Abstract:
A system includes a server computing device executing code to provide a privacy-enabled service to users, and a mobile computing device able to access the server. The mobile device further able to open a user interface on the mobile device, receive a user name and password through the user interface, determine that the application is privacy-enabled, notify the user that the application is privacy-enabled and prompting the user for an application passcode, and receive the passcode from the user.

Description:
BACKGROUND 
       [0001]    Many enterprises have begun to employ surveys as tools to track their customer service, product reviews, etc. Some of these enterprises provide services related to sensitive information, such as health care information that falls under HIPAA (Health Insurance Portability and Accountability Act), financial information, identity-related information, etc. 
         [0002]    With the advent of smart phones, tablets, and other similar devices, survey providers may create applications that provide a direct portal to their survey tools over the Internet. Users employing the application may inadvertently leave them ‘open’ on their mobile devices. This may cause concern because of the sensitive nature of the information that may be accessible on the mobile devices. 
         [0003]    Many of these applications provide security through the portal to the service itself, through user name and password access that the user enters when the application connects to the service. Many of these user name and password processes may include a ‘site key’ such as a picture or graphic that verifies to the user that the user is on a legitimate site. However, there is very little security provided at the device level. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0004]      FIG. 1  shows an embodiment of a system having a mobile device, a network and a server. 
           [0005]      FIG. 2  shows a block diagram of an embodiment of a mobile computing device. 
           [0006]      FIG. 3  shows an embodiment of a method of enabling privacy for an application on a mobile device. 
           [0007]      FIG. 4  shows an embodiment of providing a privacy-enabled application on a mobile device. 
           [0008]      FIG. 5  shows an example of a user interface to allow access to a provider web site. 
           [0009]      FIG. 6  shows an embodiment of a user interface for enabling privacy in an application. 
           [0010]      FIG. 7  shows an embodiment of a user interface for a previously enabled privacy application. 
       
    
    
     DETAILED DESCRIPTION OF THE EMBODIMENTS 
       [0011]      FIG. 1  shows an example of a networked system  10  in accordance with certain embodiments of the disclosed technology. In this example, the system  10  includes a network  18  such as the Internet, an intranet, a home network, a public network, or any other network suitable for implementing the embodiments discussed here. In the example, a provider server  12  or other computing device may connect to the network  18  to communicate with each other or with other devices connected to the network. Similarly, a provider server may comprise multiple computing devices such as  12  and  13  that connect to the network  18 . One should note that the term ‘service’ is used in the simplest form of the term, that of supplying a capability or activity to a user, rather than in any particular definition in networks, such as an application running in the network application layer. The discussion below may address a particular service provider, that of providing survey tools and surveys, to customers, but no limitation to such a service is intended, nor should any be implied. 
         [0012]    The system  10  may also include three mobile electronic devices  20 ,  22  and  24  as examples of a user&#39;s computing device. Two of the mobile electronic devices  20  and  22  may be communications devices such as may be cellular telephones or smartphones. Another of the mobile devices  24  may be a handheld computing device such as a personal digital assistant (PDA), tablet device, or other portable device. A storage device  16  may store some of all of the data that is accessed or otherwise used by any or all of the computers  12  and  14  and mobile electronic devices  20 ,  22  and  24 . The storage device  16  may be local or remote with regard to any or all of the computers  12 ,  14  and mobile electronic devices  20 - 24 . The storage device may consist of one or more databases, as will be discussed in more detail later, and may actually consist of one or many physical memory devices. One must note that the system of  FIG. 1  is merely intended as an example to demonstrate possible devices connected to a network. 
         [0013]      FIG. 2  illustrates an example of a mobile electronic device  30 , such as any of the devices of  FIG. 1 , in which certain aspects of various embodiments of the embodiments may be implemented. The mobile device  30  may include, a PDA or tablet computing device, a mobile communications device such as a smartphone, an industry-specific machine such as a self-service kiosk or automated teller machine (ATM), or any other electronic device suitable for use in connection with certain embodiments of the disclosed technology. The term ‘mobile’ as used here means that the device can connect to the network without wires or cables, although the device may connect to the network using cables and wires in addition to its wireless capability. 
         [0014]    In the example, the electronic device  30  includes a housing  32 , a display  34  in association with the housing  32 , a user interaction module  36  in association with the housing  32 , a processor  38 , and a memory  40 . The user interaction module  36  may include a physical control device, such as a keyboard, mouse, microphone, speaking, or any combination thereof, or a virtual device, such as a virtual keypad implemented within a touchscreen. The processor  38  may perform any of a number of various operations. The memory  40  may store information used by or resulting from processing performed by the processor  38 . The display will allow the user to see a user interface generated by an application on the mobile device with the appropriate input fields, etc. 
         [0015]    An ‘application’ as that term is used here means a set of software instructions or codes that are executed on the mobile device that connect the mobile device to the service provider&#39;s server. The application generally has an icon that appears on the mobile device&#39;s screen. The user selects that application, such as by a touch to the touch screen, to start or launch the application. The application then provides the user with access to the service provider&#39;s services. As mentioned above, the application here provides a link or portal to a survey provider&#39;s website, as an example. 
         [0016]    Typically, the service provider allows the user to access the website by entry of the user&#39;s user name and password. If the user had previously logged in by entering these through the application, the user may remain logged in until the user actively logs out, or some period of inactivity passes and the provider logs the user out. The website may also have added security features such as site keys, in which the user is presented with an image or other piece of information that is unique to the user, or security questions that identify the user to the website. 
         [0017]    Some applications allow access to sensitive information such as health-related information about the user such as information protected by HIPAA, banking information, identity-related information, etc. The website level access is often considered sufficient by most providers, but there are opportunities to provide further security related to the application on the user&#39;s mobile device. 
         [0018]    Many users are familiar with the ability to lock their mobile devices with a passcode. The user selects the ability to use a passcode in the mobile device&#39;s settings menu, and the passcode is used to secure the ‘entire’ device. This means that once the device is locked, either directly by the user, or by some period of inactivity passing, the user must enter the passcode to access any aspect of the mobile device. This type of passcode will be referred to as a device passcode. 
         [0019]    The embodiments here address an application-level passcode that is similar to a device passcode, but are specific to the application itself When the user activates the application, the application may require the user to enter another passcode to access the application. One should note that the passcode is on the device itself, separate from the user name and password used to access the website. Alternatively, the user may activate the application and the application only requires the passcode if the user has been inactive on the application for some predetermined period of time, or if the user has not logged into the website recently, etc. The application that has an application passcode will be referred to as a privacy-enabled application. 
         [0020]      FIG. 3  shows a flowchart of an embodiment of a method of providing a privacy-enabled application. The user identifies an application the user wants to access at  50 . Typically, the user touches an icon or other representation of the application on the user interface of the user&#39;s mobile device. The application then launches and opens a link to the server at  52 . One should note that the order of opening the link to the website and the passcode entry, etc., may occur differently than shown here. If this is the first access of the application by the user at  54 , the application prompts for the user name and password  56  in a user interface similar to that shown in  FIG. 5 . Again, the order of asking for the user name and password, opening the link, etc. is left up to the system designer. 
         [0021]    Depending upon the application, it may automatically prompt the user for a passcode as the application may not make privacy enabling optional. However, if privacy enablement is optional, the user would be offered the option at  58 . If the user elects for privacy at  58 , the system prompts for the passcode at  60 . This user interface may appear such as that shown in  FIG. 6 . 
         [0022]    One aspect of the embodiments may include a timer that monitors periods of inactivity. If the timer elapses during the period of inactivity, the device may prompt the user to re-enter the passcode prior to allowing the user access to the application. The timer starts at  62 , just before, after or at the same time access is allowed to the server at  64 . 
         [0023]      FIG. 4  shows a flowchart of an embodiment of a method of providing a privacy-enabled application on a mobile device. Returning to  54  in  FIG. 3 , the mobile device determines that it is not the user&#39;s first access of the application and the discussion moves to  FIG. 4 . The device prompts the user about privacy enablement at  70 . If privacy is enabled for the device at  70 , the device also determines whether the timer has expired at  72 . If the timer has expired at  72 , the device prompts for the passcode at  74 . An example of the user interface for the passcode is shown in  FIG. 7 . If privacy is not enabled or if the timer has not expired, access is allowed to the service at  76 . 
         [0024]    In this manner, application-specific security provides an extra layer of security for mobile devices. Unlike website security relying on user names, passwords, site keys and security questions, this layer of security is application-specific and based on the mobile device, rather than the web site. 
         [0025]    It will be appreciated that several of the above-disclosed and other features and functions, or alternatives thereof, may be desirably combined into many other different systems or applications. Also that various presently unforeseen or unanticipated alternatives, modifications, variations, or improvements therein may be subsequently made by those skilled in the art which are also intended to be encompassed by the following claims.