Method and apparatus for management of multiple grouped resources on device

• US 8,931,045 B2
• Filed: 02/15/2013
• Issued: 01/06/2015
• Est. Priority Date: 02/16/2012
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Nagarajan, Sivakumar, Bender, Christopher Lyle, McConnaughay, Mark
• Primary Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US13/768,353
• Publication Number:
  US 20130227637A1
• Time in Patent Office: 690 Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode

Abstract

A method and computing device for managing grouped resources comprising receiving, at the computing device, a policy for a set of grouped resources; applying the policy; locking at least one of the computing device or the set of grouped resources associated with the policy; waiting for receipt of an authentication parameter at the computing device; verifying the authentication parameter; associating the set of grouped resources with the authentication parameter; and unlocking the least one of the computing device or the set of grouped resources.

Claims

1. A method for managing grouped resources on a computing device comprising:

receiving, at the computing device, a new policy for a set of grouped resources;

applying the policy at the computing device;

on receipt of the received policy, locking, at the computing device, at least one of the computing device or the set of grouped resources associated with the received policy;

waiting for receipt of an authentication parameter at the computing device;

verifying, at the computing device, the authentication parameter;

associating, at the computing device, the set of grouped resources with the authentication parameter; and

unlocking the at least one of the computing device or the set of grouped resources at the computing device.

2. The method of claim 1, wherein each set of grouped resources on the device has a policy associated therewith.

3. The method of claim 2, wherein a plurality of policies is managed at a manager on the computing device.

4. The method of claim 1, wherein the authentication parameter is a password.

5. The method of claim 1, wherein the locking prevents new applications from being launched on the computing device.

6. The method of claim 5, wherein the locking allows applications already running and having access privileges to access data on the device.

7. The method of claim 1, wherein the associating generates a key based on the authentication parameter.

8. The method of claim 7, wherein the key is different for different sets of grouped resources.

9. The method of claim 1, wherein the associating further consolidates policies for a plurality of sets of grouped resources.

10. The method of claim 9, further comprising checking whether a current password on the computing device complies with the consolidated policies.

11. The method of claim 10, further comprising initiating a password change if the current password on the computing device does not comply with the consolidated policies.

12. The method of claim 9, further comprising checking whether an inactivity timer value on the computing device complies with the consolidated policies.

13. The method of claim 12, further comprising initiating an inactivity timer value change if the inactivity timer value on the computing device does not comply with the consolidated policies.

14. The method of claim 1, wherein the verifying is done on the computing device.

15. The method of claim 1, wherein the verifying is done on a remote device or server.

16. A computing device capable of managing grouped resources, the computing device comprising:

a processor;

memory; and

a communications subsystem,

wherein the computing device is configured to;

receive, at the computing device, a new policy for a set of grouped resources;

apply the policy at the computing device;

receipt the new policy, lock at least one of the computing device or the set of grouped resources associated with the new policy;

wait for receipt of an authentication parameter at the computing device;

verify the authentication parameter at the computing device;

associate the set of grouped resources with the authentication parameter at the computing device; and

unlock the at least one of the computing device or the set of grouped resources at the computing device.

17. The computing device of claim 16, wherein each set of grouped resources on the device has a policy associated therewith.

18. The computing device of claim 17, wherein a plurality of policies is managed at a manager on the computing device.

19. The computing device of claim 16, wherein the authentication parameter is a password.

20. The computing device of claim 16, wherein the locking prevents new applications from being launched on the computing device.

21. The computing device of claim 20, wherein the locking allows applications already running and having access privileges to access data on the device.

22. The computing device of claim 16, wherein the associating generates a key based on the authentication parameter.

23. The computing device of claim 22, wherein the key is different for different sets of grouped resources.

24. The computing device of claim 16, wherein the associating further consolidates policies for a plurality of sets of grouped resources.

25. The computing device of claim 24, further configured to check whether a current password on the computing device complies with the consolidated policies.

26. The computing device of claim 25, further configured to initiate a password change if the current password on the computing device does not comply with the consolidated policies.

27. The computing device of claim 24, further configured to check whether an inactivity timer value on the computing device complies with the consolidated policies.

28. The computing device of claim 27, further configured to initiate an inactivity timer value change if the inactivity timer value on the computing device does not comply with the consolidated policies.

29. The computing device of claim 16, wherein the computing device is one of a mobile device, a tablet computer, a laptop computer or a desktop computer.