outgoing call, and if the phone number is not on the white list, preventing or cancelling the call; and
checking a message, and if a sender or a receiver is not on the white list, preventing the message from being sent or received.
3. The method as claimed in claim 1 , further comprising steps of:
determining whether a predetermined period of time has passed without submission of further payment;
checking continuously for the expiration of the predetermined period of time; and
powering the device off or disabling predetermined features of the third party OS, if the predetermined period of time has passed without the further payment.
4. The method as claimed in claim 3 , further comprising steps of:
creating a digital receipt including an ID and a digital signature on submission of the further payment;
receiving the digital receipt over-the-air at the device; and
re-enabling the predetermined features that were disabled, on verification of the digital receipt.
5. The method as claimed in claim 1 , wherein the step of registering the account comprises the steps of:
receiving a payment for proving access for a predetermined time of authorised use; and
transmitting an ID and account information to the user.
6. The method as claimed in claim 1 , further comprising a step of preventing the user from changing a local time on the device.
7. The method as claimed in claim 1 , further comprising a step of communicating with a payment provider that collects cash or electronic payments from users.
8. The method as claimed in claim 1 , further comprising a step of making device notifications inaccessible in a locked state.
9. A system for remotely managing a device, the system being in communication with the device associated with a user, over a communication network, the system comprising:
a memory device configured to store machine readable instructions;
a processor operably connected with the memory device, the processor obtaining the machine-readable instructions from the memory device, and being configured by the machine-readable instructions to:
transmit, wirelessly, a third party operating system (OS) to the device;
register an online account associated with a user of the device;
track a period of authorised use of the device;
store a copy of a whitelist on the device, the whitelist listing data that will be allowed to be transferred to the device;
control the device so that the device can be locked;
transmit, wirelessly, communications related to managing the device; and
prevent tampering with the third party OS by locking a bootloader of the device based on the transmitted communications;
wherein locking the bootloader includes:
altering a bootloader binary code to prevent the bootloader from receiving or validating new software packages;
altering third party OS files to make them unrecognizable to the bootloader, while maintaining functionality for the user;
altering storage system drivers so that the bootloader is unable to write any new data files;
modifying memory addresses for a storage system for an embedded memory chip in the device so that the bootloader write operations have no effect on the device; and
engaging a built in lock of the bootloader, and additionally disabling an unlock command of the bootloader.
10. The system as claimed in claim 9 , wherein the processor is further configured to control the device by:
checking which app is being run, and if the app is not on the white list of approved apps, hiding the app and replacing it with a third party app;
checking a phone number of an incoming call, and if the phone number is not on the white list, sending the incoming call to a voicemail instead of ringing the device;
checking a phone number of an outgoing call, and if the phone number is not on the white list, preventing or cancelling the call; and
checking a message, and if a sender or a receiver is not on the white list, preventing the message from being sent or received.
11. The system as claimed in claim 9 , wherein the processor is further configured to:
determine whether a predetermined period of time has passed without submission of further payment;
check continuously for the expiration of the predetermined period of time; and
power the device off or disabling predetermined features of the third party OS, if the predetermined period of time has passed without the further payment.
12. The system as claimed in claim 9 , wherein the processor is further configured to:
create a digital receipt including an ID and a digital signature on submission of the further payment;
receive the digital receipt over-the-air at the device; and
re-enable the predetermined features that were disabled, on verification of the digital receipt.
13. The system as claimed in claim 9 , wherein the processor is further configured to register the account by:
receiving a payment for proving access for a predetermined time of authorised use; and
transmitting an ID and account information to the user.
14. The system as claimed in claim 9 , wherein the processor is further configured to prevent the user from changing a local time on the device.
15. The system as claimed in claim 9 , wherein the processor is further configured to communicate with a payment provider that collects cash or electronic payments from users.
16. The system as claimed in claim 9 , wherein the processor is further configured to make device notifications inaccessible in a locked state.