System, method, and computer program product for a pre-deactivation grace period

• US 9,614,823 B2
• Filed: 09/13/2013
• Issued: 04/04/2017
• Est. Priority Date: 03/27/2008
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Dhesi, Rajkaran, Hunt, Simon, Parke, Paul
• Primary Examiner(s): ABYANEH, ALI S
• Application Number:
  US14/026,872
• Publication Number:
  US 20140013394A1
• Time in Patent Office: 1,299 Days
• Field of Search: 726 2, 726 4- 7, 726 17, 726 19, 726 26- 28, 726 34- 35, 713193, 713189, 713182-183, 713168, 713166, 713158, 713100, 713 1, 455 261, 455410-411, 380273, 380270, 380247
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud

Abstract

A system, method, and computer program product are provided for a pre-deactivation grace period on a processing device (e.g., mobile device). In operation, a deactivation request is detected for a deactivation event. Further, the commencement of the deactivation event is delayed for a predetermined time period, in response to the deactivation request. Additionally, the deactivation event is commenced, after the predetermined time period. To return to full functionality of the processing device while in the deactivation grace period all that may be required is entry of a authentication information (e.g., password) that is weaker than a stronger authentication information initially used to log into the processing device.

Claims

1. A non-transitory computer readable medium having executable instructions stored thereon for causing a programmable device to:

receive a first authentication information via an authentication interface of a programmable device;

initiate a deactivation grace period responsive to a local user request to initiate a deactivation event on the programmable device, wherein the programmable device remains fully functional during the deactivation grace period;

receive a user reactivation request during the deactivation grace period;

request a second authentication information responsive to the user reactivation request;

receive a second authentication information via the authentication interface prior to termination of the deactivation grace period;

reactivate the programmable device responsive to acceptance of the second authentication information at any time prior to termination of the deactivation grace period; and

commence deactivation of the programmable device at expiration of the deactivation grace period responsive to not receiving the second authentication information prior to expiration of the deactivation grace period,

wherein deactivation of the programmable device results in the programmable device entering a low power or powered off state, and

wherein the second authentication information is weaker than the first authentication information.

2. The non-transitory computer readable medium of claim 1, wherein the authentication interface for the first authentication information and the authentication interface for the second authentication information are different authentication interfaces.

3. The non-transitory computer readable medium of claim 1 further comprising instructions to cause the programmable device to:

provide a pre-authentication interface allowing a restricted functionality of the programmable device via during the deactivation grace period, the restricted functionality representing a subset of a full functionality that was available on the programmable device after receiving the first authentication information and prior to initiation of the deactivation grace period.

4. The non-transitory computer readable medium of claim 1, wherein the authentication interface comprises entry of a user password.

5. The non-transitory computer readable medium of claim 1, wherein the executable instructions further comprise instructions to:

display, during the deactivation grace period, a pre-authentication interface that includes information identifying a last time the programmable device was successfully logged into using the first authentication information.

6. The non-transitory computer readable medium of claim 1 further comprising instructions to cause the programmable device to:

provide a pre-authentication interface allowing a restricted functionality of the programmable device via during the deactivation grace period; and

provide the authentication interface to request the second authentication information in response to an indication received via the pre-authentication interface.

7. The non-transitory computer readable medium of claim 1, wherein the deactivation event includes at least one of a power off, a standby event, and a reset event.

8. The non-transitory computer readable medium of claim 1, wherein duration of the deactivation grace period is configurable.

9. The non-transitory computer readable medium of claim 8, wherein the duration of the deactivation grace period is configurable utilizing a graphical user interface.

10. The non-transitory computer readable medium of claim 1, further comprising executable instructions to cause the programmable device to encrypt a portion of memory on the programmable device during the deactivation grace period.

11. The non-transitory computer readable medium of claim 10, further comprising executable instructions to cause the programmable device to un-encrypt the portion of memory upon acceptance of the second authentication information.

12. The non-transitory computer readable medium of claim 1, wherein the request to initiate the deactivation event is originated from a device other than the programmable device.

13. The non-transitory computer readable medium of claim 1, wherein the authentication interface for the second authentication information is displayed in response to detecting an attempt to access functionality of the programmable device during the deactivation grace period.

14. The non-transitory computer readable medium of claim 13, wherein detecting an attempt to access functionality of the programmable device comprises detecting an attempt to access a portion of functionality not available during the deactivation grace period.

15. A programmable device comprising:

a programmable processor; and

a memory accessible by the programmable processor, the memory having instructions stored thereon to cause the programmable processor to;

receive a first authentication information via an authentication interface of the programmable device;

initiate a deactivation grace period responsive to a local user request to initiate a deactivation event on the programmable device, wherein the programmable device remains fully functional during the deactivation grace period;

receive a second authentication information via the authentication interface prior to termination of the deactivation grace period;

reactivate the programmable device responsive to acceptance of the second authentication information at any time during the deactivation grace period; and

commence deactivation of the programmable device at expiration of the deactivation grace period responsive to not receiving the second authentication information prior to expiration of the deactivation grace period,

wherein deactivation of the programmable device results in the programmable device entering a low power or powered off state, and

wherein the second authentication information is weaker than the first authentication information.

16. The programmable device of claim 15 wherein the instructions further comprise instructions to cause the programmable processor to:

provide a pre-authentication interface allowing a restricted functionality of the programmable device via during the deactivation grace period; and

provide the authentication interface to request the second authentication information in response to an indication received via the pre-authentication interface.

17. The programmable device of claim 15 wherein the instructions further comprise instructions to cause the programmable processor to:

provide a pre-authentication interface allowing a restricted functionality of the programmable device via during the deactivation grace period, the restricted functionality representing a subset of a full functionality that was available on the programmable device after receiving the first authentication information and prior to initiation of the deactivation grace period.

18. The programmable device of claim 15, wherein the authentication interface for the second authentication information is displayed in response to detecting an attempt to access functionality of the programmable device during the deactivation grace period.