Integration of different mobile device types with a business infrastructure

• US 8,554,872 B2
• Filed: 05/16/2011
• Issued: 10/08/2013
• Est. Priority Date: 03/31/2010
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Buchhop, Peter K., Fyk, Anne Bradford, Sitar, Krsto, Gill, Davindar Singh, Riley, William J.
• Primary Examiner(s): Ly, Anh-Vu
• Assistant Examiner(s): LOPEZ-VARGAS, GUSTAVO E
• Application Number:
  US13/108,545
• Publication Number:
  US 20110247082A1
• Time in Patent Office: 876 Days
• Field of Search: 455/410, 455/411, 455/456.1, 709/228, 709/225, 709/223, 709/227, 709/206, 709/217, 709/218.219, 713/100, 713/183, 713/200
• US Class Current: 709/217
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

A mobile implementation channel enables secure mobile customer alerts, content delivery, event and location awareness and context integration that can be leveraged across multiple lines of business using basic interfaces. Pushed documents may be processed by an application executing at a mobile device in a secure manner. An alert indication may be sent to the mobile device when the documents are available. The documents may then be downloaded over a secure channel if the user affirmatively responds to the alert indication and may be further encrypted and stored in an application file store. The user may subsequently select one of the documents from a document list so that the selected document may be decrypted and displayed. The stored documents in the application file store may be deleted if the operating system has been compromised, the user is not associated with a business, or the user device is lost or stolen.

Claims

1. A first apparatus comprising:

at least one memory; and

at least one processor coupled to the at least one memory and configured to perform, based on instructions stored in the at least one memory;

initiating execution of a data application for a user through an operating system in response to entering a correct password;

after the correct password has been entered, detecting whether the user is allowed privileged control within the operating system;

when the allowed privileged control is detected, deleting all stored documents from an allocated storage of the data application;

when the allowed privileged control is not detected, sending a registration request to a second apparatus;

when a received registration response indicates that of the user is not associated with a specified business, deleting all stored documents from the allocated storage of the data application;

when the correct password is entered, the allowed privilege control is not detected, and the received registration response indicates that the user is associated with the specific business, receiving an alert notification when at least one document is available;

when the alert notification is selected, sending a document request for the least one document;

receiving the at least one document when the alert notification is selected;

generating a list of documents, wherein the list includes at least one entry for the at least one documents; and

when one of the documents is selected from the list, displaying said one document.

2. A computer-assisted method comprising:

for performing operations for a data application that processes at least one pushed document to a device, the method comprising;

Initiating execution of the data application for a user in response to entering a correct password;

after the correct password has been entered, determining whether the device on which an operating system is executing has been rooted, wherein the user has attained unauthorized privileged control within the operating system; and

when rooting of the device has been detected, preventing access, to all stored documents from an allocated storage of the data application when rooting of the device has not been detected, sending device registration to a computer system of a specified business;

receiving a registration response; and

when the registration response is indicative that the user is not associated with the specified business, deleting all stored documents from the allocated storage of the data application.

3. The method of claim 2, wherein the preventing comprises:

deleting, by the first computer system, all said stored documents from the allocated storage of the data application.

4. The method of claim 2, wherein the initiating comprises:

when the user of the first computer system fails to enter the correct password within a predetermined number of times, locking the data application for a predetermined time duration.

5. The method of claim 2, further comprising:

when the operating system is not detected as being compromised, sending the device registration to a second computer system of the specified business.

6. The method of claim 5, further comprising:

when the registration response is indicative of at least one condition from a set of conditions that are indicative of the user of the first computer system not being associated with the specified business, the first computer system being lost, and the first computer system being stolen, deleting, by the first computer system, all stored documents from the allocated storage of the data application.

7. The method of claim 2, further comprising:

when the correct password is entered and the operating system is not detected as being compromised, receiving an alert notification when content is available.

8. The method of claim 7, wherein the content comprises at one least document.

9. The method of claim 7, wherein the content comprises customer information.

10. The method of claim 8, further comprising:

when the alert notification is selected, sending a document request for the least one document; and

receiving the at least one document.

11. The method of claim 10, further comprising:

storing the at least one document in the allocated storage of the data application.

12. The method of claim 11, further comprising:

encrypting the at least one document.

13. The method of claim 10, further comprising:

generating a list of documents, wherein the list includes at least one entry for the at least one documents; and

when one of the documents is selected from the list, displaying said one document.

14. The method of claim 8, further comprising:

receiving, by the second computer system, a push content request to the user generated by a workflow that is performed through a business infrastructure, wherein the push content request includes a user identification;

mapping, by the second computer system, the user identification to a device type from a plurality of device types; and

in response to the received push content request, directing the alert notification through a mobile communication channel type to the first computer system based on the device type.

15. The method of claim 14, further comprising:

receiving the document request from the first computer system; and

in response to the received document request, downloading the at least one document to the first computer system through the communication channel type.

16. A first apparatus for supporting operations for a data application that processes at least one pushed document to the first apparatus, the first apparatus comprising:

at least one memory; and

at least one processor coupled to the at least one memory and configured to perform, based on instructions stored in the at least one memory;

Initiating execution of the data application for a user in response to entering a correct password;

after the correct password has been entered, determining whether the first apparatus on which an operating system is executing has been rooted, wherein the user has attained unauthorized privileged control within the operating system;

when rooting of the device has been detected, deleting all stored documents from an allocated storage of the data application;

when rooting of the first apparatus has not been detected, sending device registration to a computer system of a specified business;

receiving a registration response; and

when the registration response is indicative that the user is now associated with the specified business, deleting all stored documents from the allocated storage of the data application.

17. The first apparatus of claim 16, wherein the at least one processor is further configured to perform:

when the operating system is not detected as being compromised, sending device registration to a second apparatus of a specified business; and

when the registration response is indicative of at least one condition from a set of conditions that are indicative of the user of the first apparatus not being associated with the specified business, the first apparatus being lost, and the first apparatus being stolen, deleting all stored documents from the allocated storage of the data application.

18. The first apparatus of claim 16, wherein the at least one processor is further configured to perform:

when the correct password is entered and the operating system is not detected as being compromised, receiving an alert notification when at least one document is available;

when the alert notification is selected, sending a document request for the least one document;

receiving the at least one document;

generating a list of documents, wherein the list includes entries for the at least one documents; and

when one of the documents is selected from the list, displaying said one document.

19. A non-transitory computer-readable storage medium storing computer-executable instructions that, when executed, cause at least one processor to perform operations for a data application that processes at least one pushed document to a device, the operations comprising:

Initiating execution of the data application for a user in response to entering a correct password;

after the correct password has been entered, determining whether the device on which an operating system is executing has been rooted, wherein the user has attained unauthorized privileged control within the operating system;

when rooting of the device has been detected, deleting all stored documents from an allocated storage of the data application;

when rooting of the device has not been detected, sending device registration to a computer system of a specified business;

receiving a registration response; and

when the registration response is indicative that the user is not associated with the specified business, deleting all store documents from the allocated storage of the data application.

20. The computer-readable medium of claim 19, wherein the computer-executable instructions, when executed, cause the at least one processor to perform:

when the correct password is entered, the operating system is not detected as being compromised, and the registration response indicates that the user is associated with the specific business, receiving an alert notification when at least one document is available;

when the alert notification is selected, sending a document request for the least one document;

receiving the at least one document, generating a list of documents, wherein the list includes at least one entry for the at least one documents; and

when one of the documents is selected from the list, displaying said one document.