Providing a security mechanism on a mobile device

• US 9,544,307 B2
• Filed: 10/29/2014
• Issued: 01/10/2017
• Est. Priority Date: 10/29/2014
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Engelking, Eric William
• Primary Examiner(s): CERVETTI, DAVID GARCIA
• Application Number:
  US14/527,465
• Publication Number:
  US 20160127358A1
• Time in Patent Office: 804 Days
• Field of Search: 713/156, 726/1, 726/4, 726/17, 726/25, 726/28
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0631 Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Disclosed are methods, apparatus, systems, and computer program products for providing a security mechanism on a mobile device before performing an action on a database record in an on-demand database service. The action to be performed can be identified for requesting third-party information. When the third-party information is provided by a user who does not have authorization to access data locally or remotely from the mobile device, the action is performed on the database record but the security mechanism can be activated for display on the mobile device. When the security mechanism is traversed, the mobile device can be unlocked and a user can access the database record in the on-demand database service.

Claims

1. A mobile device comprising:

a display;

one or more storage media; and

one or more processors capable of executing one or more instructions stored on the one or more storage media, the instructions configured to cause;

providing, on the display, a user interface presenting a plurality of selectable links associated with a plurality of actions capable of being performed on one or more database records stored in a database system,

processing a first user input received at the device from a first user identifiable as an authorized user of the device, the first user input selecting one of the selectable links,

identifying the selected link as being associated with a first action requesting information from a second user not identifiable as an authorized user of the device,

processing a second user input received at the device, the second user input providing the requested information,

causing the first action to be performed on a database record using the requested information,

identifying an occurrence of a security event associated with the second user, and

causing, responsive to identifying the occurrence of the security event associated with the second user, a security mechanism to be activated, the security mechanism disabling access via the device to at least the database system.

2. The mobile device of claim 1, the one or more instructions configured to further cause:

identifying a third user input, wherein the third user input provides one of an alpha-numeric password, a graphical password, a motion-based password, and a biometric input.

3. The mobile device of claim 1, wherein the security mechanism further disables access to the user interface and to data stored on the mobile device.

4. The mobile device of claim 1, the one or more instructions configured to further cause:

identifying a triggering input to cause the security mechanism to be activated, the triggering input including a selection indicating one of;

canceling the requested information, posting the requested information, and exiting from an application associated with the database system.

5. The mobile device of claim 1, the one or more instructions configured to further cause:

causing the database record to be updated based on the performance using the requested information, wherein the update advances a workflow in the database system.

6. The mobile device of claim 1, wherein the requested information is a signature.

7. The mobile device of claim 1, the one or more instructions configured to further cause:

storing one or more of a geolocation, a timestamp, and a photograph with the requested information in a database system of the on-demand database service.

8. Apparatus for providing a security mechanism on a mobile device, the apparatus comprising:

one or more processors capable of executing one or more instructions configured to cause;

identifying a plurality of selectable actions capable of being performed on one or more database records stored in a database system, one or more of the plurality of selectable actions being provided to a user interface of a mobile device,

receiving, based on a first user input from a first user selecting one of the selectable actions from the mobile device, a request to receive information from a second user not identifiable as an authorized user of the mobile device,

receiving, based on a second user input received at the mobile device, the requested information,

causing the first action to be performed on a database record using the requested information,

identifying an occurrence of a security event associated with the second user, and

activating, responsive to identifying the occurrence of the security event associated with the second user, a security mechanism on the mobile device, the security mechanism disabling access via the device to at least the database system.

9. The apparatus of claim 8, wherein the requested input provides one of an alpha-numeric password, a graphical password, a motion-based password, and a biometric input.

10. The apparatus of claim 8, updating the database record based on the performance using the requested information, wherein the update advances a workflow in the database system.

11. The apparatus of claim 8, wherein the requested information is a signature.

12. A computer-implemented method for providing a security mechanism on a mobile device, the method comprising:

providing, on a display of a mobile device, a user interface presenting a plurality of selectable links associated with a plurality of actions capable of being performed on one or more database records stored in a database system,

processing a first user input received at the device from a first user identifiable as an authorized user of the device, the first user input selecting one of the selectable links,

identifying the selected link as being associated with a first action requesting information from a second user not identifiable as an authorized user of the device,

processing a second user input received at the device, the second user input providing the requested information,

causing the first action to be performed on a database record using the requested information,

identifying an occurrence of a security event associated with the second user, and

causing, responsive to identifying the occurrence of the security event associated with the second user, a security mechanism to be activated, the security mechanism disabling access via the device to at least the database system.

13. The method of claim 12, wherein the security mechanism further disables access to the user interface and to data stored on the mobile device.

14. The method of claim 12, further comprising:

causing the database record to be updated based on the performance using the requested information, wherein the update advances a workflow in the database system.

15. The method of claim 12, wherein the requested information is a signature.

16. A computer program product comprising a non-transitory computer-readable storage medium storing computer-readable program code to be executed by one or more processors when retrieved from the non-transitory computer-readable storage medium for providing a security mechanism, the program code comprising instructions configured to cause:

providing, on a display of a mobile device, a user interface presenting a plurality of selectable links associated with a plurality of actions capable of being performed on one or more database records stored in a database system,

processing a first user input received at the device from a first user identifiable as an authorized user of the device, the first user input selecting one of the selectable links,

identifying the selected link as being associated with a first action requesting information from a second user not identifiable as an authorized user of the device,

processing a second user input received at the device, the second user input providing the requested information,

causing the first action to be performed on a database record using the third-party information,

identifying an occurrence of a security event associated with the second user, and

causing, responsive to identifying the occurrence of the security event associated with the second user, a security mechanism to be activated, the security mechanism disabling access via the device to at least.

17. The computer program product of claim 16, wherein the security mechanism further disables access to the user interface and to data stored on the mobile device.

18. The computer program product of claim 16, the program code further including instructions to cause:

causing the database record to be updated based on the performance using the requested information, wherein the update advances a workflow in the database system.