METHOD AND APPARATUS FOR DIFFERENTIATED ACCESS CONTROL

• US 20120079586A1
• Filed: 09/23/2011
• Published: 03/29/2012
• Est. Priority Date: 09/24/2010
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: BROWN, Michael Kenneth, BENDER, Christopher Lyle, LITTLE, Herbert Anthony
• Granted Patent: US 9,047,451 B2
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

A method for differentiated access control on a computing device, and the computing device, the method including starting a timer on the computing device; resetting the timer if activity occurs on the computing device prior to the expiration of the timer; and preventing a subset of applications from being launched or enabled on expiry of the timer.

Claims

1. A method for providing differentiated access control on a computing device, the method comprising:

starting a timer on the computing device, the timer being an inactivity timer for at least one of a plurality of application subsets;

resetting the timer if activity occurs on the computing device prior to the expiration of the timer; and

preventing each application associated with the at least one of the plurality of application subsets from being launched or enabled on expiry of the timer.

2. The method of claim 1, wherein each of the plurality of application subsets utilize a separate file system in memory of the computing device.

3. The method of claim 1, wherein the locking comprises changing a graphical representation of an application thumbnail or icon present on the computing device.

4. The method of claim 3, wherein the graphical representation is a grid style and the changing replaces the application thumbnail with an obscured out or locked graphic.

5. The method of claim 4, wherein selection of the obscured graphic initiates a password prompt.

6. The method of claim 1, wherein the timer has a plurality of expiry times for different subsets of applications.

7. The method of claim 1, wherein one of the plurality of application subsets is designated as corporate applications.

8. The method of claim 7, wherein the designating is based on an enterprise information technology policy.

9. The method of claim 7, wherein the designating is done on the computing device.

10. The method of claim 1, wherein activity occurring on the computing device includes any interacting with a user interface on the computing device.

11. The method of claim 1, wherein activity occurring on the computing device includes only interaction with any one of the subset of applications.

12. The method of claim 1, further comprising unlocking each application associated with the at least one of the plurality of applications subsets in response to successful authentication.

13. The method of claim 1, further comprising preventing each application associated with the at least one of the plurality of application subsets whose timer has expired from being launched or enabled, while allowing the launching or enablement of one or more applications associated with another of the plurality of application subsets.

14. A computing device comprising:

a processor;

a user interface; and

memory,

wherein the processor, user interface and memory cooperate to;

start a timer on the computing device, the timer being an inactivity timer for at least one of a plurality of application subsets;

reset the timer if activity occurs on the computing device prior to the expiration of the timer; and

prevent each application associated with the at least one of the plurality of application subsets from being launched or enabled on expiry of the timer.

15. The computing device of claim 14, wherein each of the plurality of application subsets utilize a separate file system in memory of the computing device.

16. The computing device of claim 14, wherein the processor, user interface and memory further cooperate to prevent by changing a graphical representation of an application thumbnail or icon displayed on the computing device.

17. The computing device of claim 16, wherein the graphical representation is a grid style and the changing replaces the application thumbnail with an obscured or locked graphic.

18. The computing device of claim 17, wherein selection of the obscured or locked graphic on the user interface initiates a password prompt.

19. The computing device of claim 14, wherein the timer has a plurality of expiry times for different subsets of applications.

20. The computing device of claim 14, wherein one of the subset of applications are designated as corporate applications.

21. The computing device of claim 20, wherein the designating is made based on an enterprise information technology policy.

22. The computing device of claim 19, wherein the designating is done on the computing device.

23. The computing device of claim 14, wherein activity occurring on the computing device includes any interaction with the user interface.

24. The computing device of claim 14, wherein activity occurring on the computing device includes only interaction with any one of the subset of applications.

25. The computing device of claim 14, wherein the computing device comprises at least one of a mobile device, a smartphone, a tablet computer, a desktop computer, or a laptop computer.