Application and permission integration

• US 9,197,643 B2
• Filed: 07/22/2013
• Issued: 11/24/2015
• Est. Priority Date: 07/22/2013
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Dunphey, Jennifer Hardison, Manjally, Thomas J.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US13/947,380
• Publication Number:
  US 20150026773A1
• Time in Patent Office: 855 Days
• Field of Search: 726/4
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Systems, methods and apparatuses of integrating applications in an application integration system are provided. In some examples, work-based applications may be integrated with personal applications, such as in an application region. One or more rules for accessing the applications within the application region may be determined or defined. In some examples, accessing the application region (e.g., via login or other authentication process) may provide access to all applications within the application region, without requiring additional login or authentication for each particular application being accessed. Further, the system may determine one or more rules for providing communication and/or data sharing between the one or more applications within the application region, between applications within the application region and outside the application region, between two or more applications regions, and the like.

Claims

1. An apparatus, comprising:

at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to;

identify a first set of applications having a first set of permissions, the first set of permissions being based on a type of application of applications in the first set of applications;

identify a second set of applications having a second set of permissions, the second set of permissions being different from the first set of permissions and being based on a type of application of applications in the second set of applications, the applications in the second set of applications being different from the applications in the first set of applications;

integrate the first set of applications with the second set of applications in an application region, wherein the first set of applications and the second set of applications are configured to be in communication with each other and share data with each other within the application region; and

define a third set of permissions for the application region and the integrated applications within the application region, the third set of permissions identifying rules for communication and data sharing between at least one application of the first set of applications and at least one application of the second set of applications.

2. The apparatus of claim 1, further including instructions that, when executed, cause the apparatus to:

provide access to the application region via an authentication process and access to the application region via the authentication process provides access to the at least one application of the first set of applications and the at least one application of the second set of applications.

3. The apparatus of claim 2, wherein providing access to the application region via the authentication process provides access to the at least one application of the first set of applications and the at least one application of the second set of applications within the application region without requiring an additional authentication process associated with the at least one application of the first set of applications or the at least one application of the second set of applications.

4. The apparatus of claim 1, wherein the rules for communication between the at least one application of the first set of applications and the at least one application of the second set of applications are based, at least in part, on the first set of permissions and the second set of permissions.

5. The apparatus of claim 1, wherein the first set of applications are work-based applications provided by a first entity and the second set of applications are personal applications.

6. The apparatus of claim 5, wherein the first set of permissions is controlled by the first entity and the second set of permissions is controlled by a second entity different from first entity.

7. The apparatus of claim 6, wherein the first set of permissions include a higher level of security than the second set of permissions.

8. The apparatus of claim 1, further including instructions that, when executed, cause the apparatus to:

display a first portion of the integrated applications responsive to receiving authentication credentials associated with a first user; and

display a second portion of the integrated applications responsive to receiving authentication credentials associated with a second user, the second portion including at least one application different from the first portion and the second user being different from the first user.

9. The apparatus of claim 8, wherein the first portion of the integrated applications and the second portion of the integrated applications are displayed on a same device.

10. One or more non-transitory computer-readable media having computer-executable instructions stored thereon that, when executed, cause at least one computing device to:

identify a first set of applications having a first set of permissions, the first set of permissions being based on a type of application of applications in the first set of applications;

identify a second set of applications having a second set of permissions, the second set of permissions being different from the first set of permissions and being based on a type of application of applications in the second set of applications, the applications in the second set of applications being different from the applications in the first set of applications;

integrate the first set of applications with the second set of applications in an application region, wherein the first set of applications and the second set of applications are configured to be in communication with each other and share data with each other within the application region; and

define a third set of permissions for the application region and the integrated applications within the application region, the third set of permissions identifying rules for communication and data sharing between at least one application of the first set of applications and at least one application of the second set of applications.

11. The one or more non-transitory computer-readable media of claim 10, further including instructions that, when executed, cause the computing device to:

provide access to the application region via an authentication process and access to the application region via the authentication process provides access to the at least one application of the first set of applications and the at least one application of the second set of applications.

12. The one or more non-transitory computer-readable media of claim 11, wherein providing access to the application region via the authentication process provides access to the at least one application of the first set of applications and the at least one application of the second set of applications within the application region without requiring an additional authentication process associated with the at least one application of the first set of applications or the at least one application of the second set of applications.

13. The one or more non-transitory computer-readable media of claim 10, wherein the rules for communication between the at least one application of the first set of applications and the at least one application of the second set of applications are based, at least in part, on the first set of permissions and the second set of permissions.

14. The one or more non-transitory computer-readable media of claim 10, wherein the first set of applications are work-based applications provided by a first entity and the second set of applications are personal applications.

15. The one or more non-transitory computer-readable media of claim 14, wherein the first set of permissions is controlled by the first entity and the second set of permissions is controlled by a second entity different from first entity.

16. The one or more non-transitory computer-readable media of claim 15, wherein the first set of permissions include a higher level of security than the second set of permissions.

17. The one or more non-transitory computer-readable media of claim 10, further including instructions that, when executed, cause the apparatus to:

display a first portion of the integrated applications responsive to receiving authentication credentials associated with a first user; and

display a second portion of the integrated applications responsive to receiving authentication credentials associated with a second user, the second portion including at least one application different from the first portion and the second user being different from the first user.

18. The one or more non-transitory computer-readable media of claim 17, wherein the first portion of the integrated applications and the second portion of the integrated applications are displayed on a same device.

19. An apparatus, comprising:

at least one processor; and

memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to;

identify a first set of applications having a first set of permissions;

identify a second set of applications having a second set of permissions, the second set of permissions being different from the first set of permissions, applications in the second set of applications being different from applications in the first set of applications;

integrate the first set of applications with the second set of applications in an application region, wherein the first set of applications and the second set of applications are configured to be in communication with each other and share data with each other within the application region; and

define a third set of permissions for the application region and the integrated applications within the application region, the third set of permissions identifying rules for communication and data sharing between at least one application of the first set of applications and at least one application of the second set of applications;

provide, on a mobile device, a plurality of user profiles, each user profile including access to one or more applications;

receive, by the mobile device, user input selecting a first user profile of the plurality of user profiles,

authenticate a first user associated with the selected first user profile on the mobile device;

upon authenticating the user, provide access to a first subset of the integrated first set of applications and second set of applications, the first subset being associated with the first user profile, wherein the first subset of applications include at least one of;

a work application and a personal application associated with the first user;

receive user input selecting a second user profile of the plurality of user profiles;

authenticate a second user associated with the second user profile on the mobile device; and

upon authenticating the second user, provide access to a second subset of the integrated first set of applications and second set of applications, the second subset being associated with the second user profile, wherein the second applications include at least one of a work application and a personal application associated with the second user and at least one application provided to the second user in the second subset is different from at least one application provided to the first user in the first subset.

20. The apparatus of claim 19, wherein the first user is different form the second user.

21. The apparatus of claim 19, wherein authenticating the second user includes preventing access to the first applications associated with the first user.