Configuring context-based restrictions for a computing device

Patent metadata

Field	Value
Publication number	US-11468197-B2
Application number	US-202016862313-A
Country	US
Kind code	B2
Filing date	Apr 29, 2020
Priority date	May 6, 2019
Publication date	Oct 11, 2022
Grant date	Oct 11, 2022

Abstract

In some implementations, a computing device can restrict the use of another computing device in certain contexts. For example, a parent may wish to use the parent's computing device to restrict her children's use of the children's computing devices while the children are in school while the children should be participating in some other activity. For example, the parent's controller device may be enabled to remotely configure and control the usage of the satellite device(s) without needing to physically access the satellite device. The parent may implement limitations, permissions, or different policies that may govern, for example, the ability of the satellite device to communicate with other devices, execute various application functionalities, run any particular software, and manage its own settings.

First claim

What is claimed is:

1. A method comprising:
receiving, by a satellite device associated with a first user, a first message including a first configuration for a restricted mode of the satellite device from a controller device, the first configuration defined by a second user of the controller device and specifying a time period during which the restricted mode will be enabled and identifying one or more first features of the satellite device that will be disabled during the restricted mode, wherein the first configuration is encrypted such that only the controller device and the satellite device can access the first configuration;
identifying, based on the first message, a first account identifier associated with the controller device;
determining that the first account identifier is a member of a trusted group of account identifiers;
based on a determination that the first account identifier is in the trusted group: configuring the satellite device to enable the restricted mode on the satellite device at the time period defined by the first configuration;
determining, by the satellite device, that a first current time is within the time period defined by the first configuration;
based on a determination that the first current time is within the time period, automatically enabling the restricted mode on the satellite device, including preventing the first user from accessing the one or more first features identified in the first configuration; and
while in the restricted mode, providing, by the satellite device, the first user access to one or more second features of the satellite device that are different than the one or more first features identified in the first configuration.

2. The method of claim 1 , further comprising:
determining, by the satellite device, that a second current time is outside of the time period defined by the first configuration; and
based on a determination that the second current time is outside of the time period, automatically disabling the restricted mode on the satellite device, including allowing the first user to access the one or more first features identified in the first configuration,
wherein the satellite device is associated with a second first account identifier, and wherein the second account identifier is a member of the trusted group of account identifiers.

3. The method of claim 1 , further comprising:
receiving, from a third device operated by a third user, a second message including a second configuration for the restricted mode;
determining that a third account identifier associated with the third device is not a member of the trusted group;
identifying, from the second message, a configuration authorization provided for the third account identifier by the controller device, the controller device being associated with the second account identifier that is a member of the trusted group; and
based on a determination that the controller device provided the configuration authorization for the third account identifier, automatically configuring the restricted mode on the satellite device based on the second configuration.

4. The method of claim 1 , further comprising:
while in the restricted mode:
presenting, by the satellite device, a mode exit control for disabling the restricted mode;
receiving user input selecting the mode exit control;
displaying a mode exit presentation that requires the first user to conspicuously interact with the mode exit presentation for a first period of time;
receiving conspicuous user interactions from the first user for the first period of time; and
at a conclusion of the first period of time, allowing the first user to access the one or more first features identified in the first configuration.

5. The method of claim 4 , further comprising transmitting an exit notification to the controller device in response to exiting the restricted mode on the satellite device, the exit notification configured to inform the second user of the controller device that the satellite device has exited the restricted mode.

6. The method of claim 4 , further comprising presenting, by the satellite device, a prompt indicating that the controller device will be notified when the satellite device exits the restricted mode.

7. The method of claim 4 , further comprising:
determining, by the satellite device at a first time, that the satellite device cannot establish a connection with the controller device;
storing a restricted mode exit notification on the satellite device;
determining, by the satellite device at a second time, that the satellite device has established a connection with the controller device; and
sending, by the satellite device, the stored restricted mode exit notification to the controller device.

8. A non-transitory computer readable medium storing a program for execution by at least one processor of a device, the program comprising sets of instructions for:
receiving, by a satellite device associated with a first user, a first message including a first configuration for a restricted mode of the satellite device from a controller device, the first configuration defined by a second user of the controller device and specifying a time period during which the restricted mode will be enabled and identifying one or more first features of the satellite device that will be disabled during the restricted mode, wherein the first configuration is encrypted such that only the controller device and the satellite device can access the first configuration;
identifying, based on the first message, a second account identifier associated with the controller device, wherein the second account identifier is not a member of a trusted group of account identifiers;
determining that the first message includes a configuration authorization provided for the second account identifier by a device associated with a first account identifier that is a member of the trusted group;
based on a determination that the first message includes the configuration authorization provided for the second account identifier: configuring the satellite device to enable the restricted mode on the satellite device at the time period defined by the first configuration;
determining, by the satellite device, that a first current time is within the time period defined by the first configuration;
based on a determination that the first current time is within the time period, automatically enabling the restricted mode on the satellite device, including preventing the first user from accessing the one or more first features identified in the first configuration; and
while in the restricted mode, providing, by the satellite device, the first user access to one or more second features of the satellite device that are different than the one or more first features identified in the first configuration.

9. The non-transitory computer readable medium of claim 8 ,
wherein the program further comprises sets of instructions for:
receiving, from a third device operated by a third user, a second message including a second configuration for the restricted mode;
identifying, based on the second message, a third account identifier associated with the third device;
determining that the third account identifier is a member of the trusted group; and
based on a determination that the third account identifier is in the trusted group, configuring the satellite device to enable the restricted mode on the satellite device in accordance with the second configuration.

10. The non-transitory computer readable medium of claim 8 ,
wherein the program further comprises sets of instructions for:
determining, by the satellite device, that a second current time is outside of the time per

Assignees

• Apple Inc

Inventors

• Salzman Paul W
• Skogen Christopher G
• Clark David S
• Hawkins Tyler D

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/104

  Grouping of entities · CPC title

• H04L63/108 Primary

  when the policy decisions are valid for a limited amount of time · CPC title