Secure device sharing

• US 8,291,342 B2
• Filed: 12/12/2011
• Issued: 10/16/2012
• Est. Priority Date: 02/01/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Hassan, Ahmed E., Wilson, John F., Martin, Daryl Joseph
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US13/316,835
• Publication Number:
  US 20120084572A1
• Time in Patent Office: 309 Days
• Field of Search: 726/2
• US Class Current: 715/804
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect

Abstract

A device and method for placing the device in a locked state having an associated set of permitted tasks so as to permit the device owner to share the device with others but maintain security over aspects of the device. A task change request is evaluated to determine whether the requested task is permitted and, if so, the requested task is allowed; if not, then an authorization process is invoked to prompt the user to input authorization data. Upon verification of the authorization data, the device may be unlocked and the requested change implemented. The permitted tasks may designate specific applications, specific operations or functions within applications or at the operating system level, one or more currently open windows, and other levels of granularity.

Claims

1. A method of managing task change requests in an electronic device, the electronic device operating to present an active task, the active task allowing receipt of input, the method comprising:

receiving a task change request to change the active task from a first task to a second task;

determining that the electronic device is in a locked state, the determining including determining that a lock indicator has been set, wherein permitted task information is associated with the lock indicator;

determining, based upon the permitted task information, that the second task is not permitted to become the active task in the locked state; and

outputting an indication of a failure to make the second task the active task.

2. The method of claim 1 wherein the task change request comprises a request to launch a new application.

3. The method of claim 1 wherein the task change request comprises a selection of an operation within an application, the selection resulting in launch of a new window.

4. The method of claim 1 wherein the task change request comprises a request to close the first task.

5. The method of claim 1 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to change the active window from the first open window to the second open window.

6. The method of claim 1 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to minimize the first open window.

7. The method of claim 1 further comprising, responsive to the determining that the second task is not permitted, displaying an authorization window including a prompt for authorization data.

8. The method of claim 7 wherein the authorization data comprises a password.

9. The method of claim 7 wherein the authorization data comprises biometric data.

10. The method of claim 9 wherein the biometric data comprises a fingerprint.

11. The method of claim 9 wherein the biometric data comprises a retinal scan.

12. The method of claim 9 wherein the biometric data comprises a voice sample.

13. The method of claim 7 further comprising:

receiving the authorization data;

attempting to validate the authorization data; and

determining that the authorization data has not been successfully validated.

14. An electronic device having a locked state and an unlocked state, the device comprising:

an input device;

a display; and

a processor operatively coupled to the user input device, the display and the memory, the processor operable to present an active task, the active task allowing receipt of input from the input device, the processor adapted to;

receive a task change request to change the active task from a first task to a second task;

determine that the electronic device is in a locked state, the determining including determining that a lock indicator has been set, wherein permitted task information is associated with the lock indicator;

determine, based upon the permitted task information, that the second task is not permitted to become the active task in the locked state; and

output, on the display, an indication of a failure to make the second task the active task.

15. The electronic device of claim 14 wherein the task change request comprises a request to launch a new application.

16. The electronic device of claim 14 wherein the task change request comprises a selection of an operation within an application, the selection resulting in launch of a new window.

17. The electronic device of claim 14 wherein the task change request comprises a request to close the first task.

18. The electronic device of claim 14 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to change the active window from the first open window to the second open window.

19. The electronic device of claim 14 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to minimize the first open window.

20. The electronic device of claim 14 wherein the processor is further adapted to, responsive to the determining that the second task is not permitted, output, on the display, an authorization window including a prompt for authorization data.

21. The electronic device of claim 20 wherein the authorization data comprises a password.

22. The electronic device of claim 20 wherein the authorization data comprises biometric data.

23. The electronic device of claim 22 wherein the biometric data comprises a fingerprint.

24. The electronic device of claim 22 wherein the biometric data comprises a retinal scan.

25. The electronic device of claim 22 wherein the biometric data comprises a voice sample.

26. The electronic device of claim 20 further comprising:

receiving the authorization data;

attempting to validate the authorization data; and

determining that the authorization data has not been successfully validated.

27. A non-transitory computer-readable medium containing computer-executable instructions that, when performed by a processor in an electronic device, the processor operable to present an active task, the active task allowing receipt of input, cause the processor to:

receive a task change request to change the active task from a first task to a second task;

determine that the electronic device is in a locked state, the determining including determining that a lock indicator has been set, wherein permitted task information is associated with the lock indicator;

determine, based upon the permitted task information, that the second task is not permitted to become the active task in the locked state; and

output an indication of a failure to make the second task the active task.

28. The computer-readable medium of claim 27 wherein the task change request comprises a request to launch a new application.

29. The computer-readable medium of claim 27 wherein the task change request comprises a selection of an operation within an application, the selection resulting in launch of a new window.

30. The computer-readable medium of claim 27 wherein the task change request comprises a request to close the first task.

31. The computer-readable medium of claim 27 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to change the active window from the first open window to the second open window.

32. The computer-readable medium of claim 27 wherein the first task is associated with a first open window, the second task is associated with a second open window, the first open window is an active window and the task change request comprises a request to minimize the first open window.

33. The computer-readable medium of claim 27 wherein, responsive to the determining that the second task is not permitted, the instructions cause the processor to display an authorization window including a prompt for authorization data.

34. The computer-readable medium of claim 33 wherein the authorization data comprises a password.

35. The computer-readable medium of claim 33 wherein the authorization data comprises biometric data.

36. The computer-readable medium of claim 35 wherein the biometric data comprises a fingerprint.

37. The computer-readable medium of claim 35 wherein the biometric data comprises a retinal scan.

38. The computer-readable medium of claim 35 wherein the biometric data comprises a voice sample.

39. The computer-readable medium of claim 33 wherein the instructions further cause the processor to:

receive the authorization data;

attempt to validate the authorization data; and

determine that the authorization data has not been successfully validated