Mobile device locking with context

• US 9,215,225 B2
• Filed: 05/03/2013
• Issued: 12/15/2015
• Est. Priority Date: 03/29/2013
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Desai, Nitin
• Primary Examiner(s): Le, David
• Application Number:
  US13/886,765
• Publication Number:
  US 20140331285A1
• Time in Patent Office: 956 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04M 1/72403 with means for local support of applications that increase the functionality
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/724631 by limiting the access to the user interface, e.g. locking a touch-screen or a keypad
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A method and system for locking a mobile device on an interface are described. A user logs on to a mobile device with a user name. The mobile device then determines a context for the mobile device based on one or more operational parameters and/or the user name. For example, a context for the mobile device may be a current location of the device. Based on the context and user name, the mobile device may run in locked mode. In locked mode, applications are selected to be presented on the mobile device based on the user name and context. The mobile device is locked on a springboard that presents only the selected applications to the user for launching. A user may switch between launched applications on the mobile device, but the user may only switch between launched applications that are presented on the springboard.

Claims

1. A method comprising:

receiving a user name to log onto a mobile device;

determining a context for the mobile device based on one or more operational parameters of the mobile device;

determining, based on the context and the user name, that the mobile device is to operate in a springboard lock mode;

selecting, based on the context and the user name, one or more applications to present to a user in the springboard lock mode, wherein in the springboard lock mode, the mobile device displays a springboard user interface that presents and enables the user to access only the selected one or more applications, and wherein the user name is associated with one of a plurality of roles such that a first group of applications is selected for presentation when the user name is associated with a first role and a second group of applications is selected for presentation when the user name is associated with a second role; and

running the mobile device in the springboard lock mode.

2. A method of claim 1, wherein determining a context comprises analyzing a location for the mobile device,

wherein when the location is on a company premises, the mobile device is determined to run in springboard lock mode.

3. A method of claim 1, wherein determining a context comprises analyzing one or more network connections for the mobile device,

wherein when the mobile device is connected to an internal network, the mobile device is determined to run in springboard lock mode.

4. A method of claim 1, wherein determining a context comprises analyzing a current time,

wherein when the current time is between 9:

00 am and 5;

00 pm on a weekday, the mobile device is determined to run in springboard lock mode.

5. A method according to claim 1, wherein the plurality of roles is organized in a hierarchy.

6. A method according to claim 1, wherein the selected one or more applications comprise a plurality of applications grouped by a category.

7. A method according to claim 6, wherein the category is based on a role for the user name.

8. A method according to claim 1, further comprising:

monitoring, while one or more applications of the selected one or more applications is running, for an updated context for the mobile device; and

switching an operating mode of the mobile device from the springboard locked mode to an unlocked mode based on the monitoring.

9. A method according to claim 1, wherein selecting one or more applications comprises selecting, based on the context and the user name, a plurality of applications to present to the user in the springboard lock mode, and

wherein the method further comprises:

receiving, from the user via the springboard, selections of at least two applications of the plurality of applications presented on the springboard;

in response to the selections, launching the at least two applications;

receiving a predetermined gesture to switch between launched applications, wherein the mobile device only allows switching between launched applications that are presented on the springboard user interface.

19. The method of claim 8, wherein the updated context for the mobile device comprises the mobile device leaving a company premises, and wherein the switching the operating mode of the mobile device comprises in response to the mobile device leaving the company premises, switching the operating mode of the mobile device from the springboard locked mode to the unlocked mode.

10. A mobile computing device comprising:

a processor, wherein the mobile computing device is further configured to at least;

receive a user name to log onto the mobile device;

determine a context for the mobile device based on one or more operational parameters of the mobile device;

determine, based on the context and the user name, that the mobile device is to operate in a springboard lock mode;

select, based on the context and the user name, one or more applications to present to a user in the springboard lock mode, wherein in the springboard lock mode, the mobile device displays a springboard user interface that presents and enables the user to access only the selected one or more applications, and wherein the user name is associated with one of a plurality of roles such that a first group of applications is selected for presentation when the user name is associated with a first role and a second group of applications is selected for presentation when the user name is associated with a second role; and

run the mobile device in the springboard lock mode.

11. A mobile computing device of claim 10, wherein determining a context comprises analyzing a location for the mobile device,

wherein when the location is on company premises, the mobile device is determined to run in springboard lock mode.

12. A mobile computing device of claim 10, wherein determining a context comprises analyzing one or more network connections for the mobile device,

wherein when the mobile device is connected to an internal network, the mobile device is determined to run in springboard lock mode.

13. A mobile computing device of claim 10, wherein determining a context comprises analyzing a current time,

wherein when the current time is between 9:

00 am and 5;

00 pm on a weekday, the mobile device is determined to run in springboard lock mode.

14. A mobile computing device according to claim 10, wherein the plurality of roles is organized in a hierarchy.

15. A mobile computing device according to claim 10, wherein the selected one or more applications comprise a plurality of applications grouped by a category.

16. A mobile computing device according to claim 15, wherein the category is based on a role for the user name.

17. A mobile computing device according to claim 10, wherein the mobile computing device is further configured to:

monitor, while one or more applications of the selected one or more applications is running, for an updated context for the mobile device; and

switch an operating mode of the mobile device from the springboard locked mode to an unlocked mode based on the monitoring.

20. The mobile computing device of claim 10, wherein selecting one or more applications comprises:

selecting, based on the context and the user name, a plurality of applications to present to the user in the springboard lock mode, and

wherein the mobile computing device is further configured to;

receive, from the user via the springboard user interface, selections of at least two applications of the plurality of applications presented on the springboard user interface;

in response to the selections, launch the at least two applications; and

receive a predetermined gesture to switch between launched applications, wherein the mobile device only allows switching between launched applications that are presented on the springboard user interface.

18. One or more non-transitory computer readable storage media storing instructions that, when executed, configure a device to provide a user interface comprising:

a springboard user interface,

wherein the springboard user interface presents a plurality of applications to a user and enables the user to access only the plurality of applications,

wherein the plurality of applications are selected based on a context for a mobile device and a user name, wherein the user name is associated with one of a plurality of roles such that a first group of applications is selected for presentation when the user name is associated with a first role and a second group of applications is selected for presentation when the user name is associated with a second role,

wherein the context for the mobile device is based on one or more operational parameters of the mobile device,

wherein the mobile device is run in a springboard lock mode such that the mobile device is locked on the springboard user interface and the user is unable to access one or more applications on the mobile device that are inaccessible through the springboard user interface.