Secure Desktop Interface

• US 20120072858A1
• Filed: 09/20/2010
• Published: 03/22/2012
• Est. Priority Date: 09/20/2010
• Status: Active Grant

• Current Assignee: Bosch Automotive Service Solutions LLC (SPX Corporation)
• Original Assignee: Bosch Automotive Service Solutions LLC (SPX Corporation)
• Inventors: Thoppae, Vijai M., Toburen, Matt, Sanders, Gordon
• Granted Patent: US 9,432,347 B2
• Time in Patent Office: Days
• US Class Current: 715/763
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

An apparatus and system for providing a secure user interface restricting the access of users to selected functions, files, and communications by implementing a customizable secure graphical user interface. The degree to which the user'"'"'s access is restricted may depended on levels of authorization granted to the user. The secure user interface may be implemented on a device and employed to aid a user in executing diagnostic, service, maintenance, and data gathering tasks. The secure computing device may be connectable to other computing devices of like of different kind. The secure computing device may provide security against non-authorized users by requiring user identification and disabling the device when proper identification is not given or the device is deemed missing.

Claims

1. A system for securing information accessible via a computing device, comprising:

a first memory configured to store instructions for providing a customizable graphical user interface capable of granting and restricting access to stored information on the memory and executable functions based on a user identification, the graphical user interface sits on top of an operating system of the computing device;

a processor communicatively connected to the memory and configured to receive and execute the instructions;

an input communicatively connected to the processor and configured to provide signals to the processor, wherein the signals may represent the user identification; and

a display communicatively connected to the processor and configured to display the customizable user interface, wherein the display is configured to show icons that are available based on the user identification and a level of access assigned to the user identification.

2. The system of claim 1 further comprising a communication device configured to connect the computing device to a remote device via a network.

3. The system of claim 2, wherein the remote device further comprises a second memory, and the remote device is configured to provide the computing device with the instructions from the second memory via the network.

4. The system of claim 2, wherein the remote device is a vehicle connected to the network via an OBD II connector.

5. The system of claim 1, wherein the display is configured to display a prompt to a user for the user identification.

6. The system of claim 1, wherein the user identification comprises a username and password or biometric data.

7. The system of claim 1, wherein the instructions are configured to limit user access based on an access level assigned to individual users.

8. The system of claim 1, wherein the processor locks out the computing device when the user identification is not an authorized user identification.

9. The system of claim 1, wherein the processor locks out the computing device if it'"'"'s removed a predetermined distance from a network.

10. A method for securing information accessible via a computing device, comprising:

displaying a customizable graphical user interface on a display, the graphical user interface sits on top of an operating system of the computing device;

receiving an instruction from a memory to prompt for a user identification;

receiving the user identification via an input;

verifying the user identification via a processor;

determining a level of access associated with the user identification via the processor; and

granting access according to the level of access associated with the user identification via the processor.

11. The method of claim 10, wherein receiving an instruction to prompt for the user identification occurs at a login screen.

12. The method of claim 10, wherein receiving an instruction to prompt for the user identification occurs in response to receiving a signal form the input.

13. The method of claim 10 further comprising:

receiving instructions via a network from a remote device.

14. The method of claim 10, further comprising:

discontinuing responding to input signals when verifying the user identification fails.

15. The method of claim 10, further comprising:

shutting down the computing device when verification fails.

16. The method of claim 10, further comprising restricting communication external to the computing device to receiving communications via a network from a remote device.

17. The method of claim 10, further comprising:

locking the computing device when the computing device is a predetermined distant from a remote device.

18. The method of claim 10, further comprising:

displaying items for which access is granted according to the level of access associated with the user identification.

19. The method of claim 10, wherein verifying a user identification further comprises verifying a username and password or biometric information.

20. The method of claim 10, further comprising:

detecting a connection to a given network; and

shutting down the computing device if the given network is not detected.

21. A system for securing information accessible via a computing device, comprising:

a memory means configured to store instructions for providing a customizable graphical user interface capable of granting and restricting access to stored information on the memory means and executable functions based on a user identification, the graphical user interface sits on top of an operating system of the computing device;

a processing means communicatively connected to the memory means and configured to receive and execute the instructions;

an input means communicatively connected to the processing means and configured to provide signals to the processing means, wherein the signals may represent the user identification; and

a display means communicatively connected to the processing means and configured to display the customizable user interface, wherein the display means is configured to show icons that are available based on the user identification and a level of access assigned to the user identification.

22. The system of claim 21, further comprising:

connecting means configured to connect the computing device to a network;

receiving means configured to receive the instructions via the network from a remote device.