Patent Application
20140181964
This application claims the benefit under 35 U.S.C. §119(a) of a Korean patent application filed on Dec. 24, 2012 in the Korean Intellectual Property Office and assigned Serial No. 10-2012-0152352, the entire disclosure of which is hereby incorporated by reference.
The present disclosure relates to security management of applications in an electronic device.
An electronic device adopting a touch-screen panel such as smart phone turns off its screen when a certain time passes, in order to prevent an intended touch input and battery consumption caused by unnecessary screen display and to ensure security. To use the electronic device again, a user needs to unlock the screen in a particular manner.
The screen can be unlocked in various fashions such as dragging, touch motion, face recognition, voice recognition, swipe pattern, Personal Identification Number (PIN), or a password based on a security level. The electronic device typically allows no function unless the screen is unlocked. That is, the screen lock disables the whole electronic device regardless of whether an application is used frequently or is a low-security function.
After unlocking the screen, the screen may again turn off and lock after a certain time passes, even though the user is still using the electronic device. To use the electronic device again, the user needs to unlock the screen. When the security function of the screen lock is removed to reduce the occurrence of repeated screen unlocking, the electronic device's security is compromised. That is, the security and the convenience are contradictory.
In one possible solution, the user could adjust the security level in some cases. That is, the user could deactivate the security function when frequently using the electronic device, and activate the security function when not frequently using the electronic device. However, changing the security level would require complicated manipulation and setup of the electronic device. As a result, there is a greater inconvenience is for the user who wants to flexibly change the security level of the electronic device according to an application use pattern.
The above information is presented as background information only to assist with an understanding of the present disclosure. No determination has been made, and no assertion is made, as to whether any of the above might be applicable as prior art with regard to the present disclosure.
Aspects of the present disclosure are to address at least the above-mentioned problems and/or disadvantages and to provide at least the advantages described below. Accordingly, an aspect of the present disclosure is to provide an apparatus and a method for easily changing a security level in an electronic device.
Another aspect of the present disclosure is to provide an apparatus and a method for differently setting a security level per application in an electronic device.
Yet another aspect of the present disclosure is to provide an apparatus and a method for providing a security region and a non-security region in an electronic device.
In accordance with an aspect of the present disclosure, an method of an electronic device is provided. The method includes displaying an icon of an application having a first security level in a first region which occupies part of an interface, and displaying an icon of an application having a second security level in a second region which occupies an exclusive part of the first region. The first security level requires lock release for execution, and the second security level does not require the lock release for the execution.
In accordance with another aspect of the present disclosure, an electronic device is provided. The electronic device includes a processor configured to control display of an icon of an application having a first security level in a first region which occupies part of an interface and display of an icon of an application having a second security level in a second region which occupies an exclusive part of the first region, and a display configured to display an interface divided into the first region and the second region under control of the at least one processor. The first security level requires lock release for execution, and the second security level does not require the lock release for the execution.
In accordance with yet another aspect of the present disclosure, an electronic device is provided. The electronic device includes at least one processor, a display configured to display an interface under control of the at least one processor, and a memory configured to store at least one software module implemented for execution by the at least one processor. The software module includes at least one instruction for controlling to display an icon of an application having a first security level in a first region which occupies part of an interface and to display an icon of an application having a second security level in a second region which occupies an exclusive part of the first region, the first security level requires lock release for execution, and the second security level does not require the lock release for the execution.
Other aspects, advantages, and salient features of the disclosure will become apparent to those skilled in the art from the following detailed description, which, taken in conjunction with the annexed drawings, discloses various embodiments of the present disclosure.
The above and other aspects, features, and advantages of certain embodiments of the present disclosure will be more apparent from the following description taken in conjunction with the accompanying drawings, in which:
Throughout the drawings, like reference numerals will be understood to refer to like parts, components and structures.
The following description with reference to the accompanying drawings is provided to assist in a comprehensive understanding of various embodiments of the present disclosure as defined by the claims and their equivalents. It includes various specific details to assist in that understanding but these are to be regarded as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the various embodiments described herein can be made without departing from the scope and spirit of the present disclosure. In addition, descriptions of well-known functions and constructions may be omitted for clarity and conciseness.
The terms and words used in the following description and claims are not limited to the bibliographical meanings, but, are merely used by the inventor to enable a clear and consistent understanding of the present disclosure. Accordingly, it should be apparent to those skilled in the art that the following description of various embodiments of the present disclosure is provided for illustration purpose only and not for the purpose of limiting the present disclosure as defined by the appended claims and their equivalents.
It is to be understood that the singular forms “a,” “an,” and “the” include plural referents unless the context clearly dictates otherwise. Thus, for example, reference to “a component surface” includes reference to one or more of such surfaces.
By the term “substantially” it is meant that the recited characteristic, parameter, or value need not be achieved exactly, but that deviations or variations, including for example, tolerances, measurement error, measurement accuracy limitations and other factors known to those of skill in the art, may occur in amounts that do not preclude the effect the characteristic was intended to provide.
Various embodiments of the present disclosure provide a technique for managing security of applications in an electronic device. The present disclosure relates to variable security levels based on application use patterns. As multiple functions continue to converge into one electronic device such as smart phone, the number of applications installed on one device is considerable. However, the applications that are most frequently used by a user are limited. Those applications frequently used may be given low security or high security; however, it is difficult to flexibly change a security function applied to the whole electronic device, per application. The present disclosure provides a technique for applying a security function to the device and flexibly adjusting a security level using a simple manipulation according to a use pattern of the applications frequently used.
Those of ordinary skill in the art will understand that an “electronic device” contemplates a portable electronic device such as smart phone, portable terminal, mobile phone, mobile pad, media player, tablet computer, handheld computer, or Personal Digital Assistant (PDA). The electronic device may be a device combining two or more functions of those devices. Of course, the “electronic device” may also contemplate future generations of like devices.
Significant problems contemplated by embodiments of the present disclosure include instances where maximizing security and convenience are at odds.
For example, to use the electronic device of the activated security function, a user turns on a screen by pressing a hard key and releases the lock. The user plays a music file (e.g., MP3). To use the electronic device again after some time, the user needs to release the lock again.
In another example, to use the electronic device of the activated security function, the user turns on the screen by pressing the hard key and releases the lock. When sending a message and receiving a reply through a chatting program, the user needs to release the lock to see the reply. In addition, to send a reply, the user needs to release the lock again.
In still another example, to use the electronic device of the activated security function, the user may turn on the screen by pressing the hard key and releases the lock. When the user accesses the Internet and then enters a shadow area (e.g., elevator), the access is disconnected. Next, to open an Internet page out of the shadow area, the user needs to release the lock again.
In yet another example, the user creates a memo in a memo application to be used in a few minutes. Next, every time the user wants to see the memo, he/she needs to release the lock.
In another example, the user makes a note using the electronic device during class. Every time the user wants to make a note in the middle of the class, he/she needs to release the lock.
As such, the present disclosure provides the security management method for addressing the problem of maintaining both security and convenience.
Various embodiments consistent with the present disclosure are directed at an electronic device having its screen divided into a security region and a non-security region. The security region occupies part of the screen, and the non-security region occupies another part of the screen. That is, the security region and the non-security region do not overlap with each other.
Referring to
As above, the security region and the non-security region can be divided according to an infinite setup, a user's touch screen or a user's touch screen use pattern analysis. For example, the regions can be divided in a predesigned pattern of the electronic device. For example, the electronic device can suggest a plurality of predesigned division patterns in a setup menu to determine a division pattern to apply according to a user's selection. Based on the touch screen use pattern analysis, the electronic device can allocate a screen region mostly used by the user as the non-security region. The screen region mostly used can be identified based on touch input distribution and touch count statistics.
A lock interface including the security region and the non-security region is displayed when the screen is turned on by pressing the hard key. The lock interface including the security region and the non-security region is shown in
When the security function is deactivated and the screen is turned on by pressing the hard key, a main menu can be displayed instead of the lock interface including the security region and the non-security region. Even when the security function is activated, the lock interface of
The lock interface of
When the security region and the non-security region are divided as above, the application is executed as follows.
Referring to
Referring to
As such, the icons of the applications belong to the security region or the non-security region according to the set security/non-security. Accordingly, when a particular security application is temporarily changed to the non-security application for a certain time, two switches between the security and the non-security are required before and after the use in a security setup menu. To address this issue, the electronic device supports a temporary region movement. The temporary region movement is described now.
Referring to
Referring to
The temporary region movement of the icon is possible as shown in
The necessity to manage the icon after the temporary region movement grows when the icon is moved from the security region to the non-security region. When the icon in the non-security region is moved to the security-region, the security is not affected. Accordingly, the icon management after the temporary region movement can be applied only when the icon is moved from the security region to the non-security region. Yet, the icon management after the temporary region movement can be applied regardless of a temporary region movement direction.
An application can combine a plurality of functions. For example, a chatting application can include a photo reading and sending application as a sub-application. It may be important to determine whether to manage the security based on the higher (upper level) application or the lower application.
When the security levels of the higher application and the lower application are different, various embodiments consistent with the present disclosure manage the security as differently. When the higher application is executed without the lock release in the non-security region and the lower application is executed in the security region, the electronic device requires the lock release. By contrast, when the higher application is executed after the lock release in the security region, the electronic device executes the lower application in the security region without the lock release because the user is already authorized to use it. Further, when the lower application is in the non-security region, the electronic device executes the lower application regardless of the lock release.
Alternatively, the security level of the lower application can depend on the security level of the higher application. That is, when the higher application is in the non-security region, the lower application can be executed without the lock release regardless of the security level of the lower application.
When the smart access lock mode is entered and the hard key is pressed with the screen turned off, the lock interface including the security region and the non-security region is displayed. Hence, it is necessary to enter the main menu.
Referring to
Referring to
Now, operations and structure of the electronic device for managing the security as state above are elucidated by referring to the drawings.
Referring to
In the smart access lock mode, the electronic device classifies the icons for the security region and the non-security region in operation 903. The security region and the non-security region are classified according to the setup, and the setup can be determined by the user's selection or certain conditional expressions.
In operation 905, the electronic device selects the lock release type. That is, the electronic device can support a plurality of lock release types. For example, the lock release types can include the drag, the motion, the face recognition, the voice recognition, the pattern, the PIN, and the password. The electronic device supports the lock release type according to the user's selection. Notably, when the electronic device supports only one lock release type, operation 905 can be omitted.
Out of the smart access lock mode in operation 901, the electronic device determines whether the security function is activated in operation 907. That is, the electronic device determines to conform to a different security management system and whether to activate the security function.
When the security function is not activated, the electronic device operates in a non-security mode in operation 909. That is, the electronic device allows execution of every application without the lock release. Namely, the electronic device operates without the lock interface. By contrast, when the security function is activated, the electronic device selects a lock release type in operation 905 and requires the lock release for every application execution.
The method described above in relation with
Referring to
In operation 1003, an electronic device displays an icon of an application of a second security level in a second region. The second level indicates a security level requiring no lock release for the execution. The second region indicates the non-security region and occupies the exclusive part of the first region.
The method described above in relation with
Referring to
When the non-security application execute command is generated, the electronic device runs the corresponding application without the lock release in operation 1103. That is, the electronic device executes the application corresponding to the pressed-and-released icon. In so doing, the electronic device does not require the lock release.
In operation 1105, the electronic device determines whether an application exit command takes place. For example, the exit command can be a back button or a home button.
When the exit command is entered, the electronic device displays the interface divided into the security region and the non-security region in operation 1107. That is, the electronic device returns to the status before the execute command of the non-security application at operation 1101. Alternatively, the electronic device can display the interface requiring the lock release. When the lock is released, the electronic device can display the main menu.
The method described above in relation with
Referring to
When the security application execute command is entered, the electronic device displays the interface requiring the lock release in operation 1203. That is, before executing the application corresponding to the pressed-and-released icon, the electronic device requires the lock release. For example, the interface requiring the lock release is shown in
In operation 1205, the electronic device determines whether the lock is released. For example, in case of the PIN input or the password input, the electronic device determines whether the correct PIN or password is input. As for the pattern input, the electronic device determines whether the same pattern as a preset pattern is input. The determination of the lock release can vary according to the lock release type.
When the lock is released, the electronic device executes the corresponding application in operation 1207. That is, the electronic device executes the application corresponding to the pressed-and-released icon.
In operation 1209, the electronic device determines whether an application exit command is entered. For example, the execute command can press the back button or the home button.
When the exit command executes, the electronic device displays the main menu in operation 1211. To confirm the lock release and the use authority in operation 1205, the electronic device displays the main interface. Alternatively, the electronic device can display the lock interface divided into the security region and the non-security region. That is, the electronic device can return to the status before the execute command of the security application at operation 1201.
The method described above in relation with
Referring to
When the command for moving the icon from the security region to the non-security region is executed, the electronic device displays the interface requiring the lock release in operation 1303. That is, before executing the application corresponding to the pressed-and-released icon, the electronic device requires the lock release. For example, the interface requiring the lock release is shown in
In operation 1305, the electronic device determines whether the lock is released. For example, as for a PIN input or a password input, the electronic device determines whether a correct PIN or password is input. As for the pattern input, the electronic device determines whether the same pattern as a preset pattern is input. The determination of the lock release can vary according to the lock release type.
When the lock is not released, that is, when the user's input does not match a preset password or pattern, the electronic device puts the icon back into the security region in operation 1307. Thus, the application corresponding to the icon is managed as the security application and requires the lock release for its execution.
When the lock is released, that is, when the user's input matches a preset password or pattern, the electronic device temporarily moves the icon to the non-security region in operation 1309. Thus, the application corresponding to the icon is managed as the non-security application and requires no lock release for its execution.
Although it is not depicted in
The method described above in relation with
Referring to
When the command for moving the icon from the non-security region to the security region is generated, the electronic device temporarily moves the icon to the security region in operation 1403. In so doing, the electronic device does not require the lock release. Thus, the application corresponding to the icon is managed as the security application and requires no lock release for its execution.
Although it is not depicted in
The method described above in relation with
Referring to
The memory 1510 can be connected to a memory interface 1521. The memory 1510 may include at least one of a fast Random Access Memory (RAM) or a non-volatile memory, at least one optical storage, and a flash memory (e.g., NAND and NOR). The memory 1510 stores at least one software component. Software components may include an operating system module 1511, a graphics module 1512, a User Interface (UI) module 1513, and a security management module 1514. The module being the software component can be represented as a set of instructions, and may be referred to as an instruction set or a program.
The operating system module 1511 may include at least one software component for controlling general system operations. For example, an operating system module 1511 can be an embedded operating system such as WINDOWS, LINUX, Darwin, RTXC, UNIX, OS X, and VxWorks. For example, the general system operation control includes memory management and control, storage hardware control and management, and power control and management. The operating system module 1511 may enable communication between at least one hardware component and at least one software component. The graphics module 1512 includes at least one software component for providing and displaying graphics on a touch screen 1533. Herein, the graphics may include a text, a web page, an icon, a digital image, a video, an animation, and so on. The UI module 1513 includes at least one software component relating to the UI. Data about the UI is involved in the status change of the UI and the condition of the UI status change.
The security management module 1514 includes at least one software component for managing the security per application. In other words, the security management module 1514 includes the software component for classifying the applications to the security application and the non-security application and selecting the lock release type. The security management module 1514 includes the software component for creating the lock interface divided into the security region and the non-security region, running the applications of the security region or the non-security region according to a user-defined or pre-programmed procedure, and moving the applications between the security region and the non-security region. For example, the security management module 1514 can operate the electronic device as shown in
The memory 1510 can include additional modules besides the above-stated modules 1511 and 1514. Alternatively, some of the modules 1511 through 1514 may be omitted.
The processor unit 1520 may include the memory interface 1521, a processor 1522, and a peripheral interface 1523. The processor 1522 may include at least one hardware chip. The processor unit 1520, in part or in whole, may be referred to as a processor. The memory interface 1521, the processor 1522, and the peripheral interface 1523 can be separate components or integrated into at least one integrated circuit.
The processor 1522 may control the electronic device to conduct the function corresponding to the software program by executing the software program, and processing and controlling voice communication and data communication. The processor 1522 may execute the software module stored in the memory 1510 and conduct particular functions corresponding to the modules. The processor 1522 enables the methods consistent with embodiments of the present disclosure that can be stored in the memory 1510. The processor 1522 can include at least one data processor and image processor. The data processor and the image processor can be separate or combined hardware. The processor 1522 can include a plurality of processors for different functions.
The peripheral interface 1523 interconnects the TO subsystem 1530 and at least one peripheral of the electronic device with the processor 1521 and the memory 1110. The memory 1510 can be connected through the memory interface 1521. That is, the memory interface 1521 provides an interface for accessing the memory 1510.
The TO subsystem 1530 can include a touch screen controller 1531, another input controller 1532, a touch screen 1533, and other input/control devices 1534. The touch screen controller 1531 may be coupled to the touch screen 1533. The touch screen 1533 and the touch screen controller 1531 can detect the contact, the motion, and the absence of motion using, but not limited to, capacitive, resistive, infrared and surface sound wave techniques for determining one or more contact points on the touch screen 1533 and a multi-touch detection technique including various proximity sensor arrays or other elements. The other input controller 1532 can be coupled to the other input/control devices 1534. The other input/control devices 1534 can include one or more up/down buttons for controlling the volume. The button can employ a push button, a rocker button, a rocker switch, a thumb wheel, a dial, a stick, or a pointer device such as stylus.
The touch screen 1533 provides the I/O interface between the electronic device and the user. That is, the touch screen 1533 forwards a user's touch input to the electronic device. The touch screen 1533 is a medium for showing the output of the electronic device to the user. Hence, the touch screen 1533 can be referred to as a display part. That is, the touch screen 1533 shows a visual output to the user. The visual output is represented as text, graphic, video, or a combination of thereof. The touch screen 1533 can employ various display means. For example, the touch screen 1533 may include at least one of, but is not limited to, a Liquid Crystal Display (LCD), a Light Emitting Diode (LED), a Light emitting Polymer Display (LPD), an Organic LED (OLED), an Active Matrix OLED (AMOLED) or a Flexible LED (FLED).
The various functions of the electronic device can be executed by hardware, software, or their combination including at least one stream processing and/or Application Specific Integrated Circuits (ASICs).
Referring to
The memory 1610 may be connected to a memory interface 1621. The memory 1610 may include at least one of a fast random access memory such as a magnetic disc storage, a non-volatile memory, at least one optical storage, and a flash memory (e.g., NAND and NOR). The memory 1610 may store at least one software component. Software components may include an operating system module 1611, a graphics module 1612, and a UI module 1613. Thus, the module being the software component may be represented as a set of instructions, and may be referred to as the instruction set or the program.
The operating system module 1611 includes at least one software component for controlling the general system operations. For example, the operating system module 1611 can be an embedded operating system such as WINDOWS, LINUX, Darwin, RTXC, UNIX, OS X, and VxWorks. For example, the general system operation control includes memory management and control, storage hardware control and management, and power control and management. The operating system module 1611 enables normal communication between at least one hardware and at least one software component. The graphics module 1612 includes at least one software component for providing and displaying graphics on a touch screen 1633. The graphics may include a text, a web page, an icon, a digital image, a video, an animation, and so on. The UI module 1613 includes at least one software component relating to the UI. Data about the UI is involved in the status change of the UI and the condition of the UI status change.
The memory 1610 can include an additional module besides the above-stated modules 1611 through 1613. Alternatively, some of the modules 1611 through 1613 may be omitted.
The processor unit 1620 includes the memory interface 1621, a processor 1622, a peripheral interface 1623, and a security management processor 1624. The processor 1622 can include at least one hardware chip. The whole processor unit 1620 can be referred to as a processor. The memory interface 1621, the processor 1622, and the peripheral interface 1623 can be separate components or integrated onto at least one integrated circuit.
The processor 1622 controls the electronic device to conduct the function corresponding to the software program by running the software program, and processes and controls voice communication and data communication. The processor 1622 executes the software module stored in the memory 1610 and conducts a particular function corresponding to the module. That is, the processor 1622 fulfills the present method in association with the software modules stored in the memory 1610. The processor 1622 can include at least one data processor and image processor. The data processor and the image processor can be separate hardware. The processor 1622 can include a plurality of processors for different functions.
The peripheral interface 1623 interconnects the IO subsystem 1630 and at least one peripheral of the electronic device with the processor 1621 and the memory 1610. The memory 1610 can be connected through the memory interface 1621. That is, the memory interface 1621 provides an interface for accessing the memory 1610.
The security management processor 1624 manages the security per application. More specifically, the security management processor 1624 classifies the applications to the security application and the non-security application and selects the lock release type. The security management processor 1624 creates the lock interface divided to the security region and the non-security region, runs the applications of the security region or the non-security region according to a defined procedure, and moves the applications between the security region and the non-security region. For example, the security management processor 1624 controls the electronic device to operate as shown in
The IO subsystem 1630 can include a touch screen controller 1631, other input controller 1632, a touch screen 1633, and other input/control device 1634. The touch screen controller 1631 can be coupled to the touch screen 1633. The touch screen 1633 and the touch screen controller 1631 can detect the contact, the motion, or absence of motion, but not limited to, capacitive, resistive, infrared and surface sound wave techniques for determining one or more contact points on the touch screen 1633 and a multi-touch detection technique including various proximity sensor arrays or other elements. The other input controller 1632 can be coupled to the other input/control devices 1634. The other input/control devices 1634 can include at least one up/down button for controlling the volume. The button can employ a push button, a rocker button, a rocker switch, a thumb wheel, a dial, a stick, or a pointer device such as stylus.
The touch screen 1633 provides the I/O interface between the electronic device and the user. That is, the touch screen 1633 forwards a user's touch input to the electronic device. The touch screen 1633 is the medium for showing the output of the electronic device to the user. Accordingly, the touch screen 1633 can be referred as a display part. That is, the touch screen 1633 shows the visual output to the user. The visual output is represented as text, graphic, video, and a combination of them. The touch screen 1633 can employ various display means. For example, the touch screen 1633 can include at least one of, but not limited to, the LCD, the LED, the LPD, the OLED, the AMOLED or the FLED.
The various functions of the electronic device can be executed by hardware, software, or their combination including at least one stream processing and/or ASICs.
The methods as described in the claims and/or the specification of the present disclosure can be implemented using hardware, software, or a combination of them.
As for the software, a computer-readable storage medium containing one or more programs (software modules) can be provided. One or more programs stored in the computer-readable storage medium are configured for execution by one or more processors of the electronic device. One or more programs include instructions for controlling the electronic device to execute the methods according to the various embodiments as described in the claims and/or the specification of the present disclosure.
Such a program (software module, software) can be stored to a random access memory, a non-volatile memory including a flash memory, a Read Only Memory (ROM), an Electrically Erasable Programmable ROM (EEPROM), a magnetic disc storage device, a Compact Disc (CD)-ROM, Digital Versatile Discs (DVDs) or other optical storage devices, and a magnetic cassette. Alternatively, the programs can be stored to a memory combining part or all of those recording media. A plurality of memories may be equipped.
The programs can be stored in an attachable storage device accessible via a communication network such as Internet, Intranet, Local Area Network (LAN), Wide LAN (WLAN), or Storage Area Network (SAN), or a communication network by combining these networks. The storage device can access the present electronic device through an external port. A separate storage device may access the present electronic device over a communication network.
As set forth above, the electronic device such as smart phone applies the different security levels to the security region and the non-security region and allows the user to set the security region and the non-security region, thus providing the adequate security management function for the user use pattern. Further, the electronic device allows the temporary change of the application security level so that the user can flexibly control the security according to the situation.
While the present disclosure has been shown and described with reference to various embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present disclosure as defined by the appended claims and their equivalents.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2012-0152352 | Dec 2012 | KR | national |
