Patent Description:
The present application may be more fully appreciated in connection with the following detailed description taken in conjunction with the accompanying drawings.

Examples associated with receptacle isolation are described. As will be more fully described herein, a service kiosk is an apparatus that is meant to store a set of devices for supporting a device-as-a-service model. The service kiosk includes a set of compartments each fitted with connectors to provide a connection between a device stored within the compartment and various control modules embedded in the service kiosk. The service kiosk may be physically installed in a location accessible to employees of a company relying on a device-as-a-service model to provide electronic devices to its employees. When service events associated with devices occur, the employees may visit the kiosk to have their device repaired by the kiosk and/or replaced by backup devices stored in the kiosk. This may increase the uptime of devices assigned to the employees. The backup devices may also reduce support costs associated with sending out technicians to provide support as a device failure can be at least temporarily mitigated by replacing the failed device with a new device in the kiosk, until eventually, a technician can be sent out to efficiently service or replace many devices stored in the kiosk in a single visit.

This disclosure covers the process by which the service kiosk may provision a device for a user and provide that device to the user. The service kiosk may receive provisioning data identifying applications to install on the device, a configuration for various settings, data associated with the user, and so forth. The service kiosk may then use the provisioning data to setup the device without user intervention. This may allow, for example, a new employee to have a device ready for them to pick up and begin working without having to perform certain initial device setups for themselves.

It is appreciated that, in the following description, numerous specific details are set forth to provide a thorough understanding of the examples. However, it is appreciated that the examples may be practiced without limitation to these specific details. In other instances, methods and structures may not be described in detail to avoid unnecessarily obscuring the description of the examples. Also, the examples may be used in combination with each other.

"Module", as used herein, includes but is not limited to hardware, firmware, software stored on a computer-readable medium or in execution on a machine, and/or combinations of each to perform a function(s) or an action(s), and/or to cause a function or action from another module, method, and/or system. A module may include a software controlled microprocessor, a discrete module, an analog circuit, a digital circuit, a programmed module device, a memory device containing instructions, and so on. Modules may include gates, combinations of gates, or other circuit components. Where multiple logical modules are described, it may be possible to incorporate the multiple logical modules into one physical module. Similarly, where a single logical module is described, it may be possible to distribute that single logical module between multiple physical modules.

As used herein, a service kiosk is intended to broadly describe a category of apparatuses used to securely store electronic devices in a manner that allows the devices to be configured while stored in the service kiosk. The service kiosk may have one or more compartments having data and/or power connectors. Devices that are attached to the data connectors may be configured either directly by the service kiosk or remotely by a remote service. Depending on where the devices are in their life cycle, the configuration may include setting up a device for a new user, modifying the device on behalf of a current user (e.g., reconfiguring the device, repairing the device), deprovisioning a device, and so forth. The service kiosk may also include an interface for communicating with and/or authenticating users. Once authenticated, the service kiosk may grant the user access to devices and or compartments to allow the user to perform a task related to a device assigned to the user. The task may involve obtaining a device from the kiosk, storing a device in the kiosk, and so forth. In various examples, the service kiosk may resemble, for example, a vending machine, a set of lockers, a chest of drawers, and so forth. Various structural components of a service kiosk may be made from wood, metal, plastic, or other suitable materials. The service kiosk may include structural elements such as legs, supports, wall fasteners, and so forth.

Consequently, the service kiosk may facilitate fulfilling service guarantees of a device-as-a-service (DAAS) offering. In a DAAS offering, a user or business may periodically pay a device provider for a device and a promise to service the device in the event the device fails. The service guarantee may include a variety of terms and in various examples may cover firmware, software, hardware, device data, user data, periodic lifecycle upgrades, and so forth. In this example, ownership of the device may remain with the device provider. In the event of a failure of the device or some other technical issue related to the device, a service kiosk stationed in a location accessible to the user may allow the device provider to more easily provide technical support for the device, up to and including replacing the device with a working device. For businesses that are relying on several devices at any given time, it may be cost effective for the business to have an on-site service kiosk to be able to quickly provision a new device for a new user, deprovision a device when that device's user leaves the business, and so forth, in addition to the technical support features that may be facilitated by the service kiosk itself. Eventually, when it is determined that the state of the devices in the service kiosk make it likely the service kiosk will begin failing to fulfil the service guarantee to the business (e.g., because the service kiosk is full, empty, has a number of devices in need of repair, or a combination of factors) a technician may be called to service the kiosk and/or devices stored within. This may be less expensive to the business and/or the device provider than having a technician on site, or having a technician called to service each malfunctioning device.

<FIG> illustrates an example service kiosk <NUM> associated with receptacle isolation. Service kiosk <NUM> includes a set of receptacles <NUM>. While <NUM> receptacles are shown, in other examples, service kiosk <NUM> may include a greater or lesser number of receptacles. The receptacles <NUM> may be adapted for storing electronic devices <NUM>. Different receptacles may be adapted to store different types of electronic devices <NUM>. Here for example, receptacles <NUM> may be adapted to store a first type of device (e.g., laptops), and receptacles <NUM> may be adapted to store a second type of device (e.g., cell phones). In other examples, receptacles may be configured to store different types, models, and/or brands of laptops, phones, tablets, or other device types. Receptacles <NUM> may be adapted to store different types of devices based on a variety of attributes. For example, receptacles <NUM> for storing phones may be smaller than receptacles <NUM> for storing laptops.

One receptacle <NUM> is illustrated in additional detail to further illustrate features of receptacles <NUM>. In this example, receptacle <NUM> is adapted for storing cellular phones <NUM>. This may affect the size of receptacle <NUM>, connectors <NUM> installed in receptacle <NUM>, and so forth. Here, receptacle <NUM> is shown as having a universal serial bus (USB) connector <NUM>. USB connector <NUM> may provide power to device <NUM> as well a data connection between device <NUM> and other components of service kiosk <NUM>. For laptops, receptacles <NUM> may use a different configuration of connectors <NUM> for providing power and/or data to a device <NUM>. For example, a regional power adaptor may be used for providing power to devices. The data connection for a laptop may be provided using, for example, an ethernet port, a universal serial bus port, or other types of ports.

It is also worth observing that in other examples, connector <NUM> may take different physical forms. Here, connector <NUM> is illustrated as a USB port in the rear wall of receptacle <NUM>. This may mean that to connect device <NUM> to connector <NUM>, an appropriate cable would also need to be provided. In other examples, connectors <NUM> may be cables or retractable cables of the appropriate type for connecting to a device type for which receptacle <NUM> is configured, a docking port of the appropriate type for connecting to a device type for which receptacle <NUM> is configured, a wireless communication transmitter (e.g., WIFI, Bluetooth) and so forth. The different connector types may have different tradeoffs. For example, a USB port as illustrated may ensure that a device appropriate cable is provided to a user who obtains a device from receptacle <NUM>, but would also mean that a user inserting a device <NUM> would have to bring or be provided such a cable. Alternatively, a connector that involves an installed cable or docking port may ensure that a person inserting a device into receptacle <NUM> would be able to insert the device without providing an additional cable, but would mean that a user retrieving a device from receptacle <NUM> would have to be provided an appropriate cable through an alternative method.

Receptacle <NUM> also includes a locking mechanism <NUM>. In this example, locking mechanism <NUM> is illustrated as being attached to a door <NUM> of receptacle <NUM>. However, locking mechanism <NUM> may take a variety of forms and its form may depend on the form by which door <NUM> is designed to give access to users. Here for example, door <NUM> is illustrated as opening outwards, though in other examples, a sliding, rotating, or retracting door may be appropriate. Locking mechanism <NUM> may be controllable by other components of service kiosk <NUM> to grant and restrict access to receptacle <NUM>. These other components and the situations in which access to receptacle <NUM> may be controlled are more fully discussed below. In some examples, it may also be desirable for locking mechanism <NUM> to be controllable via a physical mechanism (e.g., a service key). This may allow receptacle <NUM> to be serviced by a technician to, for example, modify the contents of receptacle <NUM>, repair a component of receptacle <NUM>, and so forth, even when service kiosk <NUM> is unpowered.

Receptacle <NUM> incorporates a digital isolator <NUM>. Here, digital isolator <NUM> is illustrated as a faraday cage <NUM> that is built into the structure of receptacle <NUM>. Faraday cage <NUM> may prevent wireless electronic signals from being transmitted by device <NUM> to devices external to receptacle <NUM>, as well as preventing device <NUM> from receiving wireless signals from devices external to receptacle <NUM>. In this example, faraday cage <NUM> is illustrated as being grounded <NUM>, though in other examples, the ground may be excluded. Other digital isolation techniques may also be employed. For example, digital isolation may also be achieved via the port <NUM> providing a data connection between device <NUM> and other components of service kiosk <NUM>. By way of illustration service kiosk <NUM> may implement individualized networks to prevent direct transmission of wired signals between devices in members of the set of receptacles <NUM>. This may also prevent devices <NUM> from detecting whether other devices are connected to service kiosk <NUM>. Digital isolation may also include signal isolation to ensure secure communication between devices in the receptacles <NUM> and other components of service kiosk <NUM>. In some examples, digital isolation may also incorporate power isolation.

Service kiosk <NUM> also includes an interface <NUM>. Interface <NUM> may include several components. Here interface <NUM> includes a display <NUM>, a keyboard <NUM>, a keypad <NUM>, and a radio frequency identification (RFID) scanner <NUM>. interface <NUM> may use these components to facilitate communicating with user interacting with service kiosk <NUM>. interface <NUM> may also include additional components including for example, cameras, touch input devices, external device connectors (e.g., to provide power and/or data to devices not in receptacles <NUM>), and so forth. Interface <NUM> may also make use of lights <NUM> associated with individual receptacles <NUM>. These lights <NUM> may allow the interface to direct a user to a specific receptacle <NUM> of service kiosk <NUM>. For example, when service kiosk <NUM> seeks to direct a user to a specific receptacle <NUM>, service kiosk <NUM> may control a light on that receptacle to turn on, blink, and so forth.

Service kiosk <NUM> may also include a variety of modules <NUM> for performing various functions associated with service kiosk <NUM> and/or configuring devices <NUM> stored in compartments <NUM> of service kiosk <NUM>. Modules <NUM> may be, for example, performed by a processor of a computer embedded in service kiosk <NUM>. In other examples, modules <NUM> may act as a communication pass through for communications between a remote information technology module (e.g., a device-as-a-service operation) and devices <NUM> stored in compartments <NUM> of service kiosk <NUM>.

In various examples, the modules <NUM> may interact with a user via interface <NUM>, with devices <NUM> in compartments <NUM>, with other modules <NUM>, and with remote servers and/or devices. For example, modules <NUM> may include an authentication module. The authentication module may receive a credential from a user and authenticate the credential based on authentication data associated with the user. The authentication data may have been received from a remote information technology module. When the user is successfully authenticated, the authentication module or another module <NUM> of service kiosk <NUM> may grant the user access to one or more receptacles <NUM> of service kiosk <NUM>. The user may provide the credential via user interface <NUM>. The credential may be, for example, a username and password pair that identifies the user that the user inputs via keyboard <NUM>. In another example, the credential may be an RFID signal the user provides via RFID scanner <NUM>. In another example, the user may authenticate themselves by attaching the mobile device <NUM> to a data connector of service kiosk <NUM>. Multi-factor authentication may also be appropriate involving a combination of the above and/or other authentication techniques.

In various examples, service kiosk <NUM> may be selective about granting user access to receptacles <NUM>. How service kiosk <NUM> determines which receptacles <NUM> to which a user is granted access may depend on what function service kiosk <NUM> is performing for the user. In various examples, the user may be picking up a device from service kiosk <NUM>, storing a device in service kiosk <NUM>, having a device repaired or configured by service kiosk <NUM>, diagnosing a technical issue with a device with the help of service kiosk <NUM>, and so forth. In these examples, service kiosk <NUM> may grant such a user access only to receptacles associated with the task being performed by service kiosk <NUM>. The user may be granted access to these receptacles <NUM> by service kiosk <NUM> controlling locking mechanisms <NUM> on the respective receptacles <NUM>. In cases where the user is a technician responsible for servicing service kiosk <NUM>, the user may be granted access to specific receptacles, or in some cases general access to all receptacles <NUM><NUM>. This may allow the technician to adjust the contents of the receptacles and/or perform physical maintenance on devices stored within service kiosk <NUM> or on service kiosk <NUM> itself.

Service kiosk <NUM> may also include a variety of other components <NUM>. For example, component <NUM> may be a compartment storing additional supplies that support the purpose of service kiosk <NUM>. By way of illustration, component <NUM> may store spare parts, extra data and/or power cables, and so forth that may be used by users interacting with service kiosk <NUM>. In other examples, component <NUM> may also store, for example, packaging and mailing supplies for shipping devices <NUM> for service. Other potential components <NUM> may also be contemplated.

<FIG> illustrates an example method <NUM>. Method <NUM> may be embodied on a non-transitory processor-readable medium storing processor-executable instructions. The instructions, when executed by a processor, may cause the processor to perform method <NUM>. In other examples, method <NUM> may exist within logic gates and/or RAM of an application specific integrated circuit (ASIC),.

Method <NUM> may perform various tasks associated with service kiosk device provisioning. Method <NUM> includes receiving authentication data, a device specification, and provisioning data at <NUM>. The authentication data, the device specification, and the provisioning data may be received at a service kiosk. The authentication data may be associated with a user. For example, the authentication data may specify a credential associated with the user that may be used to authenticate the user. The device specification may describe attributes of a device that should be delivered to the user. The device specification may describe a specific device (e.g., a specific device stored in the service kiosk), a specific model of a device, attributes of a device that should be delivered to the user (e.g., hard disk size, available ram, accessibility features), and so forth. The provisioning data may describe how to configure the device to be delivered to the user. By way of illustration, the provisioning data may identify data to install on the device, applications to install on the device, specific settings to adjust on the device, and so forth. The provisioning data may also identify, for example, settings to change on the device, updates to install on the device, and so forth.

Method <NUM> also includes selecting a selected device at <NUM>. The selected device may be selected from a set of devices stored in compartments of the service kiosk. Members of the set of devices may be operably connected to the service kiosk. Thus, the service kiosk may include data connectors that allow the service kiosk to communicate with members of the set of devices and/or control members of the set of devices to perform certain tasks. The selected device may be selected according to the device specification, By way of illustration, if the device specification includes a set of attributes describing a device that should be delivered to the user, a device in the service kiosk that is a nearest match to the device specification according to a matching policy may be selected. For example, the matching policy may specify in what scenarios it is appropriate to select a device that over achieves the device specification, under achieves the device specification, and when there are mixed results, which portions of a device specification to prioritize. For example, a matching policy may be configured to prioritize meeting a specified processing level over a data storage level when attempting to ensure a user's device is suitable for the tasks the user will perform.

Method <NUM> also includes configuring the selected device at <NUM>. The selected device may be configured based on the provisioning data. For example, when the provisioning data identifies applications to be installed on the device to be provided by the user, configuring the selected device may include installing the applications on the selected device, and so forth for other provisioning tasks identified in the provisioning data. In another example, configuring the selected device may include encoding the selected device with tracking data that identifies the device as being associated with the user. By way of illustration, this may be achieved by encoding the tracking data onto a radio frequency identification (RFID) chip embedded in the selected device. This may, for example, allow the user to use the device to facilitate multifactor identification of the user.

Method <NUM> also includes receiving a credential from the user at <NUM>. The credential may be received via an interface of the service kiosk. The interface may include, a display, a keypad, a keyboard, an RFID scanner, and so forth. Thus, the authentication data may include RFID data to be retrieved from an RFID badge assigned to the user by, for example, an employer of the user. The credential may also be, for example, a password known to the user, a biometric belonging to the user, a multifactor credential, and so forth.

When the credential matches the authentication data received at <NUM>, method <NUM> includes providing physical access to a compartment of the service kiosk to the user at <NUM>. The compartment of the service kiosk may store the selected device, Note that the user may not be the party to whom the selected device is assigned, but instead an authorized retriever of a device to be delivered to a third party. Thus, the user may be, for example, a manager of the third party, an assistant to the third party, and so forth.

<FIG> illustrates a method <NUM> associated with service kiosk device provisioning. Method <NUM> includes several actions similar to those described above with reference to method <NUM>. For example, method <NUM> includes receiving authentication data, a device specification, and provisioning data at <NUM>, selecting a selected device at <NUM>, configuring the selected device at <NUM>, receiving a credential from a user at <NUM>, and providing the user physical access to the selected device at <NUM>.

Method <NUM> also includes, at <NUM>, guiding the user to access the selected device from the compartment in which the selected device is stored. The user may be guided via the interface on the service kiosk. The interface for guiding the user may include, for example, a display on the kiosk that displays a location and/or a number of the compartment in which the selected device is stored, lights on individual compartments of the kiosk that light up or blink to identify the compartment in which the selected device is stored, and so forth. The user may also be guided to, for example, store a received device in the compartment in which the selected device is stored, or a different compartment of the service kiosk. The user may also be guided through the process of performing certain initial setup steps for the selected device.

Method <NUM> also includes registering the selected device as being assigned to the user at <NUM>. Registering the selected device may be performed to log assignment of the device to a user in an information technology database that facilitates managing device provided to users on behalf of an employer of the user. In some examples, the information technology database may be a part of a device-as-a-service ecosystem operated by an employer of the user. Thus, the service kiosk may be installed in a facility operated by the employer of the user.

<FIG> illustrates an example service kiosk <NUM> associated with service kiosk device provisioning. Service kiosk <NUM> includes a set of receptacles <NUM>. An example receptacle <NUM> is illustrated in additional detail. Each member of the set of receptacles <NUM> may include an adaptor <NUM>. Adaptor <NUM> may provide power to an electronic device <NUM>, a data connection between electronic device <NUM> and components of service kiosk <NUM>, and so forth. Here, adaptor <NUM> is illustrated as a USB port that provides both power and data connections to device <NUM>. However, in other examples, different connectors may be appropriate for connecting different types of devices to service kiosk <NUM>. Members of the set of receptacles <NUM> may also include a locking mechanism <NUM> to secure the contents of the receptacles <NUM> (e.g., electronic device <NUM>). In this example, locking mechanism <NUM> is attached to a door <NUM> of example receptacle <NUM>. Here the locking mechanism may be able to rotate in a manner that prevents door <NUM> from opening. In other examples, locking mechanism <NUM> may take other forms. Receptacles <NUM> also include a digital isolator to electrically isolate electronic devices from devices stored in other receptacles. This prevents electronic devices from communicating with one another, thereby preventing the spread of malware between devices stored in receptacles <NUM>.

Service kiosk <NUM> also includes a data receipt module <NUM>. Data receipt module <NUM> may receive a set of data associated with a user. The data associated with the user may include authentication information associated with the user, a specification of a device to be delivered to the user, provisioning data for configuring the device to be delivered to the user, and so forth.

Service kiosk <NUM> also includes a provisioning module <NUM>. Provisioning module <NUM> may select a selected device from a selected member of the set of receptacles <NUM>. In this example, device <NUM> stored in receptacle <NUM> has been selected. Provisioning module <NUM> may select the selected device based on the device specification. The device specification may specify a device by, for example, a device type, a device number, attributes of the device, and so forth. Provisioning module <NUM> may also configure the selected device based on the provisioning data. Configuring the selected device based on the provisioning data may include, for example, installing an application identified in the provisioning data on the selected device, storing data identified in the provisioning data on the selected device, configuring a setting on the selected device according to the provisioning data, and so forth.

Service kiosk <NUM> also includes an authentication module <NUM>. Authentication module <NUM> may authenticate the user based on a credential provided by the user. Authentication module <NUM> may also authenticate the user based on the authentication information associated with the user. When authentication module <NUM> authenticates the user, authentication module <NUM> may control a selected locking mechanism (e.g., locking mechanism <NUM>) of the selected member <NUM> of the set of receptacles <NUM> to grant physical access to the user. This may allow the user to acquire the selected device <NUM>.

In some examples, service kiosk <NUM> may also include an interface module (not shown). The interface module may guide the user through the process of, storing a received device from the user in a receptacle <NUM>, obtaining selected device <NUM> from selected receptacle <NUM>, performing an initial setup of selected device <NUM>, and so forth. Interface module may make use of various components of service kiosk <NUM> for guiding the user through these processes including, for example, lights on receptacles <NUM> to identify receptacles <NUM> the user should access, a display for providing instructions to the user, various input devices for receiving feedback from the user, and so forth.

<FIG> illustrates an example computing device in which example systems and methods, and equivalents, may operate. The example computing device may be a computer <NUM> that includes a processor <NUM> and a memory <NUM> connected by a bus <NUM>. Computer <NUM> includes a service kiosk device provisioning module <NUM>. Service kiosk device provisioning module <NUM> may perform, alone or in combination, various functions described above with reference to the example systems, methods, and so forth. In different examples, service kiosk device provisioning module <NUM> may be implemented as a non-transitory computer-readable medium storing processor-executable instructions, in hardware, software, firmware, an application specific integrated circuit, and/or combinations thereof.

The instructions may also be presented to computer <NUM> as data <NUM> and/or process <NUM> that are temporarily stored in memory <NUM> and then executed by processor <NUM>. The processor <NUM> may be a variety of processors including dual microprocessor and other multi-processor architectures. Memory <NUM> may include non-volatile memory (e.g., read-only memory, flash memory, memristor) and/or volatile memory (e.g., random access memory). Memory <NUM> may also be, for example, a magnetic disk drive, a solid state disk drive, a floppy disk drive, a tape drive, a flash memory card, an optical disk, and so on. Thus, memory <NUM> may store process <NUM> and/or data <NUM>. Computer <NUM> may also be associated with other devices including other computers, devices, peripherals, and so forth in numerous configurations (not shown).

Claim 1:
A method, comprising:
preventing, via digital isolators in each of a set of compartments of a service kiosk (<NUM>, <NUM>), electronic devices (<NUM>, <NUM>) stored in different compartments of the set of compartments of the service kiosk (<NUM>, <NUM>) and operably connected to the service kiosk (<NUM>, <NUM>) via a connector (<NUM>, <NUM>), from communicating with one another wirelessly and via the connector (<NUM>, <NUM>);
receiving, at the service kiosk (<NUM>, <NUM>), authentication data associated with a user, a specification of an electronic device to be delivered to the user, and provisioning data for configuring the electronic device to be delivered to the user;
selecting a selected electronic device (<NUM>) stored in a selected member of the set of compartments from one of the electronic devices (<NUM>) stored in the set of compartments of the service kiosk (<NUM>, <NUM>), where the selected electronic device (<NUM>) is selected according to the electronic device specification;
configuring the selected electronic device (<NUM>) based on the provisioning data;
receiving, via an interface (<NUM>) of the service kiosk (<NUM>, <NUM>), a credential from the user; and
providing physical access to the selected member of the set of compartments of the service kiosk (<NUM>, <NUM>) in which the selected electronic device (<NUM>) is stored when the credential matches the authentication data.