METHOD AND APPARATUS FOR MANAGEMENT OF MULTIPLE GROUPED RESOURCES ON DEVICE

• US 20130227637A1
• Filed: 02/15/2013
• Published: 08/29/2013
• Est. Priority Date: 02/16/2012
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: QNX Software Systems Limited (Canada) (Blackberry Limited), Research In Motion Limited (Blackberry Limited)
• Inventors: NAGARAJAN, Sivakumar, BENDER, Christopher Lyle, McCONNAUGHAY, Mark
• Granted Patent: US 8,931,045 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode

Abstract

A method and computing device for managing grouped resources comprising receiving, at the computing device, a policy for a set of grouped resources; applying the policy; locking at least one of the computing device or the set of grouped resources associated with the policy; waiting for receipt of an authentication parameter at the computing device; verifying the authentication parameter; associating the set of grouped resources with the authentication parameter; and unlocking the least one of the computing device or the set of grouped resources.

Claims

1. A method for managing grouped resources on a computing device comprising:

receiving, at the computing device, a policy for a set of grouped resources;

applying the policy;

locking at least one of the computing device or the set or grouped resources associated with the policy;

waiting for receipt of an authentication parameter at the computing device;

verifying the authentication parameter;

associating the set of grouped resources with the authentication parameter; and

unlocking the least one of the computing device or the set of grouped resources.

2. The method of claim 1, wherein each set of grouped resources on the device has a policy associated therewith.

3. The method of claim 2, wherein a plurality of policies is managed at a manager on the computing device.

4. The method of claim 1, wherein the authentication parameter is a password.

5. The method of claim 1, wherein the locking prevents new applications from being launched on the computing device.

6. The method of claim 5, wherein the locking allows applications already running and having access privileges to access data on the device.

7. The method of claim 1, wherein the associating generates a key based on authentication parameter.

8. The method of claim 7, wherein the key is different for different sets of grouped resources.

9. The method of claim 1, wherein the associating further consolidates policies for a plurality of sets of grouped resources.

10. The method of claim 9, further comprising checking whether a current password on the computing device complies with the consolidated policies.

11. The method of claim 10, further comprising initiating a password change if the current password on the computing device does not comply with the consolidated policies.

12. The method of claim 9, further comprising checking whether an inactivity timer value on the computing device complies with the consolidated policies.

13. The method of claim 12, further comprising initiating an inactivity timer value change if the inactivity timer value on the computing device does not comply with the consolidated policies.

14. The method of claim 1, wherein the verifying is done on the computing device.

15. The method of claim 1, wherein the verifying is done on a remote device or server.

16. A computing device capable of managing grouped resources, the computing device comprising:

a processor; and

a communications subsystem,

wherein the computing device is capable of;

receiving, at the computing device, a policy for a set of grouped resources;

applying the policy;

locking at least one of the computing device or the set or grouped resources associated with the policy;

waiting for receipt of an authentication parameter at the computing device;

verifying the authentication parameter;

associating the set of grouped resources with the authentication parameter; and

unlocking the least one of the computing device or the set of grouped resources.

17. The computing device of claim 16, wherein each set of grouped resources on the device has a policy associated therewith.

18. The computing device of claim 17, wherein a plurality of policies is managed at a manager on the computing device.

19. The computing device of claim 16, wherein the authentication parameter is a password.

20. The computing device of claim 16, wherein the locking prevents new applications from being launched on the computing device.

21. The computing device of claim 20, wherein the locking allows applications already running and having access privileges to access data on the device.

22. The computing device of claim 16, wherein the associating generates a key based on authentication parameter.

23. The computing device of claim 22, wherein the key is different for different sets of grouped resources.

24. The computing device of claim 16, wherein the associating further consolidates policies for a plurality of sets of grouped resources.

25. The computing device of claim 24, further configured to check whether a current password on the computing device complies with the consolidated policies.

26. The computing device of claim 25, further configured to initiate a password change if the current password on the computing device does not comply with the consolidated policies.

27. The computing device of claim 24, further configured to check whether an inactivity timer value on the computing device complies with the consolidated policies.

28. The computing device of claim 27, further configured to initiate an inactivity timer value change if the inactivity timer value on the computing device does not comply with the consolidated policies.

29. The computing device of claim 16, wherein the computing device is one of a mobile device, a tablet computer, a laptop computer or a desktop computer.