Locking mobile devices in a personal area network (PAN)

• US 8,555,411 B2
• Filed: 12/23/2003
• Issued: 10/08/2013
• Est. Priority Date: 12/23/2003
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Hurwitz, Roger A.
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): SCHMIDT, KARI L
• Application Number:
  US10/743,046
• Publication Number:
  US 20050138356A1
• Time in Patent Office: 3,577 Days
• Field of Search: 726/34, 726/3, 726/20, 380/270, 380/52, 380/265, 709/228, 713/182, 713/150, 713/155, 455/456.1, 455/456.4, 455/557
• US Class Current: 726/34
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A mobile device out of range of other devices in a wireless network may be locked to provide security.

Claims

1. A method comprising:

manually defining a working set comprising a first mobile computing device and a second mobile computing device, the first and second mobile computing devices being configured to communicate via an ad-hoc wireless personal area network (PAN), wherein, in response to being prompted by said first mobile computing device, an infrared (IR) port of said first mobile computing device is configured to communicate a first signal over the PAN to an IR port of said second mobile computing device and the second mobile computing device is configured to communicate an acknowledgment signal over the PAN in response to the received first signal to associate said first mobile computing device and said second mobile computing device with said working set, wherein the first mobile computing device and the second mobile computing device, when associated with the defined working set, each operate in a convenience mode, wherein the convenience mode includes a first functionality level and a first security level for each of the first mobile computing device and the second mobile computing device, wherein the first security level includes one or more authentication operations to obtain access to operate a device;

attempting to communicate with said second mobile computing device of said working set by said first mobile computing device of said working set when said first mobile computing device is activated;

placing said first mobile computing device in a secure mode if said first mobile computing device is unable to communicate with said second mobile computing device of said working set; and

maintaining said first mobile computing device in the convenience mode if said first mobile computing device is able to communicate with said second mobile computing device of said working set.

2. The method according to claim 1, wherein operations in said secure mode are selected from the group consisting of:

locking said first device;

disabling said first device;

requiring a password authentication to use said first device;

requiring a biometric authentication to use said first device;

activating a beacon; and

notifying a designee of entry of said first device into said secure mode.

3. The method according to claim 1, wherein said secure mode comprises:

activating a locking scheme on said first device.

4. The method according to claim 1, wherein said convenience mode comprises:

operating said first device without a locking scheme.

5. The method according to claim 1, wherein said wireless PAN is selected from the group consisting of:

a non-directional short range radio frequency (RF) technology network;

a wireless communications technology;

an ultrawideband (UWB) network;

a shared wireless access protocol (SWAP) network;

a wireless fidelity (WI-FI) network; and

an IEEE 802.11a, b, d or g wireless local area network (WLAN) compliant network.

6. The method of claim 1, wherein maintaining said first device in a convenience mode further comprises:

maintaining said first device in a convenience mode based solely on the ability of said first device to communicate with said second device of said working set.

7. The method according to claim 1, wherein the secure mode includes a second functionality level and a second security level, such that the second functionality level is associated with lower device functionality than the first functionality level of the convenience mode, and the second security level is associated with stronger device security than the first security level of the convenience mode.

8. A system comprising:

a first mobile computing device adapted to communicate with a second mobile computing device via an ad-hoc wireless personal area network (PAN) when said first mobile computing device is activated, wherein said first mobile computing device is adapted to manually define a working set comprising said first mobile computing device and said second mobile computing device, in response to being prompted by said first mobile computing device, by communication of a first signal over the PAN between a first infrared (IR) port of said first mobile computing device adapted to communicate with a second IR port of said second mobile computing device, wherein the second mobile computing device is configured to communicate an acknowledgment signal over the PAN in response to the received first signal to associate said first mobile computing device and said second mobile computing device with said working set, wherein the first mobile computing device and the second mobile computing device, when associated with the defined working set, each operate in a convenience mode, wherein the convenience mode includes a first functionality level and a first security level for each of the first mobile computing device and the second mobile computing device, wherein the first security level includes one or more authentication operations to obtain access to operate a device;

wherein said first mobile computing device is adapted to place said first mobile computing device in a secure mode if said first mobile computing device is unable to communicate with said second mobile computing device; and

wherein said first mobile computing device is adapted to maintain said first mobile computing device in the convenience mode if said first mobile computing device is able to communicate with said second mobile computing device.

9. The system according to claim 8, wherein said first device when in said secure mode is adapted to perform operations selected from the group consisting of:

lock up said first device;

disable said first device;

require a password authentication to use said first device;

require a biometric authentication to use said first device;

activate a beacon; and

notify a designee of entry of said first device into said secure mode.

10. The system according to claim 8, wherein when in said secure mode, said first device is adapted to activate a locking scheme on said first device.

11. The system according to claim 8, wherein when in said convenience mode, said first device is adapted to operate without a locking scheme.

12. The system according to claim 8, wherein said wireless PAN is selected from the group consisting of:

a non-directional short range radio frequency (RF) technology network;

a wireless communications technology;

an ultrawideband (UWB) network;

a shared wireless access protocol (SWAP) network;

a wireless fidelity (WI-FI) network; and

an IEEE 802.11a, b, d or g wireless local area network (WLAN) compliant network.

13. The system according to claim 8, wherein at least one of said first device and said second device comprises a mobile device.

14. The method of claim 8, wherein said first device is adapted to maintain said first device in a convenience mode further comprises:

wherein said first device is adapted to maintain said first device in a convenience mode based solely on the ability of said first device to communicate with said second device.

15. The system according to claim 8, wherein the secure mode includes a second functionality level and a second security level, such that the second functionality level is associated with lower device functionality than the first functionality level of the convenience mode, and the second security level is associated with stronger device security than the first security level of the convenience mode.

16. A non-transitory machine readable storage medium that stores instructions, which when executed by a computer platform, cause the computing platform to perform operations comprising:

manually defining a working set comprising a first mobile computing device and a second mobile computing device, the first and second mobile computing devices being configured to communicate via an ad-hoc wireless personal area network (PAN), wherein, in response to being prompted by said first mobile computing device, an infrared (IR) port of said first mobile computing device is configured to communicate a first signal over the PAN to an IR port of said second mobile computing device and the second mobile computing device is configured to communicate an acknowledgment signal over the PAN in response to the received first signal to associate said first mobile computing device and said second mobile computing device with said working set, wherein the first mobile computing device and the second mobile computing device, when associated with the defined working set, each operate in a convenience mode, wherein the convenience mode includes a first functionality level and a first security level for each of the first mobile computing device and the second mobile computing device, wherein the first security level includes one or more authentication operations to obtain access to operate a device;

attempting to communicate with said second mobile computing device of said working set by said first mobile computing device of said working set when said first mobile computing device is activated;

placing said first mobile computing device in a secure mode if said first mobile computing device is unable to communicate with said second mobile computing device of said working set; and

maintaining said first mobile computing device in the convenience mode if said first mobile computing device is able to communicate with said second mobile computing device of said working set.

17. The machine readable storage medium according to claim 16, wherein operations in said secure mode are selected from the group consisting of:

locking up said first device;

disabling said first device;

requiring password authentication to use said first device;

requiring biometric authentication to use said first device;

activating a beacon; and

notifying a designee of entry into secure mode of said first device.

18. The machine readable storage medium according to claim 16, wherein said secure mode comprises:

activating a locking scheme on said first device.

19. The machine readable storage medium according to claim 16, wherein said convenience mode comprises:

operating said first device without a locking scheme.

20. The machine readable storage medium according to claim 16, wherein said wireless PAN is selected from the group consisting of:

a non-directional short range radio frequency (RF) technology network;

a wireless communications technology;

an ultrawideband (UWB) network;

a shared wireless access protocol (SWAP) network;

a wireless fidelity (WI-FI) network; and

an IEEE 802.11a, b, d or g wireless local area network compliant network.

21. The machine readable storage medium of claim 16, wherein maintaining said first device in a convenience mode further comprises:

maintaining said first device in a convenience mode based solely on the ability of said first device to communicate with said second device of said working set.

22. The machine readable storage medium of claim 16, wherein the secure mode includes a second functionality level and a second security level, such that the second functionality level is associated with lower device functionality than the first functionality level of the convenience mode, and the second security level is associated with stronger device security than the first security level of the convenience mode.