Electronic devices having adaptive security profiles and methods for selecting the same

• US 10,135,839 B2
• Filed: 01/09/2017
• Issued: 11/20/2018
• Est. Priority Date: 05/04/2011
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Ingrassia, Jr., Michael I., Lee, Jeffery T.
• Primary Examiner(s): Holder, Bradley
• Application Number:
  US15/401,835
• Publication Number:
  US 20170353473A1
• Time in Patent Office: 680 Days
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

Adaptive security profiles are supported on an electronic device. One or more security profiles may be automatically or selectively applied to the device based on the device'"'"'s location and one or more geographic zone definitions. The security profiles may be used to determine the level of authentication or number of invalid authentication attempts for a particular feature or application or set of features or applications.

Claims

1. An electronic device, comprising:

a display;

one or more hardware processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

determining one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

requiring a first authentication process for the user to access the electronic device when the electronic device is located within one or more of the trusted zones;

requiring a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receiving at least part of an address associated with a desired trusted zone; and

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

2. The device of claim 1, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

3. The device of claim 1, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

4. The device of claim 3, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

5. The device of claim 1, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

6. The device of claim 5, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

7. The device of claim 1, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

8. The device of claim 1, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

9. The device of claim 1, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

10. A method, comprising:

at an electronic device with a display;

determining one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

requiring a first authentication process for the user to access the electronic device when the electronic device is located within a trusted zone;

requiring a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receiving at least part of an address associated with a desired trusted zone; and

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

11. The method of claim 10, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

12. The method of claim 10, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

13. The method of claim 12, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

14. The method of claim 10, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

15. The method of claim 14, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

16. The method of claim 10, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

17. The method of claim 10, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

18. The method of claim 10, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

19. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display, cause the device to:

determine one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determine a current location of the electronic device;

determine whether the current location of the electronic device is in one or more of the trusted zones;

require a first authentication process for the user to access the electronic device when the electronic device is located within a trusted zone;

require a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receive at least part of an address associated with a desired trusted zone; and

add a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

20. The computer readable storage medium of claim 19, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

21. The computer readable storage medium of claim 19, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

22. The computer readable storage medium of claim 21, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

23. The computer readable storage medium of claim 19, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

24. The computer readable storage medium of claim 23, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

25. The computer readable storage medium of claim 19, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

26. The computer readable storage medium of claim 19, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

27. The computer readable storage medium of claim 19, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

28. An electronic device, comprising:

a display;

one or more hardware processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

determining one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

granting the user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

requiring an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receiving at least part of an address associated with a desired trusted zone; and

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

29. The device of claim 28, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

30. The device of claim 28, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

31. The device of claim 30, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

32. The device of claim 28, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

33. The device of claim 28, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

34. The device of claim 28, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

35. The device of claim 28, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

36. A method, comprising:

at an electronic device with a display;

determining one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

granting the user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

requiring an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receiving at least part of an address associated with a desired trusted zone; and

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

37. The method of claim 36, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

38. The method of claim 36, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

39. The method of claim 38, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

40. The method of claim 36, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

41. The method of claim 36, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

42. The method of claim 36, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

43. The method of claim 36, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

44. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display, cause the device to:

determine one or more trusted zones in which the electronic device may be located, wherein at least one of the one or more trusted zones is defined by a user using at least part of an address associated with a respective trusted zone;

determine a current location of the electronic device;

determine whether the current location of the electronic device is in one or more of the trusted zones;

grant the user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

require an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receive at least part of an address associated with a desired trusted zone; and

add a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

45. The computer readable storage medium of claim 44, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

46. The computer readable storage medium of claim 44, further including instructions for:

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device.

47. The computer readable storage medium of claim 46, further including instructions for:

receiving user input at a location on the map;

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

48. The computer readable storage medium of claim 44, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

49. The computer readable storage medium of claim 44, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

50. The computer readable storage medium of claim 44, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

51. The computer readable storage medium of claim 44, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

52. An electronic device, comprising:

a display;

one or more hardware processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

determining one or more trusted zones in which the electronic device may be located;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

requiring a first authentication process for a user to access the electronic device when the electronic device is located within one or more of the trusted zones;

requiring a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device;

receiving user input at a location on the map; and

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

53. The device of claim 52, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

54. The device of claim 52, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

55. The device of claim 52, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

56. The device of claim 52, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

57. The device of claim 56, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

58. The device of claim 52, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

59. The device of claim 52, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

60. The device of claim 52, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

61. A method, comprising:

at an electronic device with a display;

determining one or more trusted zones in which the electronic device may be located;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

requiring a first authentication process for a user to access the electronic device when the electronic device is located within a trusted zone;

requiring a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device;

receiving user input at a location on the map; and

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

62. The method of claim 61, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

63. The method of claim 61, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

64. The method of claim 61, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

65. The method of claim 61, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

66. The method of claim 65, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

67. The method of claim 61, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

68. The method of claim 61, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

69. The method of claim 61, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

70. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display, cause the device to:

determine one or more trusted zones in which the electronic device may be located;

determine a current location of the electronic device;

determine whether the current location of the electronic device is in one or more of the trusted zones;

require a first authentication process for a user to access the electronic device when the electronic device is located within a trusted zone;

require a second authentication process for the user to access the electronic device when the electronic device is located outside of any trusted zones;

receive a request to define a trusted zone;

in response to receiving the request to define a trusted zone, display a map on the display of the electronic device;

receive user input at a location on the map; and

add a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

71. The computer readable storage medium of claim 70, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

72. The computer readable storage medium of claim 70, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

73. The computer readable storage medium of claim 70, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

74. The computer readable storage medium of claim 70, wherein the first authentication process authenticates user input that comprises entry of at least one of a first touch input, a first pin number, a first passcode, and a first biometric indicator.

75. The computer readable storage medium of claim 74, wherein the second authentication process authenticates user input that comprises entry of at least one of a second touch input, a second pin number, a second passcode, and a second biometric indicator.

76. The computer readable storage medium of claim 70, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

77. The computer readable storage medium of claim 70, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

78. The computer readable storage medium of claim 70, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

79. An electronic device, comprising:

a display;

one or more hardware processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

determining one or more trusted zones in which the electronic device may be located;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

granting a user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

requiring an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device;

receiving user input at a location on the map; and

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

80. The device of claim 79, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

81. The device of claim 79, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

82. The device of claim 79, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

83. The device of claim 79, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

84. The device of claim 79, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

85. The device of claim 79, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

86. The device of claim 79, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

87. A method, comprising:

at an electronic device with a display;

determining one or more trusted zones in which the electronic device may be located;

determining a current location of the electronic device;

determining whether the current location of the electronic device is in one or more of the trusted zones;

granting a user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

requiring an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receiving a request to define a trusted zone;

in response to receiving the request to define a trusted zone, displaying a map on the display of the electronic device;

receiving user input at a location on the map; and

adding a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

88. The method of claim 87, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

89. The method of claim 87, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

90. The method of claim 87, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

91. The method of claim 87, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

92. The method of claim 87, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

93. The method of claim 87, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

94. The method of claim 87, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.

95. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device with a display, cause the device to:

determine one or more trusted zones in which the electronic device may be located;

determine a current location of the electronic device;

determine whether the current location of the electronic device is in one or more of the trusted zones;

grant a user access to the electronic device when the current location of the electronic device is in one or more of the trusted zones;

require an authentication process for the user to access the electronic device when the current location of the electronic device is located outside of any trusted zones;

receive a request to define a trusted zone;

in response to receiving the request to define a trusted zone, display a map on the display of the electronic device;

receive user input at a location on the map; and

add a new trusted zone corresponding to the location of the user input on the map to the one or more trusted zones.

96. The computer readable storage medium of claim 95, wherein the trusted zones are defined by at least one of geographic location, time, association with a particular network, association with a RFID tag, or association with other networked devices.

97. The computer readable storage medium of claim 95, wherein at least one of the one or more trusted zones is defined by the user using at least part of an address associated with a desired trusted zone.

98. The computer readable storage medium of claim 95, further including limitations for:

receiving at least part of an address associated with a desired trusted zone;

adding a new trusted zone corresponding to the desired trusted zone to the one or more trusted zones.

99. The computer readable storage medium of claim 95, wherein the authentication process authenticates user input that comprises entry of at least one of a touch input, pin number, passcode, and biometric indicator.

100. The computer readable storage medium of claim 95, wherein access to the electronic device comprises turning the electronic device on, waking the electronic device up from a sleep mode, accessing one or more applications stored in the memory of the electronic device, or altering device settings.

101. The computer readable storage medium of claim 95, further including instructions for:

receiving a request to display the one or more trusted zones;

in response to receiving the request to display the one or more trusted zones, displaying a list of the one or more trusted zones.

102. The computer readable storage medium of claim 95, wherein the current location of the electronic device is determined using a global positioning system (GPS) receiver.