RESTRICTED EXECUTION MODES

• US 20150220712A1
• Filed: 04/14/2015
• Published: 08/06/2015
• Est. Priority Date: 12/23/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: King, Joseph Spencer, Goulding, Michael Burt, Derksen, Todd Myles, Auerbach, Alan Bennett, Braun, David A., Begun, Andrew P., Haon, Andrew Craig, Matthews, Joseph H. III, Karr, Jennifer Anne, Schrader, Joseph A., Chen, Ted Tai-Yu, Sarin, Raman K., Agarwal, Sharad, Guday, Shai, Thomas, Shawn M., Skovron, John D., Yovin, John A., Woo, Aaron Naoyoshi Sheung Yan, Dubost, Bernardo Iturriaga
• Granted Patent: US 9,665,702 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

In embodiments of restricted execution modes, a mobile device can display a device lock screen on an integrated display device, and transition from the device lock screen to display a shared space user interface of a shared space. The transition to display the shared space user interface is without receiving a PIN code entered on the device lock screen. The mobile device implements a restricted execution service that is implemented to activate a restricted execution mode of the mobile device, and restrict access of a device application to device content while the restricted execution mode is activated. The restricted execution service can also allow a shared device application that is included in the shared space access to the device content while the restricted execution mode is activated.

Claims

1. A method comprising:

causing display of a device lock screen on an display of a mobile device;

transitioning from displaying the device lock screen to displaying an interface of a restricted execution mode without an authentication credential entered on the device lock screen; and

activating the restricted execution mode of the mobile device, the restricted execution mode of the mobile device restricting access to one or more applications on the mobile device.

2. The method of claim 1, wherein the transitioning comprises transitioning from displaying the device lock screen to displaying the interface of the restricted execution mode responsive to receiving an input to the device lock screen.

3. The method of claim 2, wherein the input comprises selection of a button displayed on the device lock screen.

4. The method of claim 3, wherein the device lock screen includes an additional button, and wherein the method further comprises transitioning to an additional restricted execution mode responsive to receiving selection of the additional button.

5. The method of claim 2, wherein the input comprises gesture input to the device lock screen.

6. The method of claim 1, wherein the restricted execution mode restricts access to device content on the mobile device.

7. The method of claim 1, wherein the device lock screen is configured to transition to a normal user mode responsive to receiving the authentication credential.

8. The method of claim 1, wherein the device lock screen includes an indicator that the mobile device is locked.

9. A mobile device, comprising:

a display device configured to display a device lock screen and transition to a restricted execution mode without an authentication credential entered on the device lock screen; and

a processing system configured to activate the restricted execution mode of the mobile device, the restricted execution mode of the mobile device restricting access to one or more functionalities of the mobile device.

10. The mobile device of claim 9, wherein the display device is configured to transition to the restricted execution mode responsive to receiving an input to the device lock screen.

11. The mobile device of claim 10, wherein the input comprises selection of a button displayed on the device lock screen.

12. The mobile device of claim 11, wherein the device lock screen includes an additional button, and wherein the display device is further configured to transition to an additional restricted execution mode responsive to receiving selection of the additional button.

13. The mobile device of claim 10, wherein the input comprises gesture input on the device lock screen.

14. The mobile device of claim 10, wherein the restricted execution mode restricts access to device content on the mobile device.

15. The mobile device of claim 9, wherein the display device is further configured to transition to a normal user mode responsive to receiving the authentication credential.

16. The mobile device of claim 9, wherein the device lock screen includes an indicator that the mobile device is locked.

17. A method comprising:

causing display of a device lock screen on a display of a mobile device, the device lock screen preventing access to full functionality of the mobile device; and

activating a restricted execution mode of the mobile device responsive to receiving input to the device lock screen, the restricted execution mode restricting access to one or more applications installed on the mobile device, the input comprising input other than an authentication credential usable to unlock the mobile device to access the full functionality of the mobile device.

18. The method of claim 17, wherein the input comprises selection of a button displayed on the device lock screen.

19. The method of claim 17, wherein the input comprises gesture input on the device lock screen.

20. The method of claim 17, wherein the authentication credential comprises a password or a pin.