Multiscreen Secure Content Access

Patent metadata

Field	Value
Publication number	US-2016269376-A1
Application number	US-201514643049-A
Country	US
Kind code	A1
Filing date	Mar 10, 2015
Priority date	Mar 10, 2015
Publication date	Sep 15, 2016
Grant date	—

Abstract

Methods and systems for securely accessing content irrespective of the security of the environment in which the content is being accessed are described herein. In some embodiments, a mobile computing device may determine whether secure enterprise content is being accessed on a mobile computing device. In response to determining that a private user device (e.g., virtual reality or augmented reality headwear/eyewear), is communicatively coupled to the mobile computing device, the mobile computing device may prevent the secure content from display on the mobile computing device and instead generate the secure enterprise content for presentation in an unencrypted form on the private user device.

First claim

1 . A method comprising:
determining whether secure enterprise content is being accessed on a mobile computing device; responsive to determining that a private user device is communicatively coupled to the mobile computing device via a network:
preventing the secure enterprise content from being presented in an unencrypted form on the mobile computing device; and
transmitting the secure enterprise content to the private user device via the network to generate the secure enterprise content for presentation in an unencrypted form.

2 . The method of claim 1 , wherein the private user device comprises a head-mounted display device configured to place a display screen in physical proximity to a wearer's eye and visible only to the wearer.

3 . The method of claim 1 , further comprising generating non-secure content for presentation in an unencrypted form on the mobile computing device.

4 . The method of claim 1 , wherein preventing the secure enterprise content from being presented in an unencrypted form further comprises generating the secure enterprise content for presentation in an encrypted form on the mobile computing device.

5 . The method of claim 4 , wherein the secure enterprise content is generated for presentation in an encrypted form in response to:
determining that the mobile computing device is in a public environment; and determining that a secure mode to encrypt secure enterprise content on the mobile computing device has been enabled.

6 . The method of claim 4 , wherein generating the secure enterprise content for presentation in an encrypted form further comprises:
determining which content is to be presented on the mobile computing device; determining which portion of the content to be presented on the mobile computing device comprises the secure enterprise content; and encrypting the portion of the content to be presented that comprises the secure enterprise content.

7 . The method of claim 1 , further comprising:
instructing the private user device to collect authentication information from the user of the private user device; receiving the authentication information from the private user device; and using the authentication information received from the private user device to authenticate the user of the private user device.

8 . The method of claim 1 , wherein instructing the private user device to generate the secure enterprise content for presentation in an unencrypted form comprises:
determining that the user of the private user device has been authenticated; generating the secure enterprise content into an unencrypted presentable form; and transmitting the secure enterprise content to the private user device.

9 . The method of claim 1 , further comprising:
responsive to receiving user input, determining whether any additional content is to be generated for presentation based on the received user input; responsive to determining that additional content is to be generated based on the received user input, determining which portion of the additional content generated for presentation comprises additional secure enterprise content; encrypting the portion of the additional content to be presented that comprises the additional secure enterprise content; and generating the additional secure enterprise content for presentation in an encrypted form on the mobile computing device.

10 . The method of claim 9 , further comprising:
determining that the user of the private user device has been authenticated; generating the additional secure enterprise content into an unencrypted presentable form; and transmitting the additional secure enterprise content to the private user device for presentation in an unencrypted form.

11 . An apparatus comprising:
at least one processor; at least one display screen; and at least one memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to:
determine whether secure enterprise content is being accessed on the apparatus;
responsive to determining that a private user device is communicatively coupled to the apparatus via a network:
prevent the secure enterprise content from being presented in an unencrypted form on the apparatus; and
transmit the secure enterprise content to the private user device via the network to generate the secure enterprise content for presentation in an unencrypted form.

12 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to prevent the secure enterprise content from being presented in an unencrypted form by further causing the apparatus to generate the secure enterprise content for presentation in an encrypted form on the apparatus.

13 . The apparatus of claim 12 , wherein the instructions, when executed by the at least one processor, cause the apparatus to generate the secure enterprise content for presentation in an encrypted form by further causing the apparatus to:
determine that the apparatus is in a public environment; and determine that a secure mode to encrypt secure enterprise content on the apparatus has been enabled.

14 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to generate non-secure content for presentation in an unencrypted form on the apparatus.

15 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to generate the secure enterprise content for presentation in an encrypted form by further causing the apparatus to:
determine which content is to be presented on the apparatus; determine which portion of the content to be presented on the apparatus comprises the secure enterprise content; and encrypt the portion of the content to be presented that comprises the secure enterprise content.

16 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
instruct the private user device to collect authentication information from the user of the private user device; receive the authentication information from the private user device; and use the authentication information received from the private user device to authenticate the user of the private user device.

17 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, cause the apparatus to generate the secure enterprise content for presentation in an unencrypted form on the private user device by further causing the apparatus to:
determine that the user of the private user device has been authenticated; generate the secure enterprise content into an unencrypted presentable form; and transmit the secure enterprise content to the private user device.

18 . The apparatus of claim 11 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
responsive to receiving user input, determine whether any additional content is to be generated for presentation based on the received user input; responsive to determining that additional content is to be generated based on the received user input, determine which portion of the additional content generated for presentation comprises additional secure enterprise content; encrypt the portion of the additional content to be presented that comprises the additional secure enterprise content; and generate the additional secure enterprise content for presentation in an encr

Assignees

• Citrix Systems Inc

Inventors

• Goyal Ashish

Classifications

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• G06F3/14

  Digital output to display device {; Cooperation and interconnection of the display device with other functional units} · CPC title

• G02B2027/014

  comprising information/image processing systems · CPC title

• G02B27/017

  Head mounted · CPC title

• H04W4/023

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title