Lock screens to access work environments on a personal mobile device

• US 9,754,092 B2
• Filed: 10/26/2015
• Issued: 09/05/2017
• Est. Priority Date: 08/05/2011
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Newell, Craig F.
• Primary Examiner(s): Brown, Anthony
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US14/922,262
• Publication Number:
  US 20160042162A1
• Time in Patent Office: 680 Days
• Field of Search: 726 7, 713154
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

One or more embodiments of the invention provide access to a work environment in a mobile device from a lock screen presented by a personal environment of the mobile device, wherein the work environment is running in a virtual machine supported by a hypervisor running within the personal environment and wherein the personal environment is a host operating system (OS) of the mobile device. The host OS receives an authentication credential from a user in response to a presentation of the lock screen on a user interface (UI) of the mobile device and then determines whether the authentication credential is valid for the personal environment or the work environment. If the authentication credential is valid for the personal environment, access is enabled only to the personal environment. If the authentication credential is valid for the work environment, access is enabled to both the personal environment and the work environment.

Claims

1. A method for providing access to a work environment in a mobile device from a lock screen presented by a personal environment of the mobile device, the method comprising:

receiving an authentication credential from a user in response to a presentation of the lock screen on a user interface (UI) of the mobile device;

determining whether to grant the user access to the personal environment and work environment, based on the authentication credential received in response to the presentation of the lock screen;

enabling access only to the personal environment if the authentication credential is valid for the personal environment; and

enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment.

2. The method of claim 1, further comprising displaying the lock screen upon receiving a request to switch from the personal environment to the work environment.

3. The method of claim 1, further comprising:

receiving a request to switch from the work environment to the personal environment; and

switching from the work environment to the personal environment without presenting a lock screen.

4. The method of claim 2, wherein the step of enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment further comprises requesting launch of a user interface (UI) application, wherein the UI application facilitates access by the mobile device to contents of a memory buffer that is updated with display data for the work environment.

5. The method of claim 1, wherein the lock screen receives a swiping finger motion (i) in a first direction if the authentication credential is meant for the personal environment, and (ii) in a second direction if the authentication credential is meant for the work environment.

6. The method of claim 1, wherein the lock screen requests the user to produce a pattern motion as the authentication credential.

7. The method of claim 1, wherein the lock screen requests the user to produce a password as the authentication credential.

8. A non-transitory computer-readable storage medium including instructions that, when executed on a processor in a mobile device, causes the processor to provide access to a work environment in the mobile device from a lock screen presented by a personal environment of the mobile device, by performing the steps of:

receiving an authentication credential from a user in response to a presentation of the lock screen on a user interface (UI) of the mobile device;

determining whether to grant the user access to the personal environment and work environment, based on the authentication credential received in response to the presentation of the lock screen;

enabling access only to the personal environment if the authentication credential is valid for the personal environment; and

enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment.

9. The non-transitory computer-readable storage medium of claim 8, wherein the steps further comprise displaying the lock screen upon receiving a request to switch from the personal environment to the work environment.

10. The non-transitory computer-readable storage medium of claim 8, further comprising:

receiving a request to switch from the work environment to the personal environment; and

switching from the work environment to the personal environment without presenting a lock screen.

11. The non-transitory computer-readable storage medium of claim 9, wherein the step of enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment further comprises requesting launch of a user interface (UI) application, wherein the UI application facilitates access by the mobile device to display data for the work environment.

12. The non-transitory computer-readable storage medium of claim 8, wherein the lock screen receives a swiping finger motion (i) in a first direction if the authentication credential is meant for the personal environment, and (ii) in a second direction if the authentication credential is meant for the work environment.

13. The non-transitory computer-readable storage medium of claim 8, wherein the lock screen requests the user to produce a pattern motion as the authentication credential.

14. The non-transitory computer-readable storage medium of claim 8, wherein the lock screen requests the user to produce a password as the authentication credential.

15. A mobile device comprising a processor configured to provide access to a work environment in the mobile device from a lock screen presented by a personal environment of the mobile device by performing the steps of:

receiving an authentication credential from a user in response to a presentation of the lock screen on a user interface (UI) of the mobile device;

determining whether to grant the user access to the personal environment and work environment, based on the authentication credential received in response to the presentation of the lock screen;

enabling access only to the personal environment if the authentication credential is valid for the personal environment; and

enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment.

16. The mobile device of claim 15, wherein the steps further comprise displaying the lock screen upon receiving a request to switch from the personal environment to the work environment.

17. The mobile device of claim 15, further comprising:

receiving a request to switch from the work environment to the personal environment; and

switching from the work environment to the personal environment without presenting a lock screen.

18. The mobile device of claim 16, wherein the step of enabling access to both the personal environment and the work environment if the authentication credential is valid for the work environment further comprises requesting launch of a user interface (UI) application, wherein the UI application facilitates access to display data for the work environment.

19. The mobile device of claim 15, wherein the lock screen receives a swiping finger motion (1) in a first direction if the authentication credential is meant for the personal environment, and (ii) in a second direction if the authentication credential is meant for the work environment.

20. The mobile device of claim 15, wherein the lock screen requests the user to produce a password as the authentication credential.