Multi user device management system

Patent metadata

Field	Value
Publication number	US-9571483-B2
Application number	US-201514634451-A
Country	US
Kind code	B2
Filing date	Feb 27, 2015
Priority date	Feb 27, 2015
Publication date	Feb 14, 2017
Grant date	Feb 14, 2017

Abstract

Disclosed is a personal device container system. The personal device container system typically includes a processor, a memory, and an access management module stored in the memory. The personal device container system is typically configured to establish network communication between a personal computing device and a provisioning system that validates the identity of the personal computing device and provides a certificate to the personal computing device. Thereafter, the personal computing device requests access to a secured network segment and provides the certificate to the personal device container system. The personal device container system then authenticates the personal computing device's certificate before allowing the personal computing device to communicate with the secured network segment. User credentials associated with a user are authenticated before user-specific content associated with the user is provided to the personal computing device. Accordingly, a user-specific experience may be provided to different users of the personal computing device.

First claim

What is claimed is:

1. A personal computing device for providing a multi-user experience, the personal computing device comprising:
a processor;
a memory;
a communication interface in communication with an entity network;
a display device;
a device configuration file stored in the memory, the device configuration file comprising one or more device settings;
an access management module stored in the memory, executable by the processor and configured for:
establishing network communication with the entity network;
establishing network communication with a personal computing device management system via the entity network;
providing device identification information associated with the personal computing device to the personal computing device management system;
after providing the device identification information associated with the personal computing device to the personal computing device management system, receiving a certificate from the personal computing device management system and storing the certificate in the memory;
receiving settings from the personal computing device management system and updating the device configuration file based on the settings received from the personal computing device management system;
receiving a command from the personal computing device management system to download an entity application;
based on receiving the command, downloading the entity application and storing the entity application in the memory;
sending a first request to the entity network to connect to a secured network segment in communication with the entity network;
transmitting the certificate to the entity network;
after transmitting the certificate to the entity network, receiving access to the secured network segment;
after receiving access to the secured network segment, sending a second request to the entity network, the second request comprising a request to access the secured network segment via the entity application;
after sending the second request to the entity network, receiving a third request from the entity network to provide user credentials;
after receiving the third request from the entity network to provide user credentials, providing user credentials associated with a first user to the entity network;
after providing the user credentials associated with the first user to the entity network, receiving user-specific content associated with the first user from the secured network segment; and
displaying the user-specific content associated with the first user on the display device using the entity application.

2. The personal computing device according to claim 1 , wherein the access management module is configured for:
providing user credentials associated with a second user to the entity network;
receiving user-specific content associated with a second user; and
displaying the user-specific content associated with the second user on the display device using the entity application.

3. The personal computing device according to claim 1 , wherein the personal computing device management system is configured to (i) validate the device identification information associated with the personal computing device and (ii), if the device identification information associated with the personal computing device is valid, providing the certificate to the personal computing device.

4. The personal computing device according to claim 1 , wherein the personal computing device is a tablet computer.

5. The personal computing device according to claim 1 , wherein:
the entity network comprises a personal device container system;
the personal device container system is configured to establish network communication between the personal computing device and the personal computing device management system.

6. The personal computing device according to claim 5 , wherein the personal device container system is configured to (i) authenticate the certificate transmitted by the personal computing device, (ii) provide the personal computing device access to the secured network segment based on authenticating the certificate transmitted by the personal computing device, and (iii) block network communication between the personal computing device and the secured network segment until the certificate has been authenticated.

7. The personal computing device according to claim 6 , wherein the personal device container system is configured to (i) authenticate the user credentials associated with the first user and (ii), based on authenticating the user credentials associated with the first user, providing the user-specific content associated with the first user to the personal computing device.

8. A computer program product for providing a multi-user experience on a personal computing device having a processor, a memory, a communication interface in communication with an entity network, a display device, a device configuration file stored in the memory comprising one or more device settings, the computer program product comprising a non-transitory computer-readable storage medium having computer-executable instructions for:
establishing network communication with the entity network;
establishing network communication with a personal computing device management system via the entity network;
providing device identification information associated with the personal computing device to the personal computing device management system;
after providing the device identification information associated with the personal computing device to the personal computing device management system, receiving a certificate from the personal computing device management system and storing the certificate in the memory;
receiving settings from the personal computing device management system and updating the device configuration file based on the settings received from the personal computing device management system;
receiving a command from the personal computing device management system to download an entity application;
based on receiving the command, downloading the entity application and storing the entity application in the memory;
sending a first request to the entity network to connect to a secured network segment in communication with the entity network;
transmitting the certificate to the entity network;
after transmitting the certificate to the entity network, receiving access to the secured network segment;
after receiving access to the secured network segment, sending a second request to the entity network, the second request comprising a request to access the secured network segment via the entity application;
after sending the second request to the entity network, receiving a third request from the entity network to provide user credentials;
after receiving the third request from the entity network to provide user credentials, providing user credentials associated with a first user to the entity network;
after providing the user credentials associated with the first user to the entity network, receiving user-specific content associated with the first user from the secured network segment; and
displaying the user-specific content associated with the first user on the display device using the entity application.

9. The computer program product of claim 8 , wherein the non-transitory computer-readable storage medium further having computer-executable instructions for:
providing user credentials associated with a second user to the entity network;
receiving user-specific content associated with a second user; and
displaying the user-specific content associated with the second user on the display device using the entity application.

10. The computer program product of claim 8 , wherein the

Assignees

• Bank Of America

Inventors

• Lee Jisoo
• Smith Brian Joseph
• Frankel Yair
• Scopis James P
• Joseph Eins K
• Goodyear Todd Michael
• Farro Ii Francis George

Classifications

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title