Mobile Device Locking based on Context

Abstract

A method and system for locking a mobile device on an interface are described. A user logs on to a mobile device with a user name. The mobile device then determines a context for the mobile device based on one or more operational parameters and/or the user name. For example, a context for the mobile device may be a current location of the device. Based on the context and user name, the mobile device may run in locked mode. In locked mode, applications are selected to be presented on the mobile device based on the user name and context. The mobile device is locked on a springboard that presents only the selected applications to the user for launching. A user may switch between launched applications on the mobile device, but the user may only switch between launched applications that are presented on the springboard.

What is claimed is: 
     
         1 . A method comprising:
 receiving a user name to log onto a mobile device;   determining, based on a mobile device context and the user name, whether the mobile device is to operate in a managed mode;   when the mobile device is operating in the managed mode:
 selecting, based on a mobile device context and a user name, one or more applications available in the managed mode; 
 displaying a restricted user interface that presents and enables access to only the selected one or more applications; and 
 restricting access to only the selected one or more applications while the device is operating in the managed mode, 
   wherein the user name is associated with one of a plurality of roles such that a first group of one or more applications is selected for presentation when the user name is associated with a first role and a second group of one or more applications is selected for presentation when the user name is associated with a second role.   
     
     
         2 . The method of  claim 1 , wherein the context is determined by analyzing a location for the mobile device, wherein when the location is on a company premises, the mobile device is determined to run in the managed mode. 
     
     
         3 . The method of  claim 1 , wherein the context is determined by analyzing one or more network connections for the mobile device, wherein when the mobile device is connected to a network associated with an enterprise that administers the managed mode, the mobile device is determined to run in the managed mode. 
     
     
         4 . The method of  claim 1 , wherein the context is determined by analyzing a current time, wherein when the current time is determined to be working hours associated with an enterprise that administers the managed made, the mobile device is determined to run in the managed mode. 
     
     
         5 . The method of  claim 1 , wherein the plurality of roles are organized in a hierarchy, and wherein a first role inherits one or more applications from a lower ranked second role in the hierarchy. 
     
     
         6 . The method of  claim 1 , wherein the selected one or more applications comprise a plurality of applications selected based on a category. 
     
     
         7 . The method of  claim 6 , wherein the category is based on the role for the user name. 
     
     
         8 . The method of  claim 1 , further comprising:
 monitoring, while one or more applications of the selected one or more applications is running, for an updated context for the mobile device; and   switching an operating mode of the mobile device from the managed mode to an unlocked mode based on the updated context.   
     
     
         9 . The method of  claim 8 , wherein the updated context for the mobile device comprises the mobile device leaving a company premises, and wherein the switching the operating mode of the mobile device comprises in response to the mobile device leaving the company premises, switching the operating mode of the mobile device from the managed mode to the unlocked mode. 
     
     
         10 . The method of  claim 1 , wherein selecting one or more applications comprises selecting, based on the context and the user name, a plurality of applications to present to the user in the managed lock mode, and
 wherein the method further comprises:   receiving, from the user via the restricted user interface, selections of at least two applications of the plurality of applications presented on the restricted user interface;   in response to the selections, launching the at least two applications;   receiving a predetermined gesture to switch between launched applications, wherein the mobile device only allows switching between launched applications that are presented on the restricted user interface.   
     
     
         11 . A mobile computing device comprising:
 a processor, and   memory storing instructions that, when executed by the processor, configure the mobile computing device to perform:   receiving a user name to log onto a mobile device;   determining, based on a mobile device context and the user name, whether the mobile device is to operate in a managed mode;   when the mobile device is operating in the managed mode:
 selecting, based on a mobile device context and a user name, one or more applications available in the managed mode; 
 displaying a restricted user interface that presents and enables access to only the selected one or more applications; and 
 restricting access to only the selected one or more applications while the device is operating in the managed mode, 
   wherein the user name is associated with one of a plurality of roles such that a first group of one or more applications is selected for presentation when the user name is associated with a first role and a second group of one or more applications is selected for presentation when the user name is associated with a second role.   
     
     
         12 . The device of  claim 11 , wherein the context is determined by analyzing a location for the mobile device, wherein when the location is on a predetermined company premises, the mobile device is determined to run in managed mode. 
     
     
         13 . The device of  claim 11 , wherein the context is determined by analyzing one or more network connections for the mobile device, wherein when the mobile device is connected to a predetermined network, the mobile device is determined to run in the managed mode. 
     
     
         14 . The device of  claim 11 , wherein the context is determined by analyzing a current time, wherein when the current time is determined to be working hours associated with an enterprise that administers the managed made, the mobile device is determined to run in the managed mode. 
     
     
         15 . The device of  claim 11 , wherein selecting one or more applications comprises:
 selecting, based on the context and the user name, a plurality of applications to present to the user in the managed mode, and   wherein the instructions further configured the device to perform:   receiving, from the user via the restricted user interface, selections of at least two applications of the plurality of applications presented on the restricted user interface;   in response to the selections, launch the at least two applications; and   receive a predetermined gesture to switch between launched applications, wherein the mobile device only allows switching between launched applications that are presented on the restricted user interface.   
     
     
         16 . The device of  claim 11 , wherein the plurality of roles are organized in a hierarchy, and wherein a first role inherits one or more applications from a lower ranked second role in the hierarchy. 
     
     
         17 . The device of  claim 11 , wherein the selected one or more applications comprise a plurality of applications associated with a common category. 
     
     
         18 . The device of  claim 17 , wherein the category is based on a role for the user name. 
     
     
         19 . The device of  claim 11 , wherein the instructions further configure the mobile computing device to perform:
 monitoring, while one or more applications of the selected one or more applications is running, for an updated context for the mobile device; and   automatically switching an operating mode of the mobile device from the managed mode to an unlocked mode based on the updated context.   
     
     
         20 . One or more non-transitory computer readable storage media storing instructions that, when executed, configure a device to perform:
 receiving a user name to log onto a mobile device;   determining, based on a mobile device context and the user name, whether the mobile device is to operate in a managed mode;   when the mobile device is operating in the managed mode:
 selecting, based on a mobile device context and a user name, one or more applications available in the managed mode; 
 displaying a restricted user interface that presents and enables access to only the selected one or more applications; and 
 restricting access to only the selected one or more applications while the device is operating in the managed mode, 
   wherein the user name is associated with one of a plurality of roles such that a first group of one or more applications is selected for presentation when the user name is associated with a first role and a second group of one or more applications is selected for presentation when the user name is associated with a second role.