Device locator disable authentication
A device locator mode or find my device (FMD) mode can allow a lost, stolen, or misplaced mobile device to be located. The FMD mode can be enabled or disabled on a mobile device. Sometimes thieves or unauthorized parties attempt to disable the FMD mode. To prevent this, the mobile device can transmit a unique device identifier to a remote server. The remote server can link the device identifier to a cloud-based user account associated with the user of the mobile device. Before an FMD mode is disabled on the mobile device, before the content or settings can be erased, and/or before a mobile device is permitted to be activated/reactivated, a user of the mobile device can be challenged for the credentials of the cloud-based user account. If valid credentials are provided, FMD can be disabled, the content or settings can be reset, and/or the device can be activated/reactivated.
1. A method comprising:
receiving, at a mobile device, a user input to enable a security setting, the security setting requires reactivation of the mobile device with user account credentials following receipt of a second user input at the mobile device to erase content and security settings from the mobile device;
on the mobile device, the mobile device having content and security settings erased from the mobile device, upon start-up of the mobile device after the content and security settings were erased:
entering, by the mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode;
determining, during the activation operating mode, that the mobile device is associated with a user account, wherein the determining includes transmitting a request for user account information to a server and receiving, from the server, user account information includes the user account credentials;
presenting, on the mobile device, a user interface including a challenge for the user account credentials of the user account; and
activating the mobile device in response to receipt of valid user account credentials at the user interface.
2. The method as in claim 1 , further comprising blocking activation of the mobile device until receipt of valid user account credentials at the user interface.
3. The method of claim 2 , further comprising limiting functionality of the mobile device until the mobile device is activated.
4. The method as in claim 1 , wherein the request for user account information is associated with an identifier of the mobile device.
5. The method as in claim 4 , wherein the identifier uniquely identifies the mobile device to the server.
6. The method of claim 1 , wherein the activation operating mode is entered in response to erasure of the content and security settings.
7. The method of claim 6 , wherein erasure of the content and security settings is performed via a device firmware update interface.
8. A data processing system on a mobile device, wherein the data processing system comprises:
one or more processors; and
a non-transitory computer-readable medium comprising code that, when executed by the processor, cause the one or more processors to perform operations comprising:
receiving, at the mobile device, a user input to enable a security setting, the security setting requires reactivation of the mobile device with user account credentials following receipt of a second user input at the mobile device to erase content and security settings from the mobile device;
on the mobile device, the mobile device having content and security settings erased from the mobile device, upon start-up of the mobile device after the content and security settings were erased:
entering, by the mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode;
determining, during the activation operating mode, that the mobile device is associated with a user account, wherein the determining includes transmitting a request for user account information to a server and receiving, from the server, user account information includes the user account credentials;
presenting, on the mobile device, a user interface including a challenge for the user account credentials of the user account; and
activating the mobile device in response to receipt of valid user account credentials at the user interface.
9. The data processing system as in claim 8 , further comprising blocking activation of the mobile device until receipt of valid user account credentials at the user interface.
10. The data processing system of claim 9 , further comprising limiting functionality of the mobile device until the mobile device is activated.
11. The data processing system as in claim 8 , wherein the request for user account information is associated with an identifier of the mobile device, the identifier uniquely identifying the mobile device to the server.
12. The data processing system as in claim 11 , wherein the identifier of the mobile device is a hardware identifier.
13. The data processing system of claim 8 , wherein the activation operating mode is entered in response to erasure of the content and security settings.
14. The data processing system of claim 13 , wherein erasure of the content and security settings is performed via a device firmware update interface.
15. A non-transitory computer readable medium storing instructions which, when executed by one or more processors of a mobile device, cause the one or more processors to perform operations comprising:
on the mobile device, the mobile device having content and security settings erased from the mobile device, upon start-up of the mobile device after the content and security settings were erased:
receiving, at the mobile device, a user input to enable a security setting, the security setting requires reactivation of the mobile device with user account credentials following receipt of a second user input at the mobile device to erase content and security settings from the mobile device;
entering, by the mobile device, an activation operating mode, wherein the mobile device is configured to enable one or more functions in the activation operating mode;
determining, during the activation operating mode, that the mobile device is associated with a user account, wherein the determining includes transmitting a request for user account information to a server and receiving, from the server, user account information includes the user account credentials;
presenting, on the mobile device, a user interface including a challenge for the user account credentials of the user account; and
activating the mobile device in response to receipt of valid user account credentials at the user interface.
16. The non-transitory computer readable medium as in claim 15 , further comprising blocking activation of the mobile device until receipt of valid user account credentials at the user interface.
17. The non-transitory computer readable medium of claim 16 , further comprising limiting functionality of the mobile device until the mobile device is activated.
18. The non-transitory computer readable medium as in claim 15 , wherein the request for user account information is associated with an identifier of the mobile device, wherein the identifier uniquely identifies the mobile device to the server.
19. The non-transitory computer readable medium of claim 15 , wherein the activation operating mode is entered in response to erasure of the content and security settings.
20. The non-transitory computer readable medium of claim 19 , wherein erasure of the content and security settings is performed via a device firmware update interface.