Multiscreen secure content access

Patent metadata

Field	Value
Publication number	US-9565176-B2
Application number	US-201514643049-A
Country	US
Kind code	B2
Filing date	Mar 10, 2015
Priority date	Mar 10, 2015
Publication date	Feb 7, 2017
Grant date	Feb 7, 2017

Abstract

Methods and systems for securely accessing content irrespective of the security of the environment in which the content is being accessed are described herein. In some embodiments, a mobile computing device may determine whether secure enterprise content is being accessed on a mobile computing device. In response to determining that a private user device (e.g., virtual reality or augmented reality headwear/eyewear), is communicatively coupled to the mobile computing device, the mobile computing device may prevent the secure content from display on the mobile computing device and instead generate the secure enterprise content for presentation in an unencrypted form on the private user device.

First claim

What is claimed is:

1. A method comprising:
receiving, at a mobile computing device, secure enterprise content;
determining, by the mobile computing device, whether the secure enterprise content is being accessed on the mobile computing device;
responsive to determining that the secure enterprise content is being accessed on the mobile computing device:
preventing, by the mobile computing device, the secure enterprise content from being presented in an unencrypted form on the mobile computing device;
encrypting, by the mobile computing device, the secure enterprise content for presentation in an encrypted form on the mobile computing device by:
determining that content is to be presented on the mobile computing device,
determining a portion of the content to be presented on the mobile computing device that comprises the secure enterprise content, and
encrypting the portion of the content to be presented that comprises the secure enterprise content,
wherein the secure enterprise content is encrypted for presentation in the encrypted form in response to:
determining that the mobile computing device is in a public environment, and
determining that a secure mode to encrypt secure enterprise content on the mobile computing device has been enabled;

determining, by the mobile computing device, whether a private user device is communicatively coupled to the mobile computing device; and
responsive to determining that the private user device is communicatively coupled to the mobile computing device, transmitting, by the mobile computing device, the secure enterprise content to the private user device via the network to generate the secure enterprise content for presentation in an unencrypted form on the private user device.

2. The method of claim 1 , wherein the private user device comprises a head-mounted display device configured to place a display screen in physical proximity to a wearer's eye and visible only to the wearer.

3. The method of claim 1 , further comprising generating non-secure content for presentation in an unencrypted form on the mobile computing device.

4. The method of claim 1 , further comprising:
instructing the private user device to collect authentication information from a wearer of the private user device;
receiving the authentication information from the private user device; and
using the authentication information received from the private user device to authenticate the wearer of the private user device.

5. The method of claim 1 , wherein instructing the private user device to generate the secure enterprise content for presentation in an unencrypted form comprises:
determining that a wearer of the private user device has been authenticated;
generating the secure enterprise content into an unencrypted presentable form; and
transmitting the secure enterprise content to the private user device.

6. The method of claim 1 , further comprising:
determining whether any additional content is to be generated for presentation based on a received user input;
responsive to determining that additional content is to be generated based on the received user input, determining which portion of the additional content generated for presentation comprises additional secure enterprise content;
encrypting the portion of the additional content to be presented that comprises the additional secure enterprise content; and
generating the additional secure enterprise content for presentation in an encrypted form on the mobile computing device.

7. The method of claim 6 , further comprising:
determining that a wearer of the private user device has been authenticated;
generating the additional secure enterprise content into an unencrypted presentable form; and
transmitting the additional secure enterprise content to the private user device for presentation in an unencrypted form.

8. The method of claim 1 , wherein the encrypting the secure enterprise content for presentation in an encrypted form on the mobile computing device further comprises:
generating a blank area on a display screen of the mobile device, wherein the blank area is generated on an area of the display screen of the mobile device corresponding to the secure enterprise content.

9. An apparatus comprising:
at least one processor;
at least one display screen; and
at least one memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to:
receive secure enterprise content; determine whether the secure enterprise content is being accessed on the apparatus;
responsive to determining that the secure enterprise content is being accessed on the apparatus:
prevent the secure enterprise content from being presented in an unencrypted form on the apparatus;
encrypt the secure enterprise content for presentation in an encrypted form on the apparatus by:
determining that content is to be presented on the mobile computing device,
determining a portion of the content to be presented on the mobile computing device that comprises the secure enterprise content, and
encrypting the portion of the content to be presented that comprises the secure enterprise content,
wherein the secure enterprise content is encrypted for presentation in the encrypted form in response to:
determining that the mobile computing device is in a public environment, and
determining that a secure mode to encrypt secure enterprise content on the mobile computing device has been enabled;

determine whether a private user device is communicatively coupled to the apparatus; and
responsive to determining that the private user device is communicatively coupled to the apparatus, transmit the secure enterprise content to the private user device via the network to generate the secure enterprise content for presentation in an unencrypted form on the private user device.

10. The apparatus of claim 9 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to generate non-secure content for presentation in an unencrypted form on the apparatus.

11. The apparatus of claim 9 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
instruct the private user device to collect authentication information from a wearer of the private user device;
receive the authentication information from the private user device; and
use the authentication information received from the private user device to authenticate the wearer of the private user device.

12. The apparatus of claim 9 , wherein the instructions, when executed by the at least one processor, cause the apparatus to generate the secure enterprise content for presentation in an unencrypted form on the private user device by further causing the apparatus to:
determine that a wearer of the private user device has been authenticated;
generate the secure enterprise content into an unencrypted presentable form; and
transmit the secure enterprise content to the private user device.

13. The apparatus of claim 9 , wherein the instructions, when executed by the at least one processor, further cause the apparatus to:
determine whether any additional content is to be generated for presentation based on a received user input;
responsive to determining that additional content is to be generated based on the received user input, determine which portion of the additional content generated for presentation comprises additional secure enterprise content;
encrypt the portion of the additional content to be presented that comprises the additional secure enterprise content; and
generate the additional secure e

Assignees

• Citrix Systems Inc

Inventors

• Goyal Ashish

Classifications

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• G02B2027/014

  comprising information/image processing systems · CPC title

• H04W4/023

  using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title