Method and system for container background unlock

1. A method of application container access, the method comprising:

performing a foreground unlock on an application container;

creating a copy of a container key of the application container;

locking the application container;

receiving a background unlock trigger;

determining whether a background unlock is authorized;

performing the background unlock on at least a portion of the application container using the copy of the container key in response to determining the background unlock is authorized, wherein the background unlock enables a type of access that is less than full access to the application container; and

storing data in the at least a portion of the application container while the application container is in the background unlock.

2. The method of claim 1 further comprising, prior to creating the copy of the container key, determining the application container is compatible with the background unlock.

3. The method of claim 2 , wherein determining the application container is compatible with the background unlock comprises verifying a policy for the application container.

4. The method of claim 1 , further comprising updating an authentication time stamp in response to creating the copy of the container key, wherein determining whether the background unlock is authorized comprises verifying the authentication time stamp is within a particular time period.

5. The method of claim 1 , wherein the background unlock trigger comprises one or more of:

a remote notification; or

a background system operation.

6. The method of claim 1 , further comprising, after storing the data:

receiving a subsequent background unlock trigger;

determining whether the background unlock is authorized; and

performing the background unlock on at least the portion of the application container using the copy of the container key in response to determining the background unlock is authorized.

7. The method of claim 1 , further comprising, after storing the data:

performing a foreground unlock on an application container; and

allowing access to the data.

8. A device comprising:

a memory comprising an application container; and

a processor in communication with the memory, the processor configured to:

perform a foreground unlock on the application container;

create a copy of a container key of the application container;

lock the application container;

receive a background unlock trigger;

determine whether a background unlock is authorized;

perform the background unlock on at least a portion of the application container using the copy of the container key when the background unlock is authorized, wherein the background unlock enables a type of access that is less than full access to the application container; and

store data in the at least a portion of the application container while the application container is in the background unlock.

9. The device of claim 8 , wherein the processor is further configured to determine the application container is compatible with the background unlock.

10. The device of claim 9 , wherein the processor is further configured to verify a policy for the application container.

11. The device of claim 8 , wherein the processor is further configured to update an authentication time stamp in response to creating the copy of the container key, and wherein the processor being onfigured to determine whether the background unlock is authorized comprises the processor being configured to verify the authentication time stamp is within a particular time period.

12. The device of claim 8 , wherein the background unlock trigger comprises one or more of:

a remote notification; or

a background system operation.

13. The device of claim 8 , wherein the processor is further configured to:

receive a subsequent background unlock trigger;

determine whether the background unlock is authorized; and

perform the background unlock on at least the portion of the application container using the copy of the container key when the background unlock is authorized.

14. The device of claim 8 , wherein the processor is further configured to:

perform a foreground unlock on an application container; and

allow access to the data.

15. A non-transitory computer readable storage medium comprising instructions which when executed by a processor cause the processor to:

perform a foreground unlock on an application container;

create a copy of a container key of the application container;

lock the application container;

receive a background unlock trigger;

determine whether a background unlock is authorized;

perform the background unlock on at least a portion of the application container using the copy of the container key when the background unlock is authorized, wherein the background unlock enables a type of access that is less than full access to the application container; and

store data in the at least a portion of the application container while the application container is in the background unlock.

16. The non-transitory computer readable storage medium of claim 15 , wherein the instructions further cause the processor to determine the application container is compatible with the background unlock.

17. The non-transitory computer readable storage medium of claim 16 , wherein the instructions further cause the processor to verify a policy for the application container.

18. The non-transitory computer readable storage medium of claim 15 , wherein the instructions further cause the processor to update an authentication time stamp in response to creating the copy of the container key, and wherein the instructions causing the processor to determine whether the background unlock is authorized comprises instructions causing the processor to verify the authentication time stamp is within a particular time period.

19. The non-transitory computer readable storage medium of claim 15 , wherein the background unlock trigger comprises one or more of:

a remote notification; or

a background system operation.

20. The non-transitory computer readable storage medium of claim 15 , wherein the instructions further cause the processor to:

receive a subsequent background unlock trigger;

determine whether the background unlock is authorized; and

perform the background unlock on at least the portion of the application container using the copy of the container key when the background unlock is authorized.

21. The non-transitory computer readable storage medium of claim 15 , wherein the instructions further cause the processor to:

perform a foreground unlock on an application container; and

allow access to the data.