# US 10,120,988 B2 · Managing grouped student devices with timed locks > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,120,988 B2 - Document ID: US10120988B2 - Status: Granted - Kind: B2 - Application number: 15/252,605 - Filed: 2016-08-31 - Published: 2016-12-29 - Granted: 2018-11-06 - Earliest claimed: 2015-06-29 - Assignees: AirWatch LLC - Applicants: AirWatch, LLC - Inventors: Bill DeWeese; Kevin McKeithan - Web page: https://patentgrep.com/patent/US10120988B2 ## CPC - G06F 21/305: {by remotely controlling device operation} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G09B 5/08: providing for individual presentation of information to a plurality of student stations - G09B 5/10: all student stations being capable of presenting the same information simultaneously (G09B5/14 takes precedence) - G09B 5/125: {the stations being mobile} - G09B 5/14: with provision for individual teacher-student communication - H04L 63/104: {Grouping of entities} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04W 12/08: Access security - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - G06F 3/0482: Interaction with lists of selectable items, e.g. menus - G06F 2221/2137: Time limited access, e.g. to a computer or data - G06F 2221/2149: Restricted operating environment - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G09B: EDUCATIONAL OR DEMONSTRATION APPLIANCES; APPLIANCES FOR TEACHING, OR COMMUNICATING WITH, THE BLIND, DEAF OR MUTE; MODELS; PLANETARIA; GLOBES; MAPS; DIAGRAMS (devices for psychotechnics or for testing reaction times A61B5/16; games, sports, amusements A63; projectors, projector screens G03B) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods presented herein can allow a teacher to manage student devices in a classroom setting by grouping student devices on a graphical user interface and using the interface to set locks with respect to the groups of student devices. Lock requests can be received and managed by a server, which can issue file locks, web locks, and application locks. These locks can restrict file access, website access, and application access, respectively, on the students' personal mobile devices. Additionally, the teacher device can allow the teacher to provide timing information in conjunction with the lock requests, which can control when to lock and/or unlock the student devices. ## Claims ### Claim 1 A system for teacher-controlled launching of resources on student devices, including: a teacher device comprising one or more processors and memory; a management server that enforces management services on a plurality of student devices and the teacher device, wherein a management component is installed on the teacher device and a student device of the plurality of student devices by the management server; and wherein the teacher device executes the one or more processors and memory to execute a teacher application that performs stages including: generating a graphical user interface (“GUI”) that lists students in a class associated with the teacher device, wherein the GUI of the teacher device includes a selectable lock profile to apply to student devices, wherein the lock profile automatically updates to new configurations based on upcoming lesson plans; receiving selections, on the GUI, including: a first selection of a student associated with the student device by selecting a student icon on the GUI; a second selection of a managed application for use at the student device by selecting from multiple available applications; and a third selection of a resource for use with the managed application at the student device, wherein the resource is a file or webpage; and sending a message to the management component of the student device, wherein the message includes a whitelist of resources that can be accessed by the student device and causes the management component of the student device to: launch the managed application; apply a lock that prevents the student device from exiting the managed application, wherein the lock allows use of all the resources in the whitelist while the lock is in place; allow access to the resource from within the managed application while the lock is in place; and while the lock is in place, restrict the managed application from accessing other resources presented for selection but unselected at the teacher device as for use with the managed application. ### Claim 2 (depends on 1) The system of claim 1, wherein the first selection includes a group of student devices, wherein separate messages are sent from the teacher device to each of the student devices in the group. ### Claim 3 (depends on 1) The system of claim 1, wherein the resources include at least one document that the student device is allowed to access during a duration of the lock. ### Claim 4 (depends on 1) The system of claim 1, wherein the stages further include a fourth selection of a lock type on the graphical user interface, the lock type being selected from a group that includes an application lock, a file lock, and a web lock. ### Claim 5 (depends on 1) The system of claim 1, wherein the management server sets the management component of the plurality of student devices to accept the lock from the teacher device. ### Claim 6 A method for teacher-controlled launching of resources on student devices, including: installing a management component on a teacher device and a student device by a management server; installing a teacher application on the teacher device, the teacher application performing stages on the teacher device including: generating a graphical user interface (GUI) that displays students in a class associated with the teacher device, wherein the GUI of the teacher device includes a selectable lock profile to apply to student devices, wherein the lock profile automatically updates to new configurations based on upcoming lesson plans; receiving selections, on the GUI graphical user interface, including: a first selection of a student associated with the student device by selecting a student icon on the GUI; a second selection of a managed application for use at the student device by selecting from multiple available applications; and a third selection of a resource for use with the managed application at the student device, wherein the resource is a file or webpage of a student associated with the student device and a resource for use at the student device; and sending a message to the management component of the student device, wherein the message includes a whitelist of resources that can be accessed by the student device and causes the management component of the student device to: run the managed application; apply a lock that prevents the student device from exiting the managed application, wherein the lock allows use of all the resources in the whitelist while the lock is in place; allow access to the resource from within the managed application while the lock is in place; and while the lock is in place, restrict the managed application from accessing other resources presented for selection but unselected at the teacher device as for use with the managed application. ### Claim 7 (depends on 6) The method of claim 6, wherein the first selection implicates a plurality of student devices and separate messages are sent from the teacher device to each of the plurality of student devices. ### Claim 8 (depends on 6) The method of claim 6, wherein the resources include at least one document that the student device is allowed to access during a duration of the lock. ### Claim 9 (depends on 6) The method of claim 6, wherein the stages further include a fourth selection of a lock type on the graphical user interface, the lock type being selected from a group that includes an application lock, a file lock, and a web lock. ### Claim 10 (depends on 6) The method of claim 6, wherein the management server sets the management component of a plurality of student devices to accept the lock from the teacher device. ### Claim 11 A non-transitory, computer-readable medium including instructions that cause a processor to perform stages comprising: installing a management component at a student device, the management component including an application programming interface for controlling functionality at the student device; generating, on a teacher device, a graphical user interface (“GUI”) that displays students in a class associated with the teacher device, wherein the GUI of the teacher device includes a selectable lock profile to apply to student devices, wherein the lock profile automatically updates to new configurations based on upcoming lesson plans; receiving selections on the GUI including: a first selection of a student associated with the student device by selecting a student icon on the GUI; a second selection of a managed application for use at the student device by selecting from multiple available applications; and a third selection of a resource for use with the managed application at the student device, wherein the resource is a file or webpage of a student associated with the student device; and sending a message to the management component of the student device, wherein the message includes a whitelist of resources that can be accessed by the student device and causes the management component of the student device to: launch the managed application; apply a lock that prevents the student device from launching at least one other application; allow access to the resource from within the managed application while the lock is in place; and while the lock is in place, restrict the managed application from accessing other resources that are presented for selection but unselected at the teacher device as for use with the managed application. ### Claim 12 (depends on 11) The non-transitory, computer-readable medium of claim 11, wherein the resources include at least one additional managed application that the student device is allowed to access during a duration of the lock. ### Claim 13 (depends on 12) The non-transitory, computer-readable medium of claim 12, wherein the resources include at least one additional webpage that the student device is allowed to access from within the managed application during a duration of the lock. ### Claim 14 (depends on 6) The method of claim 6, wherein the management component is part of an operating system of the student device, separate from the managed application. ### Claim 15 (depends on 1) The system of claim 1, wherein the management component is part of an operating system of the student device, separate from the managed application.