US 10,706,171 B2Granted

Method for providing a secure mode for mobile device applications

AssigneeSamsung ElectrôNica Da AmazôNia Ltda.

InventorsBreno Silva Pinto, Felipe Caye Batalha Boeira, Pedro Henrique Minatel, Brunno Frigo Da Purificação

Life of this patent

Estimating the term…

Loading patent…

Abstract

Method for providing a secure mode for mobile applications including: configuring which applications should be available in secure mode; defining in the mobile operating system kernel, rules and privileges for applications defined for the secure mode; checking continuously if the secure mode is enabled by the user; if the security mode is enabled by the user, then the operating system kernel searches all processes and applications running on the operating system, suspend) the system applications not configured to be available in secure mode, hides the protected application, restricts inter-process communications and enforce privilege escalation events and enables access to application files protected by the protected application user Id; and if the security mode is disabled by the user, then the kernel releases all processes and applications that were stopped by the secure mode and denies any access to the protected application files.

Claims8

Dependent claims

A method comprising:

performing, by at least one processor of a mobile apparatus, operations including:
displaying a configuration panel of a secure mode on a display of the mobile apparatus;
receiving, by the displayed configuration panel, a selection of secure applications to be available in the secure mode;
defining, in an operating system kernel of the mobile apparatus, rules and privileges for the selected secure applications available in the secure mode;
and
determining whether the secure mode is enabled or disabled by a user selection of a secure mode icon at a top notification bar of the display of the mobile apparatus;
and
when the secure mode is determined to be enabled by the user selection of the secure mode icon at the top notification bar of the display of the mobile apparatus:
suspending, on the mobile apparatus, all system applications unnecessary to execute the selected secure applications, and applications other than the selected secure applications,
restricting inter-process communications,
enforcing privilege escalation events, and
enabling access by the user to the selected secure applications while isolating the selected secure applications from the suspended unnecessary system applications and applications other than the selected secure applications;
and
when the secure mode is determined to be disabled by the user selection of the secure mode icon at the top notification bar of the display of the mobile apparatus:
releasing all processes and applications suspended in the secure mode, and
denying any access to the selected secure applications.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/167,270Filed 27 May 2016
Priority: BR 10201501527024 Jun 2015
Published: US 2016/0381026 A129 Dec 2016
Granted: 7 Jul 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
G06F 21/74
To assure secure computing or processing of information: operating in dual or compartmented mode, i.e. at least one secure mode
H04W 12/08
Security arrangements; Authentication; Protecting privacy or anonymity: access security