Secure device sharing

• US 8,713,475 B2
• Filed: 09/14/2012
• Issued: 04/29/2014
• Est. Priority Date: 02/01/2006
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Hassan, Ahmed E., Wilson, John F., Martin, Daryl Joseph
• Primary Examiner(s): Vaughan, Michael R
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US13/617,356
• Publication Number:
  US 20130014249A1
• Time in Patent Office: 592 Days
• US Class Current: 715/804
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect

Abstract

A device and method for placing the device in a locked state having an associated set of permitted tasks so as to permit the device owner to share the device with others but maintain security over aspects of the device. A task change request is evaluated to determine whether the requested task is permitted and, if so, the requested task is allowed; if not, then an authorization process is invoked to prompt the user to input authorization data. Upon verification of the authorization data, the device may be unlocked and the requested change implemented. The permitted tasks may designate specific applications, specific operations or functions within applications or at the operating system level, one or more currently open windows, and other levels of granularity.

Claims

1. A method of locking a device, the method comprising:

receiving a lock request via user input; and

responsive to the receiving, locking the device to an active window currently open on the device, the active window under control of an application currently executing on the device, wherein access is permitted, via a user interface, to the active window and wherein access is not permitted, via the user interface, to other windows.

2. The method of claim 1, wherein the application currently executing comprises an e-mail application.

3. The method of claim 1, wherein the active window displays a particular e-mail message.

4. The method of claim 3, further comprising preventing access, via the user interface, to other e-mail messages on the device.

5. The method of claim 1, wherein the active window allows scrolling via the user interface.

6. The method of claim 1, wherein the application currently executing is identified in profile data, the profile data including identification of a plurality of applications permitted in a particular lock state.

7. An electronic device comprising:

an input device;

a display; and

a processor operatively coupled to the user input device and the display, the processor adapted to;

enable receipt, via the input device, of a lock request; and

enable locking of the device to an active window currently open on the device, the active window under control of an application currently executing on the device, wherein access is permitted, via the input device, to the active window and wherein access is not permitted, via the input device, to other windows.

8. The electronic device of claim 7, wherein the application currently executing comprises an e-mail application.

9. The electronic device of claim 8, wherein the active window displays a particular e-mail message.

10. The electronic device of claim 7, wherein the active window allows scrolling.

11. The electronic device of claim 10, the processor further adapted to enable prevention of access to other e-mail messages on the device.

12. The electronic device of claim 7, wherein the application currently executing is identified in profile data, the profile data including identification of a plurality of applications permitted in a particular lock state.

13. A computer-readable non-transitory medium containing computer-executable instructions that, when performed by a processor in an electronic device, cause the processor to:

receive a lock request via user input; and

lock the device to an active window currently open on the device, the active window under control of an application currently executing on the device, wherein access is permitted, via a user interface, the active window and wherein access is not permitted, via the user interface, to other windows.

14. A method of providing security on a device, the method comprising:

presenting a plurality of applications executable on the device;

defining permitted task information based on user input corresponding to selection of one or more applications of the plurality of applications, wherein the permitted task information is associated with a lock state;

storing the permitted task information in profile data;

receiving a request to activate a selected task; and

determining whether the request is permitted based on the permitted task information.

15. The method of claim 14,

wherein the profile data indicates one or more applications permitted to be executed on the device while in the lock state.

16. The method of claim 14,

wherein the profile data indicates one or more applications not permitted to be executed on the device while in the lock state.

17. The method of claim 14, further comprising:

activating the selected task if the request is permitted based on the permitted task information.

18. The method of claim 14, further comprising:

maximizing a currently open window associated with a permitted task.

19. An electronic device comprising:

an input device;

a display; and

a processor operatively coupled to the input device and the display, the processor adapted to;

enable presentation of a plurality of applications executable on the device;

enable definition of permitted task information based on user input corresponding to selection of one or more applications of the plurality of applications, wherein the permitted task information is associated with a lock state;

enable storing of the permitted task information in profile data;

enable receipt of a request to activate a selected task; and

enable determination of whether the request is permitted based on the permitted task information.

20. The electronic device of claim 19, wherein the profile data indicates one or more applications permitted to be executed on the device while in the lock state.

21. The electronic device of claim 19, wherein the profile data indicates one or more applications not permitted to be executed on the device while in the lock state.

22. The electronic device of claim 19, wherein the process is further adapted to:

enable activation of the selected task if the request is permitted based on the permitted task information.

23. The electronic device of claim 19, wherein the process is further adapted to:

enable maximizing of a currently open window associated with a permitted task.

24. A computer-readable non-transitory medium containing computer-executable instructions that, when performed by a processor in an electronic device, cause the processor to:

present a plurality of applications executable on the device;

define permitted task information based on user input corresponding to selection of one or more applications of the plurality of applications, wherein the permitted task information is associated with a lock state; and

store the permitted task information in profile data;

enable receipt of a request to activate a selected task; and

enable determination of whether the request is permitted based on the permitted task information.