Security interface for a mobile device

• US 9,743,278 B2
• Filed: 12/06/2012
• Issued: 08/22/2017
• Est. Priority Date: 12/26/2001
• Status: Expired due to Term

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Pathiyal, Krishna K.
• Primary Examiner(s): Brown, Christopher
• Application Number:
  US13/707,103
• Publication Number:
  US 20130097672A1
• Time in Patent Office: 1,720 Days
• Field of Search: 713182, 726 27
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/7243 with interactive means for internal management of messages
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method and device are described which provide a security interface, preferably for a mobile device. The security interface provides user-selectable non-secure data that is displayed without the need for a password. The non-secure data is preferably updated on a regular basis, and can be obtained from different sources, as selected by a user. The secure data can be accessed after successful authentication, such as a positive password verification. Additional non-secure data, related to the displayed non-secure data, can preferably be accessed, with or without a need for a password. An indication can be provided to inform a user that secure data has been updated, without the need to access such secure data. The security interface is preferably enabled after a predetermined timeout period. The interface allows the device to operate in three data access states: a controlled access state; a verification state; and a full access state.

Claims

1. A method of controlling user access to data on a mobile device having a wireless transceiver, the method comprising:

receiving, via the wireless transceiver, non-secure data and secure data from one or more data sources via a wireless network;

restricting, via a security interface of the mobile device, user access to secure data while allowing user access to non-secure data, secure data including data protected by restricted access, and non-secure data including data that is not secure data;

segmenting the security interface into a status area and a security area;

automatically displaying, via the security area, the non-secure data received via the wireless network, without requiring user authentication;

automatically displaying an indication, via the status area, that secure data has been received from the one or more data sources, without requiring user authentication;

displaying, via the security area, received secure data responsive to receiving successful authentication, wherein, when the indication indicates that received secured data comprises a new message, displaying the received secure data further comprises automatically opening the new message responsive to receiving successful authentication;

automatically redisplaying, via the security area, the non-secure data received via the wireless network following expiration of an inactivity time period such that the received secure data is no longer displayed on the security interface;

receiving, via the security area, a user request for additional data related to certain non-secure data displayed via the security area; and

selectively displaying, via the security area, additional data related to the certain non-secure data.

2. The method of claim 1, further comprising:

allowing user access to secure data upon successful user authentication.

3. The method of claim 1, further comprising:

allowing user access to secure data upon receipt of correct security information.

4. The method of claim 3, wherein the correct security information includes a particular input sequence.

5. The method of claim 3, wherein the correct security information includes a password.

6. The method of claim 3, wherein the correct security information is user-defined.

7. The method of claim 1, wherein the non-secure data includes news information.

8. The method of claim 1, wherein the non-secure data includes financial information.

9. The method of claim 1, wherein the non-secure data includes weather information.

10. The method of claim 1, wherein the non-secure data is based on location.

11. The method of claim 1, further comprising:

updating, via the security interface, the non-secure data, without requiring user authentication.

12. The method of claim 1, wherein the security interface comprises a device security screen saver interface activated upon expiry of a specified period of time.

13. The method of claim 1, wherein automatically opening the new message comprises displaying the new message responsive to receiving successful authentication.

14. The method of claim 1, wherein the security interface includes user-selected information.

15. The method of claim 1, wherein automatically opening the new message responsive to receiving successful authentication comprises displaying the new message without requiring user selection of the new message.

16. The method of claim 15, wherein the new message comprises an email message or a Short Message Service (SMS) message.

17. The method of claim 1, wherein additional data related to the certain non-secure data is treated as secure data regardless of whether the additional data comprises secure or non-secure data.

18. The method of claim 17, further comprising:

requiring user authentication responsive to receiving the user request for additional data related to certain non-secure data; and

displaying the additional data related to the certain non-secure data responsive to receiving successful authentication.

19. A mobile device, comprising:

a wireless transceiver enabled to receive non-secure data and secure data from one or more data sources via a wireless network; and

a security interface enabled to;

restrict user access to secure data while allowing user access to non-secure data, secure data including data protected by restricted access, and non-secure data including data that is not secure data,

segment the security interface into a status area and a security area;

automatically display, via the security area, the non-secure data received via the wireless network, without requiring user authentication;

automatically display an indication, via the status area, that secure data has been received from the one or more data sources, without requiring user authentication,

display, via the security area, received secure data responsive to receiving successful authentication, wherein, when the indication indicates that received secured data comprises a new message, displaying the received secure data further comprises automatically opening the new message responsive to receiving successful authentication;

automatically redisplay, via the security area, the non-secure data received via the wireless network following expiration of an inactivity time period such that the received secure data is no longer displayed on the security interface; and

receive a user request for additional data related to certain non-secure data displayed via the security area;

the wireless transceiver being further enabled to receive additional data related to the certain non-secure data; and

the security interface being further enabled to selectively display the additional data.