Granted Patent B2

US 9,424,408 · App. 12/643,797 · Granted Aug 23, 2016

Abstract

Claims (66)

1. A computer-implemented method for authenticating a user, comprising:

creating a plurality of policies, each policy comprising an indication of a region of a physical location and an authentication timeout length, the authentication timeout length based on a likelihood of unauthorized use of a mobile computing device within the region;

seeking information indicative of a current location of a mobile computing device;

if said current location of said mobile computing device is determined, selecting a policy of the plurality of policies comprising an indication of a region that includes the current location;

when said current location of said mobile computing device is not determined, selecting a policy of the plurality of policies based on recent types of usage of said mobile computing device;

determining a current timeout length comprising a timeout length of the selected policy; and

responsive to the mobile computing device not receiving user input for a time period equal to the current timeout length, locking the mobile computing device, the locking comprising preventing access to information on the mobile computing device by the user until a password is received from the user.

2. The computer-implemented method of claim 1 , further comprising:

with a policy editor, displaying a map from which a user selects a location to associate with a policy of the plurality of policies.

3. The computer-implemented method of claim 1 , further comprising:

receiving an updated location of the mobile computing device;

selecting an updated policy comprising an indication of a region that includes the updated location;

determining an updated timeout length comprising a timeout length of the updated policy; and

adjusting the current timeout length based on the updated timeout length.

4. A non-transitory computer readable storage medium configured to store instructions, the instructions when executed by a processor cause the processor to:

access a plurality of policies, each policy comprising an indication of an authentication timeout length, the authentication timeout length based on a likelihood of unauthorized use of a mobile computing device according to the corresponding policy;

seek information indicative of a current location of a mobile computing device;

if said current location of said mobile computing device is determined, select a policy of the plurality of policies comprising an indication of a region that includes the current location;

when said current location of said mobile computing device is not determined, select a policy of the plurality of policies based on recent types of usage of said mobile computing device;

determine a current timeout length comprising a timeout length of the selected policy; and

responsive to the mobile computing device not receiving user input for a time period equal to the current timeout length, lock the mobile computing device, the locking comprising preventing access to information on the mobile computing device by a user until a password is received from the user.

5. The non-transitory computer readable medium of claim 4 , wherein each policy of the plurality of policies further comprises an indication of a type of user activity on the mobile computing device, and further comprising instructions that cause the processor to:

determine a current type of user activity on the mobile computing device; and

select a policy comprising an indication of the current type of user activity on the mobile computing device.

6. The non-transitory computer readable medium of claim 4 , further comprising instructions that cause the processor to:

receive an updated location of the mobile computing device;

select an updated policy comprising an indication of a region that includes the updated location;

determine an updated timeout length comprising a timeout length of the updated policy; and

adjust the current timeout length based on the updated timeout length.

7. A computer-implemented method for authenticating a user, comprising:

classifying recent usage of a mobile computing device into a particular type of usage of the mobile computing device;

seeking information indicative of a current location of the mobile computing device;

determining a current timeout length based on a policy corresponding to the particular type of usage that corresponds to the recent usage of the mobile computing device when the current location of the mobile computing device is not determined; and

responsive to the mobile computing device remaining idle for a time period equal to the current timeout length, authenticating a user of the mobile computing device.

8. The computer-implemented method of claim 7 , further comprising determining the current timeout length based on the information indicative of the current location of the mobile computing device.

9. The computer-implemented method of claim 8 , wherein the information indicative of the current location of the mobile computing device comprises a current location of the mobile computing device, and wherein the current timeout length is associated with a region containing the current location.

10. The computer-implemented method of claim 8 , further comprising, with a policy editor, displaying a map from which a user selects a location to associate with a timeout length to be used when the mobile computing device is at that location.

11. The computer-implemented method of claim 7 , wherein the current timeout length is based on a likelihood of unauthorized use of the mobile computing device.

12. The computer-implemented method of claim 7 , wherein authenticating a user of the mobile computing device further comprises:

locking the mobile computing device, the locking comprising preventing access to information on the mobile computing device by the user until a password is received from the user.

13. A non-transitory computer readable storage medium configured to store instructions, the instructions when executed by a processor cause the processor to:

classify recent usage of a mobile computing device into a particular type of usage of the mobile computing device;

seek information indicative of a current location of the mobile computing device;

determine a current timeout length based on a policy corresponding to the particular type of usage that corresponds to the recent usage of the mobile computing device when the current location of the mobile computing device is not determined; and

responsive to the mobile computing device remaining idle for a time period equal to the current timeout length, authenticate a user of the mobile computing device.

14. The non-transitory computer readable medium of claim 13 , further comprising instructions that cause the processor to:

determine the current timeout length based on the information indicative of the current location of the mobile computing device.

15. The non-transitory computer readable medium of claim 14 , wherein the information indicative of the current location of the mobile computing device comprises a current location of the mobile computing device, and wherein the current timeout length is associated with a region containing the current location.

16. The non-transitory computer readable medium of claim 14 , further comprising a policy editor for displaying a map from which a user selects a location to associate with a timeout length to be used when the mobile computing device is at that location.

17. The non-transitory computer readable medium of claim 13 , wherein the current timeout length is based on a likelihood of unauthorized use of the mobile computing device.

18. The non-transitory computer readable medium of claim 13 , wherein authenticating a user of the mobile computing device further comprises:

locking the mobile computing device, the locking comprising preventing access to information on the mobile computing device by the user until a password is received from the user.

19. A system for authenticating a user, comprising:

a computer processor for executing computer program instructions;

a computer-readable storage medium having computer program instructions, the instructions when executed by the computer processor cause the processor to:

display a map from which a user selects a location to associate with a timeout length to be used when a mobile computing device is at that location;

store a number of policies each associating a location selected by the user with a timeout length, wherein each location may be associated with a different timeout length;

receive information describing a current location of a mobile computing device;

determine a current timeout length based on the information describing the current location of the mobile computing device by selecting one of the policies of the number of policies that includes the current location of the mobile computing device; and

responsive to the mobile computing device remaining idle for a time period equal to the current timeout length, authenticate a user of the mobile computing device.

20. The system of claim 19 , wherein the instructions, when executed, further cause the processor to create a policy to be included in said number of policies by associating the current location of the mobile computing device with a specified timeout length.

21. The system of claim 19 , wherein the instructions, when executed, further cause the processor to create a policy to be included in said number of policies by receiving an address input by a user and associating that address with a timeout length.

22. The system of claim 19 , wherein the information describing the location of the mobile computing device comprises a current type of user activity of the mobile computing device, and wherein the current timeout length is associated with the current type of user activity of the mobile computing device.

23. The system of claim 19 , wherein the current timeout length is based on a likelihood of unauthorized use of the mobile computing device.

24. The system of claim 19 , wherein authenticating a user of the mobile computing device further comprises:

locking the mobile computing device, the locking comprising preventing access to information on the mobile computing device by the user until a password is received from the user.

Assignments (6)