Multiple time outs for applications in a mobile device

• US 20060089125A1
• Filed: 09/29/2005
• Published: 04/27/2006
• Est. Priority Date: 10/22/2004
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Frank, Edward H.
• Granted Patent: US 8,584,200 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A method for revoking access to a mobile device includes providing a plurality of authenticated applications accessible by the mobile device, and providing a plurality of revocation timeout intervals for revoking access by the mobile device to the plurality of authenticated applications. Access to a first authenticated application is revoked after a first timeout interval and access to a second authenticated application is revoked after a second timeout interval.

Claims

1. A method for revoking user access to a mobile communications network, the method comprising:

providing a server;

providing a mobile device for communicating with the server;

providing a plurality of authenticated applications for receiving data from the server, the authenticated applications having one or more authentication parameters associated therewith;

providing a plurality of revocation timeout intervals for revoking access by the server to the plurality of authenticated applications running on the mobile device;

associating each of the plurality of authenticated applications provided by the mobile device with one of the plurality of revocation timeout intervals different from the revocation timeout interval associated with any other of the plurality of authenticated applications;

regularly polling the plurality of authenticated applications to determine the continued validity thereof; and

revoking access to one of the authenticated applications if, during the revocation timeout interval associated with the one of the authenticated applications, the one of the authenticated applications has failed to satisfy the authentication parameters associated therewith.

2. The method of claim 1, wherein each of the plurality of authenticated applications is associated with a corresponding one of the authentication parameters in response to a user selection.

3. A method for revoking access to a mobile device, comprising:

providing a plurality of authenticated applications accessible by the mobile device; and

providing a plurality of revocation timeout intervals for revoking access by the mobile device to the plurality of authenticated applications;

wherein access to a first one of the authenticated applications is revoked after a first one of the timeout intervals; and

wherein access to a second one of the authenticated applications is revoked after a second one of the timeout intervals.

4. The method of claim 3, further comprising resetting the first one of the timeout intervals if during a first fractional interval thereof, the first one of the authenticated applications is accessed by a user of the mobile device;

and

resetting the second one of the timeout intervals if during a second fractional interval thereof, the second one of the authenticated applications is accessed by the user of the mobile device.

5. The method of claim 3, further comprising resetting the first one of the timeout intervals if during the first one of the timeout intervals, the first one of the authenticated applications is re-authenticated by the mobile device;

and

resetting the second one of the timeout intervals if during the second one of the timeout intervals, the second one of the authenticated applications is re-authenticated by the mobile device.

6. The method of claim 3 wherein a server communicates with the mobile device;

and

wherein the plurality of authenticated applications accessible by the mobile device receive data from the server.

7. The method of claim 6, wherein data is sent between the server and the mobile device in response to access by the mobile device to a particular one of the authenticated applications.

8. The method of claim 3, wherein the plurality of authenticated applications provided by the mobile device includes e-mail services.

9. The method of claim 3, wherein the authenticated applications are authenticated by an entry of one or more pass codes.

10. The method of claim 3, wherein the authenticated applications are authenticated using a geographic location of the mobile device.

11. The method of claim 3, wherein the authenticated applications are authenticated using one or more biometric data of a user of the mobile device.

12. A wireless network comprising:

a server; and

a mobile device for communicating with the server, the mobile device providing a plurality of authenticated applications for receiving data from the server;

an agent for providing a plurality of revocation timeout intervals for revoking access by the mobile device to the plurality of authenticated applications running on the mobile device;

wherein access to each of the plurality of authenticated applications is revoked by the agent using one of the plurality of revocation timeout intervals different from the revocation timeout interval used to revoke access to any other of the plurality of authenticated applications.

13. The system of claim 12, wherein a first one of the timeout intervals is reset by the server if during a first fractional interval, a first one of the authenticated applications is utilized by a user of the mobile device;

and

wherein a second one of the timeout intervals is reset by the server if during a second fractional interval, a second one of the authenticated applications is utilized by the user of the mobile device.

14. The system of claim 12, wherein a first one of the timeout intervals is reset by the server if during a first one of the timeout intervals, the first one of the authenticated applications is re-authenticated by the server;

and

wherein a second one of the timeout intervals is reset by the server if during a second one of the timeout intervals, the second one of the authenticated applications is re-authenticated by the server.

15. The system of claim 12, wherein the agent revokes access to an authenticated application provided by the mobile device to prevent the transmission of data associated with the authenticated application between the server and the mobile device.

16. The system of claim 12, wherein the plurality of authenticated applications provided by the mobile device include e-mail services.

17. The system of claim 12, wherein the authenticated applications are authenticated by an entry of one or more pass codes.

18. The system of claim 12, wherein the authenticated applications are authenticated using a geographic location of the mobile device.

19. The system of claim 12, wherein the authenticated applications are authenticated using one or more biometric data of a user of the mobile device.

20. The system of claim 12, wherein at least one of the authenticated applications are authenticated using a plurality of authentication parameters.