Multiple time outs for applications in a mobile device

• US 8,584,200 B2
• Filed: 09/29/2005
• Issued: 11/12/2013
• Est. Priority Date: 10/22/2004
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Frank, Edward H.
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): PLECHA, THADDEUS J
• Application Number:
  US11/240,095
• Publication Number:
  US 20060089125A1
• Time in Patent Office: 2,966 Days
• Field of Search: 726 1- 30, 455/10, 455/411, 710 44- 47, 710/220
• US Class Current: 726/2
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A method for revoking access to a mobile device includes providing a plurality of authenticated applications accessible by the mobile device, and providing a plurality of revocation timeout intervals for revoking access by the mobile device to the plurality of authenticated applications. Access to a first authenticated application is revoked after a first timeout interval and access to a second authenticated application is revoked after a second timeout interval.

Claims

1. A method for selectively controlling access by a mobile device to a plurality of network-based services, wherein the plurality of network-based services includes an e-mail service, comprising:

associating the e-mail service with a plurality of user-enterable authentication parameters and an authentication timeout interval representing a period of time between authentications of the mobile device for the e-mail network-based service, including;

associating a first user-enterable authentication parameter in the plurality of user-enterable authentication parameters with a first e-mail source and a second user-enterable authentication parameter in the plurality of user-enterable authentication parameters with a second e-mail source;

requesting re-authentication of the mobile device by a network server of the mobile device for the e-mail service after the first authentication timeout interval has expired;

associating a second network-based service in the plurality of network-based services with a third user-enterable authentication parameter for the mobile device, and a second authentication timeout interval for the mobile device representing a period of time between authentications of the mobile device for the second network-based service; and

requesting re-authentication by the network server of the mobile device to the second network-based service after the second authentication timeout interval has expired;

wherein the first authentication interval is not equal to the second authentication timeout interval.

2. The method of claim 1, further comprising:

associating first authentication data with the e-mail service.

3. The method of claim 1, wherein the plurality of network-based services accessible by the mobile device are provided by one or more network servers.

4. The method of claim 3, further comprising sending data between the one or more network servers and the mobile device in response to access by the mobile device to a network-based service associated with the one or more network servers.

5. The method of claim 1, wherein the first user-enterable authentication parameter is a pass code.

6. The method of claim 2, wherein the first authentication data for the mobile device includes geographic location of the mobile device.

7. The method of claim 1, wherein the first user-enterable authentication parameter is biometric data of a user of the mobile device.

8. The method of claim 2, further comprising:

authenticating access to the e-mail service by the mobile device using the first authentication data for the mobile device and the first user-enterable authentication parameter.

9. The method of claim 2, wherein the first authentication data includes RFID tag data for the mobile device.

10. A system for selectively controlling access by a mobile device to a plurality of network-based services, wherein the plurality of network-based services includes an e-mail service, comprising:

a processor configured to;

associate a first authentication timeout interval with the e-mail service, a first user-enterable authentication parameter with a first e-mail source and a second user-enterable authentication parameter in the plurality of user-enterable authentication parameters with a second e-mail source,

request re-authentication of the mobile device after the first authentication timeout interval has expired,

associate a second network-based service in the plurality of network-based services with a third user-enterable authentication parameter for the mobile device and a second authentication timeout interval for the mobile device representing a period of time between authentications of the mobile device for the second network-based service,

request re-authentication of the mobile device to the second network-based service after the second authentication timeout interval has expired;

wherein the first authentication interval is not equal to the second authentication timeout interval; and

a secure memory configured to store the first user-enterable authentication parameter, the second user-enterable authentication parameter, and the third user-enterable parameter.

11. The system of claim 10, wherein the processor is further configured to associate first authentication data with the e-mail service.

12. The system of claim 10, wherein the processor is further configured to terminate access to one or more of the plurality of network-based services to prevent transmission of data associated with the one or more of the plurality of network-based services between the mobile device and the one or more of the plurality of network-based services.

13. The system of claim 10, wherein the processor is further configured to authenticate the mobile device to the e-mail service using one or more pass codes.

14. The system of claim 11, wherein the first authentication data for the mobile device includes a geographic location of the mobile device.

15. The system of claim 10, wherein the first user-enterable authentication parameter includes one or more biometric data of a user of the mobile device.

16. The system of claim 11, wherein the first authentication data includes RFID tag data for the mobile device.