Secure device sharing

• US 10,635,791 B2
• Filed: 03/29/2013
• Issued: 04/28/2020
• Est. Priority Date: 02/01/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Hassan, Ahmed E., Wilson, John F., Martin, Daryl Joseph
• Primary Examiner(s): Feild, Lynn D
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US13/853,235
• Publication Number:
  US 20130239201A1
• Time in Patent Office: 2,587 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect

Abstract

A device and method for placing the device in a locked state having an associated set of permitted tasks so as to permit the device owner to share the device with others but maintain security over aspects of the device. A task change request is evaluated to determine whether the requested task is permitted and, if so, the requested task is allowed; if not, then an authorization process is invoked to prompt the user to input authorization data. Upon verification of the authorization data, the device may be unlocked and the requested change implemented. The permitted tasks may designate specific applications, specific operations or functions within applications or at the operating system level, one or more currently open windows, and other levels of granularity.

Claims

1. A method of controlling access to a device, the method comprising:

receiving, via the user input device, a software lock request;

responsive to the receiving the software lock request, providing a user with a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receiving, via a user input device, a user input selection of one or more impermissible applications from the plurality of applications executable on the device, wherein the plurality of applications includes a messaging application or an e-mail application;

storing data in a user profile associated with the user, the data corresponding to the user input selection of the one or more impermissible applications;

entering a locked state;

wherein, in the locked state, user access is not permitted to the one or more impermissible applications, and user access is permitted to other applications of the plurality of applications.

2. The method of claim 1 wherein the plurality of applications includes a game application.

3. The method of claim 1 wherein the data comprises profile data.

4. The method of claim 1 wherein the data includes a plurality of user profiles, wherein each user profile includes an associated set of impermissible applications.

5. The method of claim 1 further comprising:

receiving valid authorization data; and

disabling the locked state responsive to the receiving valid authorization data.

6. The method of claim 1 further comprising:

receiving valid authorization data; and

entering an unlocked state responsive to the receiving valid authorization data;

wherein, in the unlocked state, user access to the plurality of applications is permitted.

7. A device comprising:

a user input device;

a processor adapted to;

receive, via the user input device, a software lock request;

provide, responsive to the software lock request, a user with a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receive, via the user input device, a user input selection of one or more impermissible applications from the plurality of applications executable on the device, wherein the plurality of applications includes a messaging application or an e-mail application; and

a memory adapted to store data, the data corresponding to the user input selection of the one or more impermissible applications;

wherein, in the locked state, user access is not permitted to the one or more impermissible applications, and user access is permitted to other applications of the plurality of applications.

8. The device of claim 7 further comprising a display adapted to display the plurality of applications executable on the device.

9. The device of claim 8 further comprising an operating system adapted to:

manage input and output through the user input device and the display; and

provide a platform for operation of the plurality of applications.

10. The device of claim 7 wherein the plurality of applications includes a game application.

11. The device of claim 7 wherein the data comprises profile data.

12. The device of claim 7 wherein the data includes a plurality of user profiles, wherein each user profile includes an associated set of impermissible applications.

13. The device of claim 7 wherein the processor is further adapted to:

receive valid authorization data; and

responsively disable the locked state.

14. The device of claim 7 wherein the processor is further adapted to:

receive valid authorization data; and

responsively enter an unlocked state;

wherein, in the unlocked state, user access to the plurality of applications is permitted.

15. A non-transitory machine-readable medium containing instructions executable upon a processor of an electronic device having a user input device, the instructions adapting the processor to:

receive, via the user input device, a software lock request;

responsive to the receiving the software lock request, provide a user with a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receive, via the user input device, a user input selection of one or more impermissible applications from the plurality of applications executable on the device, wherein the plurality of applications includes a messaging application or an e-mail application;

store data in a memory, the data corresponding to the user input selection of the one or more impermissible applications; and

receive, via the user input device, a software lock request;

wherein, in the locked state, user access is not permitted to the one or more impermissible applications, and user access is permitted to other applications of the plurality of applications.

16. The non-transitory machine-readable medium of claim 15 further comprising instructions for causing a display to display the plurality of applications executable on the device.

17. The non-transitory machine-readable medium of claim 16 further comprising instructions for causing an operating system to:

manage input and output through the user input device and the display; and

provide a platform for operation of the plurality of applications.

18. The non-transitory machine-readable medium of claim 15 wherein the plurality of applications includes a game application.

19. The non-transitory machine-readable medium of claim 15 wherein the data comprises profile data.

20. The non-transitory machine-readable medium of claim 15 wherein the data includes a plurality of user profiles, wherein each user profile includes an associated set of impermissible applications.

21. The non-transitory machine-readable medium of claim 15 wherein the instructions further adapt the processor to:

receive valid authorization data; and

responsively disable the locked state.

22. The non-transitory machine-readable medium of claim 15 wherein the instructions further adapt the processor to:

receive valid authorization data; and

responsively enter an unlocked state;

wherein, in the unlocked state, user access to the plurality of applications is permitted.

23. A method of controlling access to a device, the method comprising:

receiving, via a user input device, a software lock request;

responsive to the receiving the software lock request, providing to a user a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receiving, via the user input device, a user input selection of one or more permitted applications from the plurality of applications executable on the device;

updating a user profile by storing, in the user profile, data corresponding to the user input selection of the one or more permitted applications; and

entering a locked state;

wherein, in the locked state and based on the data in the user profile, user access is permitted to the one or more permitted applications and user access is not permitted to other applications of the plurality of applications.

24. The method of claim 23 wherein the plurality of applications includes at least a game application;

a messaging application;

or an e-mail application.

25. A device comprising:

a user input device;

a display;

a processor adapted to;

receive, via a user input device, a software lock request;

responsive to the receiving the software lock request, providing to a user, on the display, a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receive, via the user input device, a user input selection of one or more permitted applications from the plurality of applications executable on the device;

a memory adapted to update a user profile by storing data corresponding to the user input selection of the one or more permitted applications; and

the processor adapted to

enter a locked state;

wherein, in the locked state and based on the data in the user profile, user access is permitted to the one or more permitted applications and wherein user access is not permitted to other applications of the plurality of applications.

26. The device of claim 25 wherein the plurality of applications includes at least a game application;

a messaging application;

or an e-mail application.

27. A non-transitory machine-readable medium containing instructions executable upon a processor of an electronic device having a user input device, the instructions adapting the processor to:

receiving, via a user input device, a software lock request;

responsive to the receiving the software lock request, providing to a user a dynamic picklist of a plurality of applications executable on the device, from which dynamic picklist the user may select one or more impermissible applications;

receive, via the user input device, a user input selection of one or more permitted applications from the plurality of applications executable on the device;

update a user profile by storing, in a memory, data corresponding to the user input selection of the one or more permitted applications; and

enter a locked state;

wherein, in the locked state and based on the data in the user profile, user access is permitted to the one or more permitted applications and user access is not permitted to other applications of the plurality of applications.

28. The non-transitory machine-readable medium of claim 27 wherein the plurality of applications includes at least a game application;

a messaging application;

or an e-mail application.