Secure desktop interface

• US 9,432,347 B2
• Filed: 09/20/2010
• Issued: 08/30/2016
• Est. Priority Date: 09/20/2010
• Status: Active Grant

• Current Assignee: Bosch Automotive Service Solutions LLC (SPX Corporation)
• Original Assignee: Bosch Automotive Service Solutions LLC (SPX Corporation)
• Inventors: Thoppae, Vijai M., Toburen, Matt, Sanders, Gordon
• Primary Examiner(s): Belousov, Andrey
• Application Number:
  US12/886,057
• Publication Number:
  US 20120072858A1
• Time in Patent Office: 2,171 Days
• Field of Search: 715/763, 715/741, 715/742, 715/743
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

An apparatus and system for providing a secure user interface restricting the access of users to selected functions, files, and communications by implementing a customizable secure graphical user interface. The degree to which the user'"'"'s access is restricted may depended on levels of authorization granted to the user. The secure user interface may be implemented on a device and employed to aid a user in executing diagnostic, service, maintenance, and data gathering tasks. The secure computing device may be connectable to other computing devices of like of different kind. The secure computing device may provide security against non-authorized users by requiring user identification and disabling the device when proper identification is not given or the device is deemed missing.

Claims

1. A diagnostic computing device, the diagnostic computing device comprising:

a memory configured to store instructions that provides a customizable graphical user interface capable of granting and restricting access to stored information on the memory and capable of executable functions based on a user identification based on a biometric of a user, the customizable graphical user interface sits on top of an operating system of the diagnostic computing device;

the memory further configured to store instructions for executing at least one of diagnostic tasks, service tasks, maintenance tasks, or data gathering tasks and for executing a plurality of security features;

a processor communicatively connected to the memory and configured to receive and execute the instructions;

an assignable input communicatively connected to the processor and configured to provide signals to the processor, wherein the signals include the user identification; and

a display communicatively connected to the processor and configured to display the customizable graphical user interface, wherein the customizable graphical user interface is configured to show icons that are available based on the user identification and a level of access assigned to the user identification and hide icons of programs associated with icons that are unavailable based on the user identification and the level of access assigned to the user identification,

wherein the diagnostic computing device is configured to diagnose a vehicle related issue,

wherein the diagnostic computing device is configured to limit external communication to receiving unidirectional communication including a signal from a remote device to lock out the user if verifying the user identification fails, and

wherein the diagnostic computing device alerts the user of the diagnostic computing device if one of the plurality of security features of the diagnostic computing device has been disabled.

2. The system of claim 1, further comprising a communication device configured to connect the diagnostic computing device to the remote device via a network.

3. The system of claim 2, wherein the remote device further comprises a second memory, and the remote device is configured to provide the diagnostic computing device with the instructions from the second memory via the network.

4. The system of claim 2, wherein the remote device is a vehicle connected to the network via an OBD II connector.

5. The system of claim 1, wherein the display is configured to display a prompt to the user for the user identification.

6. The system of claim 1, wherein the user identification comprises a username and password.

7. The system of claim 1, wherein the instructions are configured to limit user access based on the access level assigned to individual users.

8. The system of claim 1, wherein the processor locks out the diagnostic computing device if the computing device is removed a predetermined distance from a network.

9. A method for securing information on a diagnostic computing device, the method comprising:

displaying a customizable graphical user interface on a display, the customizable graphical user interface sits on top of an operating system of the diagnostic computing device;

receiving an instruction from a memory to prompt for a user identification;

receiving the user identification based on a biometric of the user via an assignable input;

verifying the user identification via a processor;

determining a level of access associated with the user identification via the processor;

granting access according to the determined level of access associated with the user identification via the processor including showing icons that are available based on the user identification and the determined level of access assigned to the user identification;

configuring the display to hide icons of programs associated with icons that are unavailable based on the user identification and the determined level of access assigned to the user identification;

wherein a function of the assignable input relies on the level of access granted to a user,

wherein the diagnostic computing device is configured to diagnose at least one of a medically related issue or a vehicle related issue including executing at least one of diagnostic tasks, service tasks, maintenance tasks, or data gathering tasks; and

limiting the diagnostic computing device to receiving unidirectional communication that includes a signal from a remote device to lock out a user if verifying the user identification fails, and

wherein the diagnostic computing device alerts the user of the diagnostic computing device if one of a plurality of security features of the diagnostic computing device has been disabled.

10. The method of claim 9, wherein receiving the instruction to prompt for the user identification occurs at a login screen.

11. The method of claim 9, wherein receiving the instruction to prompt for the user identification occurs in response to receiving a signal from the input.

12. The method of claim 9, further comprising:

receiving instructions via a network from the remote device.

13. The method of claim 9, further comprising:

shutting down the diagnostic computing device when verification fails.

14. The method of claim 9, further comprising restricting the diagnostic computing device to receiving communications via a network from the remote device.

15. The method of claim 9, further comprising:

locking the diagnostic computing device when the diagnostic computing device is a predetermined distance from the remote device.

16. The method of claim 9, further comprising:

displaying items according to the determined level of access associated with the user identification.

17. The method of claim 9, wherein verifying the user identification further comprises verifying the biometric information.

18. The method of claim 9, further comprising:

detecting a connection to a given network; and

shutting down the diagnostic computing device if the given network is not detected.

19. A diagnostic computing device, the system comprising:

means for storing configured to store instructions for providing a customizable graphical user interface capable of granting and restricting access to stored information on the means for storing and executable functions based on a user identification based on a biometric of a user, the customizable graphical user interface sits on top of an operating system of the diagnostic computing device;

the means for storing further configured to store instructions for executing at least one of diagnostic tasks, service tasks, maintenance tasks, or data gathering tasks and instructions for executing a plurality of security features;

means for processing communicatively connected to the means for storing and configured to receive and execute the instructions;

means for inputting communicatively connected to the means for processing and configured to provide signals to the means for processing, wherein the signals include the user identification; and

means for displaying communicatively connected to the means for processing and configured to display the customizable graphical user interface, wherein the customizable graphical user interface is configured to show icons that are available based on the user identification and a level of access assigned to the user identification and hide icons associated with icons that are unavailable based on the user identification and the level of access assigned to the user identification,

wherein a function of the means for inputting relies on the level of access granted to a user,

wherein the diagnostic computing device is configured to diagnose a vehicle related issue,

wherein the diagnostic computing device is configured to limit external communication to receiving unidirectional communication including a signal from a remote device to lock out a user if verifying the user identification fails, and

wherein the diagnostic computing device alerts the user of the diagnostic computing device if one of the plurality of security features of the diagnostic computing device has been disabled.

20. The system of claim 19, further comprising:

means for connecting configured to connect the diagnostic computing device to a network; and

means for receiving configured to receive the instructions via the network from the remote device.