Mobile device child share

Description of equivalent WO 2014035454 A1

MOBILE DEVICE CHILD SHARE BACKGROUND

[0001] Many types of devices, such as mobile phones, tablet devices, and other computing, communication, and entertainment devices increasingly offer more functions, applications, and features which are beneficial to a user, and can enhance one's personal time as well as work and social activities. For example, not only can a mobile phone be used for text, email, and voice communications, but may also be used for entertainment, such as to listen to music, surf the Internet, watch video content, gaming, and for photo and video imaging. Similarly, a portable tablet device may be utilized for email, browser, navigation, and other computing applications, as well as for the various entertainment and photo features. In addition to the many computing, communication, and entertainment applications that are available to a user of a mobile phone or tablet device, a seemingly unlimited number of third-party applications and features are also available for download to a device.

[0002] Parents of younger children that do not yet have their own mobile phones often find that a child wants to "play" with their phone to play games, take pictures, listen to music, and other activities. Typically, a parent may pass his or her phone to a young child in the back seat of the car while driving to keep the child entertained. The parent may not know then what features and applications the childe access on the device, such as a Web browser or unintentionally accessing an email application, or which device settings may have been changed, such as audio settings, alarm settings, calendar notices, and the like. SUMMARY

[0003] This Summary introduces features and simplified concepts of mobile device child share, which is further described below in the Detailed Description and/or shown in the Figures. This Summary should not be considered to describe essential features of the claimed subject matter, nor used to determine or limit the scope of the claimed subject matter.

[0004] Mobile device child share is described. In embodiments, a mobile device can display a default device lock screen on an integrated display device, and receive an input effective to transition from the default device lock screen to display a child lock screen without receiving a PIN code entered on the default device lock screen. The mobile device can receive a second input effective to transition from the child lock screen to display a child space, such as a child start screen. The mobile device implements a device share service that activates a child share mode of the mobile device, and restricts functionality of device applications and access to device content based on designated restriction limits.

[0005] In embodiments, the child share mode may be activated based on a child share profile that includes device application functionality restriction settings and device content access restriction settings. The device share service is implemented to allow restricted device application functionality in the child space and allow restricted device content access in the child space during the child share mode. The device share service can also deactivate the child share mode responsive to an input to the mobile device and activate a user mode of the mobile device. The device share service can then restore device settings previously designated in the user mode that changed during the child share mode, such as to restore audio settings of the mobile device to volume levels that were designated prior to activation of the child share mode. BRIEF DESCRIPTION OF THE DRAWINGS

[0006] Embodiments of mobile device child share are described with reference to the following Figures. The same numbers may be used throughout to reference like features and components that are shown in the Figures:

FIG. 1 illustrates an example of mobile device child share.

FIG. 2 illustrates an example system in which embodiments of mobile device child share can be implemented.

FIG. 3 illustrates example method(s) of mobile device child share in accordance with one or more embodiments.

FIG. 4 illustrates example method(s) of mobile device child share in accordance with one or more embodiments.

FIG. 5 illustrates example method(s) of mobile device child share in accordance with one or more embodiments.

FIG. 6 illustrates setup and activation of mobile device child share on a mobile device.

FIG. 7 illustrates mobile device child share setup and activation on a mobile device.

FIG. 8 illustrates managing content in embodiments of mobile device child share.

FIG. 9 illustrates an example of restricted execution modes.

FIG. 10 illustrates an example system in which embodiments of restricted execution modes can be implemented.

FIG. 1 1 illustrates example method(s) of restricted execution modes in accordance with one or more embodiments. FIG. 12 illustrates example method(s) of restricted execution modes in accordance with one or more embodiments.

FIG. 13 illustrates example method(s) of restricted execution modes in accordance with one or more embodiments.

FIG. 14 illustrates an example system with an example device that can implement embodiments of mobile device child share.

DETAILED DESCRIPTION

[0007] Embodiments of mobile device child share are described and provide a device share service that can be implemented as a client device service or application, such as in a mobile phone, portable tablet device, or other type of computing and/or communication device. Mobile device child share enables implementation of a "Kid's Corner" (also referred to as a kid space or child zone) for parental control of any applications, data, functions, and features of a mobile device so that a parent can allow a child to play with the device without having access to the restricted applications, data, functions, and features. Kid's Corner is a child share space that provides a custom destination on a mobile phone just for a child, and where the child goes to "play" on the device.

[0008] In a child share space, child access is restricted to only the applications, games, music, videos, movies and other content that a parent chooses. All of the settings and content outside of the Kid's Corner is protected and purchases can be blocked while in the Kid's Corner. The blocked and/or restricted applications and features of a mobile device may include the ability to make a phone call, send a text or access email, and access the Internet, such as to post to social networks or to search the Internet. When the parent retrieves his or her mobile device from a child, the parent can simply press the device power button, or provide another input to another designated selectable control, to deactivate the child share mode and reinitiate the default lock screen on the device, from which the parent user can then access the mobile device with a lock-screen password.

[0009] While features and concepts of mobile device child share can be implemented in any number of different devices, systems, environments, and/or configurations, embodiments of mobile device child share are described in the context of the following example devices, systems, and methods.

[0010] FIG. 1 illustrates an example of graphical user interfaces of a mobile device child share and related methods. An example mobile device 100 may be any one or combination of a mobile phone, tablet device, computing device, communication, entertainment, gaming, navigation, and/or other type of portable electronic device. A child space (also referred to as a "Kid's Corner") can be implemented to permit a parent control of a child's access to content, as well as access to any applications, functions, and features of the mobile device 100 so that a parent can allow a child to play with the device without having access to the restricted applications, functions, features, and content. The Kid's Corner can be implemented from a separate start screen environment where a child (also referred herein to as a kid) can access allowed games, music, videos, applications, communication functions, as well as any other functions and features of a mobile device that have not been restricted by a parent, or alternatively, have been allowed by the parent.

[0011] The example mobile device 100 includes an integrated display device 102 on which user interfaces can be displayed, such as a default device lock screen 104 that indicates the device is locked at 106. For example, a user of the mobile device may be a parent of children, and the parent may set-up the device to lock when not in use so that the kids do not inadvertently access applications, such as email and text, and/or have access to the Internet via a browser application. [0012] The parent user of the mobile device 100 can allow a child to play with the phone, and hand the phone over without having to unlock the device from the default device lock screen 104, e.g. in some examples without having to provide a personal identity number (ΡΓΝ) or other authentication credential. As shown in the example 108, a child that has the phone can swipe the default device lock screen with a gesture input (e.g., a horizontal swipe gesture) to access a child lock screen 1 10, which is illustrated at 1 12 as the "Kid's Corner" welcome screen 114. From the Kid's Corner welcome screen 1 14 (e.g., a child lock screen), the child can then swipe the screen with another gesture input (e.g., a vertical swipe gesture), such as in a different direction 116, to access a child space 118, as shown in the example 120.

[0013] In implementations, the inputs used to make these transitions may be any type of user and/or gesture or keystroke input in any direction on the integrated display device 102 of the mobile device. Alternatively or in addition, any type of device, button, and/or gesture inputs may be utilized effective to transition from the default device lock screen 104 to the child lock screen 1 10, and subsequently to the child space 118. In an implementation, the display may pause when transitioned from the default device lock screen to the child lock screen, and then automatically transition to the child space without further input. Alternatively, a transition from the default device lock screen to the child space may be accomplished by omitting the child lock screen altogether.

[0014] From the child space 1 18, the child can access the kid's camera (e.g., allowed camera functionality of an integrated digital camera 122) and the pictures taken by a child in Kid's Corner, which may be maintained in a designated local picture space on the device rather than being uploaded to cloud-based storage. The child can also access allowed games, music, images, videos, applications, communication functions, as well as any other functions and features of the mobile device 100 that have not been restricted by the parent (or alternatively, have been proactively allowed). A parent may also pin photos in the child space that the child cannot delete. The description, layout, orientation, features, and organization of the text, images, photos, graphics, links, data, information, and presentation features shown with reference to the example child share user interfaces (e.g., the Kid's Corner screen 1 14 and the child space 1 18), as well as with reference to any other user interfaces described herein and/or shown in the figures, are merely examples that may be altered in any aspect for various embodiments and/or implementations of mobile device child share.

[0015] FIG. 2 illustrates an example system 200 in which embodiments of mobile device child share can be implemented. The example system includes the mobile device 100 as described with reference to FIG. 1, with the integrated display device 102 on which a user interface can be displayed, such as the Kid's Corner screen 1 14 and the child space 118. Additionally, the mobile device can be implemented with various components, such as a processor and/or memory system, as well as any number and combination of differing components as further described with reference to the example device shown in FIG. 14 to implement embodiments of mobile device child share.

[0016] The mobile device 100 includes a device share service 202 that can be implemented as a software application (e.g., executable instructions) stored on computer- readable storage media, such as any suitable memory device or electronic data storage. Additionally, the device share service 202 can be executed with a processing system at the mobile device to implement embodiments of mobile device child share as described herein. The device share service 202 may be implemented as an independent device application that is executable on the device to interface with the many applications, features, and functions of the device. The device share service 202 may also be integrated with an operating system 204 of the mobile device. The operating system can also include a hub operating system service that is implemented to integrate cloud-based services and local device applications (e.g., the device share service 202) with the operating system.

[0017] The example system 200 also includes a cloud storage and service 206 that can include any type of cloud-based (e.g., network-based) data services 208 used to store or maintain child share profiles 210, which include device application functionality restriction settings and device content access restriction settings the child space 1 18. When established, a child share profile is generally an account within a user account of the (adult) user owner of the device. The child share profile can be established to share device applications and device content associated with the user account of the user owner of the device with a child. There may be multiple child share profiles 210 for a single device, each of which includes different settings for multiple different kids, and each kid having a different child share profile.

[0018] The child space may include multiple implementations of Kid's Corners, and optionally, the multiple child share profiles each correspond to a different implementation of a Kid's Corner in the child space on the device. Additionally, the child share profiles can be pushed or pulled from the mobile device 100 to the cloud storage and service 206 where the child share profiles are maintained. The child share profiles can then be used with other devices, such as to synchronize between two devices of an adult user owner (e.g., a mobile phone and a tablet device), or between two different parents' devices (e.g., a mother's mobile phone and a father's tablet device) so that a child has continuity of user experience when using either of the two different devices.

[0019] Any of the devices and services (e.g., implemented as server devices) described herein can communicate via a network 212, which can be implemented to include a wired and/or a wireless network. The network can also be implemented using any type of network topology and/or communication protocol, and can be represented or otherwise implemented as a combination of two or more networks, to include IP -based networks and/or the Internet. The network may also include mobile operator networks that are managed by a mobile network operator and/or other network operators, such as a communication service provider, mobile phone provider, and/or Internet service provider. Alternatively or in addition, peer-to-peer communication techniques may be utilized.

[0020] The device share service 202 is implemented to manage a child share mode 214 that includes designated restriction limits 216, such as parental control settings to limit and/or restrict device applications (e.g., restricted device applications 218), as well as limit and/or restrict access to device content (e.g., restricted device content 220). A user owner of the mobile device 100, typically a parent of a child, can choose the device applications and features, and/or device content that can be accessed by a child or guest in the child space while the child share mode is activated. Further, a device application may be allowed a restricted level of functionality while running in the child space, yet generally cannot access restricted device content, such as contacts, email, and calendar databases, as well as limited access to the device file system. A set of content databases, device file system, Internet access, Application Programming Interfaces (APIs), and other allowed device content and features can be protected from device application access when a restricted execution mode is activated on the device. For example, a device application that can access the Internet, email, contacts, etc. may be automatically restricted when the parent allows a child to access the device application in the child space. The restricted execution mode limits navigation to a subset of application tasks (for example access to only kids games, but no access to email applications) or limits the experience of the applications themselves. For example, a digital camera application can allow a user to take and view new photos, but previous photos will be restricted from viewing. [0021] The user interface start screen of the child space 118 is customizable for or by the child and/or by the user owner of the device. For example, a parent can add applications, such as for games and music, to the child space so that the applications are recognized and can be launched in the child space. However applications that are not recognized in the child space cannot be launched in the child space. For example, if a game application that is pinned to the child space attempts to launch a browser application, the device share service 202 will check if the browser application is pinned and recognized in the child space. If the application is not, then the device share service will fail to launch the application, or if the application is recognized, then the application can be launched in the child space.

[0022] As described with reference to FIG. 1, an input can be received, such as a gesture input or selectable control input, and the device share service 202 initiates a transition from displaying the default device lock screen 104 to display the child lock screen 110, typically without receiving a ΡΓΝ code entered on the device lock screen. A second input can then be received, such as another gesture input, to transition from displaying the child lock screen 1 10 to display the child space 118, and the device share service 202 activates the child share mode 214. In implementations, the child share mode may be activated based on a child share profile 210 that includes device application functionality restriction settings and device content access restriction settings.

[0023] The device share service 202 is also implemented to manage device settings to 222 of the mobile device 100 when the child share mode 214 is activated. The device settings can include device button settings 224 and audio settings 226, as well as any other type of configuration and settings of the mobile device. For example, the device share service 202 can deactivate a capacitive device button 228 in the child share mode 214 so as to avoid a child inadvertently initiating a different device mode or starting a device application. During activation of the child share mode, button and/or user input actuations can be selectively turned-off or changed, so that a child can not adjust the volume (e.g., a hardware button) or change software controls. This can also makes it easier for a child to use the device when the child share mode 214 is activated on the device.

[0024] Setup and activation of mobile device child share on the mobile device 100 can include locking and/or disabling the hardware controls via software as a broad "restriction" feature of mobile device child share. A hardware lock feature provides that a user owner of the mobile device 100 can press a combination of hardware buttons to place the device in a state where the capacitive device buttons (e.g., capacitive button 228) on the front of the device are disabled. Subsequently pressing the same combination of hardware buttons (or a different pre-determined combination) re-enables the device buttons. Alternatively or in addition, the user owner can place the mobile device in a state where the capacitive device buttons on the front of the device are disabled by tapping on a software button that is on the screen, and pressing the software button again re-enables the device hardware buttons.

[0025] The device share service 202 is also implemented to allow a child access to a kid's camera 230 (e.g., a camera application and allowed camera functionality of the device camera), which allows the child to take photos 232 with the digital camera 122 of the mobile device while the child share mode 214 is activated. However, the device share service 202 restricts uploading the digital photos to the cloud storage and service 206 while the child share mode is activated, and the kid's photos 232 may be stored in a designated photo space on the mobile device. The kid's photos 232 can be saved as just the photos taken by the child when using the mobile device in the child share mode. Further, the child may be restricted from viewing or accessing the photos of the user owner of the device. [0026] The device share service 202 at the mobile device 100 can also be implemented to restrict incoming or outgoing phone calls while the child share mode 214 is activated, such as by disallowing them altogether (with the possible exception of placing an emergency call) or by requiring a PIN to answer an incoming phone call or place an outgoing call. Alternatively or in addition, the device share service at the mobile device may allow the ring tone indicating an incoming phone call to play audibly at a preset (e.g. , high) volume over an integrated speaker of the mobile device, even though a headset is connected to a headset port of the mobile device or the general volume is switched-off or is set at a low level while the child share mode is activated. This can help to avert common frustrations of parents who share their phone using existing systems. For example, in some existing systems, a child may use headphones or turn the sound down on his parent's device, and his parent misses a phone call when she gets the phone back if she forgets to remove the headphones for the device or turn the volume back up.

[0027] In such existing systems, the parent may also miss a phone call while the child is using the device. For example, a phone call may just ring through to the child, who may not tell the parent of the existence of the incoming call. With the systems described herein, even if the device is being used by a child with headphones or the child has reduced the volume of an integrated speaker, an incoming phone call will ring audibly through the integrated speakers at a parent-set volume, and not at the volume that may have been set by a child when using the device in the child space. Similar volume adjustments may be made by a device share service to provide an audible or other indicator of other notifications to a parent when the child share mode is activated, such as notifications of new text messages, calendar reminders, or new email notifications. [0028] The setup and activation of mobile device child share on the mobile device 100 includes the audio settings 226 to control the sounds that matter to the user owner, and the child controls the sounds that matter to him or her in the child space. For example, a volume rocker key or similar volume control can be restricted to only affect the volume of media content playback, such as music, videos, and games. The volume rocker or similar volume controls may be restricted from affecting other system sounds (e.g., incoming call ring volume, or other notification sound volumes) in the child space, and these system sounds may instead be played back at the volume the user owner has set and may be played through the device integrated speaker even if headphones are connected to the device. The user owner can also setup the device share service 202 to manage notifications, such as toasts, reminders, alarms, and the like so that they do not show up in the child space while the child share mode 214 is activated. The reminders and notifications can be queued on the lock screen, such as if the screen were in an off mode.

[0029] The device share service 202 at the mobile device 100 is implemented to receive a predefined input to the mobile device 100, such as a user input to the device power button, and the device share service 202 can then deactivate the child share mode 214. The device share service 202 can then reinitiate the display of the default device lock screen 104 on the integrated display device 102 of the mobile device as an indication that the normal user mode has been restored. The device share service 202 is also implemented to restore the audio settings 226 of the mobile device to volume levels that were designated prior to activation of the child share mode 214.

[0030] Example methods 300, 400, and 500 are described with reference to respective FIGs. 3-5 in accordance with one or more embodiments of mobile device child share. Generally, any of the services, components, modules, methods, and operations described herein can be implemented using software, firmware, hardware (e.g., fixed logic circuitry), manual processing, or any combination thereof. Example methods may be described in the general context of executable instructions stored on computer-readable storage media that is local and/or remote to a computer processing system, and implementations can include software applications, programs, functions, and the like.

[0031] FIG. 3 illustrates example method(s) 300 of mobile device child share. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0032] At 302, a default device lock screen is displayed on an integrated display device of a mobile device. For example, the mobile device 100 (FIG. 1) displays a default device lock screen 104 on the integrated display device 102 of the mobile device. At 304, an input is received and in response, the display transitions from displaying the default device lock screen to a child lock screen. For example, an input system of the mobile device 100 receives an input, such as a gesture input or selectable control input, and the input is effective to transition from displaying the default device lock screen 104 to display the child lock screen 110.

[0033] At 306, the child lock screen is displayed without receiving a ΡΓΝ code or other identifier entered on the default device lock screen. For example, the mobile device 100 displays the default device lock screen (at 302) and transitions to display the child lock screen 1 10 on the integrated display device 102 of the mobile device. The device share service 202 at the mobile device 100 is implemented to initiate the transition from displaying the default device lock screen to the child lock screen without receiving a PIN code entered on the default device lock screen. At 308, an input is received and in response, the display transitions from displaying the child lock screen to a child space, such as a child start screen. For example, an input system of the mobile device 100 receives an input, such as a gesture or selectable control input, and the input is effective to transition from displaying the child lock screen 1 10 to display a child space 1 18. Again, this transition may be made without requiring the receipt of a PIN code or other identifier.

[0034] At 310, a child share mode of the mobile device is activated that restricts the functionality of device applications and/or access to device content based on designated restriction limits. For example, the device share service 202 at the mobile device 100 activates the child share mode 214, and restricts functionality of the restricted device applications 281 and restricts access to the restricted device content 220 based on the designated restriction limits 216. The child share mode may be activated based on a child share profile 210 that includes device application functionality restriction settings and device content access restriction settings. The aspects and features described herein for restricted execution modes (e.g., FIGs. 9-13) may be utilized to support and implement the child share mode as a restricted execution mode that is associated with a child shared space of the device to restrict the functionality of the restricted device applications 281 and restrict access to the restricted device content 220.

[0035] Examples of restricting the functionality of a device application may include not permitting the device application to be launched altogether or limiting the device application to calling only a restricted subset of API calls that is narrower than the normal set of API calls available to the application when the mobile device is running in normal user mode. Restricting access to device content also may include disallowing certain API calls that provide access to particular sets of data or content. In many examples, restricting functionality or access does not include analyzing or changing Access Control Lists (ACLs), Access Control Entries (ACEs), or similar file-system access control metadata maintained by a file system. [0036] FIG. 4 illustrates example method(s) 400 of mobile device child share. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0037] At 402, capacitive device input buttons of the mobile device are deactivated in the child share mode. For example, the device share service 202 (FIG. 2) at the mobile device 100 deactivates the capacitive device button 228 in the child share mode 214 so as to avoid a child inadvertently initiating a different device mode or starting a device application.

[0038] At 404, access to a device camera application is allowed to capture digital photos and, at 406, an upload of the digital photos to cloud storage is restricted during the child share mode. For example, the device share service 202 at the mobile device 100 allows access to the kid's camera 230 (e.g., a device camera application), which allows the child to take photos 232 with the digital camera 122 of the mobile device while the child share mode 214 is activated. However, the device share service restricts uploading the digital photos to the cloud storage and service 206 while the child share mode is activated.

[0039] At 408, an incoming phone call is restricted during the child share mode and alternatively or in addition, at 410, an audible notification sound for incoming phone call is provided through an integrated speaker of the mobile device while a headset is connected to a headset port of the mobile device during the child share mode. For example, the device share service 202 at the mobile device 100 restricts the acceptance of incoming phone calls while the child share mode 214 is activated, such as by requiring a ΡΓΝ to initiate an incoming call or by automatically declining any incoming calls. Alternatively or in addition, the device share service 202 allows the audible notification sound for an incoming phone call to be provided through an integrated speaker of the mobile device while a headset is connected to a headset port of the mobile device while the child share mode is activated. The operations of 408 and 408 may also be preformed to restrict or provide audible notifications for other types of incoming communications, such as incoming text messages, emails, and calendar alerts.

[0040] FIG. 5 illustrates example method(s) 500 of mobile device child share. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0041] At 502, an input is received to a selectable control of the mobile device and, at 504, the child share mode is deactivated responsive to receiving the input to the selectable control. For example, an input to the mobile device 100 is received, such as a user input of the device power button, and the device share service 202 deactivates the child share mode 214 responsive to receiving the input to the selectable control.

[0042] At 506, the display of the default device lock screen is reinitiated. For example, the device share service 202 at the mobile device 100 reinitiates the display of the default device lock screen 104 on the integrated display device 102 of the mobile device (at 302 in FIG. 3). At 508, audio settings of the mobile device are restored to volume levels that were designated prior to activation of the child share mode. For example, the device share service 202 at the mobile device 100 restores the audio settings 226 of the mobile device to volume levels that were designated prior to activation of the child share mode 214.

[0043] FIG. 6 illustrates an example 600 of setup and activation of mobile device child share on a mobile device 100. For example, a user of the mobile device can begin setup of a child share space (e.g., "Kid's Corner") from a setup user interface 602. At a content user interface 604, the user can select which games, music, videos, applications, and websites will be available in the child share space. For example, the user can select to add games to the child share space from the content user interface 604, and then select particular games from a games user interface 606. When finished with the game selections, the content user interface 604 indicates at 608 that three games have been added to the child share space. On a PIN lock user interface 610, the user can optionally set a PIN lock to restrict start screen access and/or optionally set a purchase PIN lock to prevent unauthorized purchases when child share mode is activated on the mobile device.

[0044] FIG. 7 illustrates an example 700 of mobile device child share setup and activation on a mobile device 100. For example, from a start screen 702 displayed on the mobile device, the user can select (e.g., tap input) the "kid's corner" tile. If the child share space (e.g., "Kid's Corner") is already set up on the device, as described with reference to FIG. 6, then a setting user interface 704 is displayed, from which the user can turn the child share space on or off, and launch the child share space. If the child share space is not setup on the device, then the user can setup and activate the child share space as described with reference to FIG. 6.

[0045] FIG. 8 further illustrates an example 800 of managing content in embodiments of mobile device child share. For example, from a system application user interface 802, the user can access the content user interface 604 (described with reference to FIG. 6), the games user interface 606, and/or an applications user interface 804 from which the user can select device applications to add to the child share space. The games and applications that are selectable from the games and applications user interfaces may also be purchased and downloaded games or applications, and/or may be games and applications that are designed specifically for use in the child share space on the mobile device. For example, an gaming application that has a teen rating may also be designed more child-appropriate for use in the child share space. In embodiments, restricted execution modes may be utilized to support and implement the child share space of a device for facilitating sharing the games, applications, and other content added to the child share space with a child. In a child share space, child access is restricted with a restricted execution mode to only the applications, games, music, videos, movies and other content that a parent chooses. All of the settings and content outside of the Kid's Corner is protected and purchases can be blocked while in the Kid's Corner.

[0046] FIG. 9 illustrates an example of user interfaces of a restricted execution mode. An example mobile device 900 may be any one or combination of a mobile phone, tablet device, computing device, communication, entertainment, gaming, navigation, and/or other type of portable electronic device. A shared space can be implemented for user access to functionality of device applications without a password, as well as for access to any applications, functions, and features of the mobile device 900 that are designated by the user in the shared space.

[0047] The example mobile device 900 includes an integrated display device 902 on which user interfaces can be displayed, such as a device lock screen 904 that indicates the device is locked at 906. For example, a user owner of the mobile device may set-up the device to lock when not in use so that someone else cannot access the full functionality of applications, such as email and text, and/or have access to the Internet via a browser application without providing authentication credentials such as a personal identification number (ΡΓΝ), login, or other authentication credential.

[0048] The user owner of the mobile device 900 can allow another person to use the phone, and hand the phone over without having to unlock the device from the device lock screen 904 by entering a PIN or other credential. As shown in the example 908, a person that has borrowed the phone can swipe the device lock screen with a gesture input to access a shared space user interface 910, which is illustrated at 912 when displayed on the display device, and which provides access to a limited subset of application functionality. The borrower does not enter a ΡΓΝ or other credential to access the shared space user interface. In implementations, the gesture input may be any type of user and/or gesture input in any direction on the integrated display device 902 of the mobile device. Alternatively or in addition, any type of device, button, and/or gesture inputs may be utilized effective to transition from the device lock screen 904 to the shared space user interface 910.

[0049] Restricted execution modes enable implementation of a shared space on a device where a user owner can include device applications that a guest or child can access without requiring a password, and the device applications will be programmatically prevented from being able to access other private device content on the device.

[0050] There may be situations when a user owner of a device may want to have access to some content or applications on their mobile phone without unlocking the phone with a PIN code or other authentication credential. Restricted execution modes enable the user owner to make some experiences available without password access, and without compromising the security of sensitive personal or corporate data. In implementations, restricted execution modes allow applications to run, but restricts access to sensitive data or experiences using several mechanisms, such as security capabilities, blocked navigation, and application origin. If an application has a particular security capability, a runtime check is made centrally when the application attempts to access a protected resource, and if the application is running in a restricted execution zone, an error is returned that can be handled by the application. When a device is running in a restricted execution mode, a device application may be referred to as running in a restricted execution "zone". [0051] For the blocked navigation security capability, applications often take advantage of built in tasks to complete user actions like sending an email, making a phone call, etc. When the restricted execution mode is activated on a device, the origination of a device application task at run-time is what is considered to determine whether the device application, and more specifically, whether the task will be allowed. An application task, which is generally synonymous to an application programming interface (or API) call, may include aspects of a data access API call, but it also includes a request to initiate a particular action or actions different than data access, and the task request may incorporate metadata associated with the action of the requested task. The level of functionality is provided on a task-by-task basis to determine whether the action or actions of a requested task will be available in the restricted execution mode during run-time origination of a task request. A device application can be executed by the device, but only some functions of the device application will execute when the restricted execution mode is activated on the device.

[0052] Examples of restricting the functionality of a device application may include not permitting the device application to be launched altogether or limiting the device application to calling only a restricted subset of API calls that is narrower than the normal set of API calls available to the application when the mobile device is running in normal user mode. Restricting access to device content also may include disallowing certain API calls that provide access to particular sets of data or content. In many examples, restricting functionality or access does not include analyzing or changing Access Control Lists (ACLs), Access Control Entries (ACEs), or similar file-system access control metadata maintained by a file system. For example, a device application can be restricted from access to device content while a restricted execution mode is activated on a device. [0053] When running in a restricted execution zone, all application requested navigations are screened and only those allowed by the system can continue. Others fail in a backwards compatible way so that legacy applications do not need to be updated to run in the restricted execution zone. For the application origin security capability, only applications that originate and/or have been downloaded from a first-party provider can run (e.g., execute) in a restricted execution mode. This ensures that applications which have not been security checked, and may access sensitive and/or private data on a device, do not run without the user unlocking the device first.

[0054] FIG. 10 illustrates an example system 1000 in which embodiments of restricted execution modes can be implemented. The example system includes the mobile device 900 as described with reference to FIG. 9, with the integrated display device 902 on which a user interface can be displayed, such as the shared space user interface 910 that is representative of a shared space on the device. Additionally, the mobile device can be implemented with various components, such as a processor and/or memory system, as well as any number and combination of differing components as further described with reference to the example device shown in FIG. 14 to implement embodiments of restricted execution modes.

[0055] The mobile device 900 includes a restricted execution service 1002 that can be implemented as a software application (e.g., executable instructions) stored on computer-readable storage media, such as any suitable memory device or electronic data storage. Additionally, the restricted execution service 1002 can be executed with a processing system at the mobile device to implement embodiments of restricted execution modes as described herein. The restricted execution service 1002 may be implemented as an independent device application that is executable on the device to interface with the many applications, features, and functions of the device. [0056] The example system 1000 may also include a cloud storage and service 1006 that can include any type of cloud-based (e.g., network-based) data services 1008 used to store or maintain accessible data 1010 (e.g., data accessible by device applications on the mobile device 900). Any of the devices and services (e.g., implemented as server devices) described herein can communicate via a network 1012, which can be implemented to include a wired and/or a wireless network. The network can also be implemented using any type of network topology and/or communication protocol, and can be represented or otherwise implemented as a combination of two or more networks, to include IP -based networks and/or the Internet. The network may also include mobile operator networks that are managed by a mobile network operator and/or other network operators, such as a communication service provider, mobile phone provider, and/or Internet service provider. Alternatively or in addition, peer-to-peer communication techniques may be utilized, such as multiple devices connected using a peer-to-peer communication network.

[0057] The restricted execution service 1002 is implemented to manage a restricted execution mode 1014 of a shared space 1016, such as to limit and/or restrict device applications 1019 and shared device applications 1020 that are included in the shared space 1016 that is accessible without a PIN or authentication credential. The device applications 1019 can include any type of software applications, and the functions and features thereof that run on the device, such as for user interaction with messaging, gaming, media playback, document viewing, and communication applications. The device applications may also include system-level components that users of a device generally do not access or utilize, but that typically run in the background while the device is operational. The shared device applications can include any subset of the device applications, and are designated as a shared device application when included in the shared space 1016 for limited and/or restricted functionality when a restricted execution mode 1014 is activated on the device.

[0058] A user owner of the mobile device 900 can choose the device applications and features, and/or device content that can be included in the shared space and accessed by a child or guest while the restricted execution mode is activated. Further, a device application may be allowed a restricted level of functionality while running in the shared space (i.e., the application may be executed), yet generally cannot access device content 1022 that is restricted from access, such as contacts, email, and calendar databases, as well as limited access to the device file system.

[0059] The content databases, device file system, Internet access, and other device content and features can be protected from device application access when the restricted execution mode is activated. For example, a device application that can access the Internet, email, contacts, etc. when a device is unlocked and operating in a normal user mode will be automatically restricted when the restricted execution mode is activated, such as if the device application has been added to the shared space and is allowed limited functionality in the shared space. As an example, a digital camera application that has been added to the shared space may allow a user to take and view new photos, but previous photos will be restricted from viewing the restricted execution mode is activated on the device.

[0060] The shared space user interface 910 of the shared space is customizable by the user owner of the device. For example, the user owner can add applications, such as games and music applications, to the shared space so that the applications are recognized and can be launched in the shared space, perhaps with limited functionality. However applications that are not recognized in the shared space cannot be launched in the shared space. For example, if a game application that is pinned or recognized in the shared space attempts to itself launch a browser application (e.g., as part of the game's execution), the restricted execution service 1002 will check if the browser application is pinned and recognized in the shared space. If the browser application is not recognized in the shared space, then the restricted execution service will fail to launch the application, or if the browser application is recognized, then the browser application can be launched in the shared space by the game application.

[0061] As described with reference to FIG. 9, an input can be received, such as a gesture input or device selectable control input, and the restricted execution service 1002 initiates a transition from displaying the device lock screen 904 to display the shared space user interface 910 of the shared space 1016 without receiving a ΡΓΝ code or other authentication credential entered on the device lock screen. The restricted execution service 1002 is implemented to manage the shared space 1016 when the restricted execution mode 1014 is activated. The restricted execution service 1002 can activate the restricted execution mode 1014 of the mobile device 900, and restrict access of a device application 1018 to the device content 1022, to a file system of the mobile device, and/or to limit the application to a limited set of functionality or tasks while the restricted execution mode is activated.

[0062] The shared space 1016 can include a shared device application 1020, and the restricted execution service 1002 can allow the shared device application access to the device content 1022 while the restricted execution mode 1014 is activated. The restricted execution service 1002 can determine whether a device application 1018 is implemented or designed so that a user can designate to allow the device application access to the device content if the device application is included in the shared space 1016 as a shared device application. Alternatively, a device application may be designed as not to be allowed access to the device content even if the device application is included in the shared space. Additionally, this type of a device application may also be implemented as not even being eligible for user-designation to be included in the shared space.

[0063] In restricted modes, a configuration of a device application may be designed or programmed to indicate whether the device application is ever to be allowed to run (e.g., execute) in a restricted mode, irrespective of user choice. For example, a confidential corporate application or another application downloaded from a third-party application store that may access private corporate data can be configured to never be allowed to run (e.g., execute) in any restricted mode, even if a user would like it to do so. A configuration of some device applications may be user-controlled to indicate whether the device application is to be allowed to run in a particular restricted mode, such as allowing a subset of games or applications in a kid zone restricted mode, or allowing a subset of camera lens applications to run when the phone is locked.

[0064] The restricted execution service 1002 can also be implemented to validate whether or not a given device application can be navigated to regardless of the reason for the navigation request, taking into account the current restricted mode and the target application's system and user configuration. Additionally, a separate navigation stack can be maintained for a normal mode user experience and for the current restricted execution mode. The restricted execution service 1002 is also implemented to allow or disallow migration of applications from the normal mode stack to the restricted mode stack or vice- versa based on scenario needs, and to determine when to close applications on each stack based on available resources and transitions into and out of a restricted mode.

[0065] A device application 1018 may initiate a task call to a shared device application 1020 with a request for the device content 1022, and the restricted execution service 1002 can restrict the device application access to the device content via the shared device application while the restricted execution mode 1014 is activated. The device application may also initiate a task call to the operating system 1004 to request device content access, and the restricted execution service can restrict the access to the device content based on one or more device application tasks being designated as restricted while the restricted execution mode is activated.

[0066] Alternatively, the device application 1018 can initiate a task call to the shared device application 1020 with a request for the device content 1022, and the request includes a request token that indicates the device application is permitted to access the device content via the shared device application in the shared space 1016. The restricted execution service 1002 can then allow the device application access to the device content via the shared device application based on the request token while the restricted execution mode is activated. The restricted execution service can also deactivate the restricted execution mode 1014 responsive to a PIN code or authentication credential entered on the device lock screen, and return to a normal user mode of the mobile device in which the device application 1018 has unrestricted access to the device content 1022.

[0067] The restricted execution service 1000 implements a mechanism to indicate in which restricted modes a device application can run (e.g., execute) based on a task information field of a device application task. The task information field indicates whether a specific task can be allowed to execute in a shared space when the restricted execution mode is activated. This new field will be a bit mask, which a navigation server will use to compare to the navigation filter mask that MobileUI will give to it when a restricted mode is entered. These are marked per task instead of by application because some first-party device applications have tasks that can be allowed to function in a child share space (e.g., Kid's Corner), but not all of the application functionality is allowed while a restricted execution mode is activated on a device. If a device application is allowed to run in a shared space, the restricted execution service can trace an API task call through the application layer from an originator (e.g., device application) that initiates the task call based on a token that is passed along to a core system component that would not otherwise be able to determine whether the task call was originated from a device application running in the shared space. The token can be utilized to determine if the task call is protected from a restricted execution mode.

[0068] FIG. 11 illustrates example method(s) 1100 of restricted execution modes. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0069] At 1 102, a device lock screen is displayed on an integrated display device of a mobile device. For example, the mobile device 900 (FIG. 9) displays a device lock screen 904 on the integrated display device 902 of the mobile device. At 1 104, the display is transitioned from the device lock screen to display a shared space user interface of a shared space without a PIN code or other authentication credential entered on the device lock screen. For example, an input system of the mobile device 900 receives an input, such as a gesture input or device selectable control input, and the input is effective to transition from displaying the device lock screen 904 to display the shared space user interface 910 of a shared space 1016 without a PIN code or other authentication credential entered on the device lock screen.

[0070] At 1106, a restricted execution mode of the mobile device is activated. For example, the restricted execution service 1002 at the mobile device 900 activates the restricted execution mode 1014 of the mobile device in response to entering the shared space. At 1 108, access of a device application to device content is restricted while the restricted execution mode is activated. For example, the restricted execution service 1002 at the mobile device 900 restricts access of a device application 1018 to the device content 1022 while the restricted execution mode 1014 is activated.

[0071] At 11 10, the restricted execution mode is deactivated responsive to a PIN code or other authentication credential entered on the device lock screen. For example, the restricted execution service 1002 at the mobile device 900 deactivates the restricted execution mode responsive to a ΡΓΝ code or other authentication credential entered on the device lock screen. At 11 12, the device returns to a user mode of the mobile device in which the device application has unrestricted access to the device content. For example, the restricted execution service 1002 at the mobile device 900 returns to a user mode of the mobile device in which the device application 1018 has unrestricted access to the device content 1022.

[0072] FIG. 12 illustrates example method(s) 1200 of restricted execution mode. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0073] At 1202, a shared device application that is included in the shared space is allowed access to the device content while the restricted execution mode is activated. For example, the restricted execution service 1002 (FIG. 10) at the mobile device 900 allows access to the device content 1022 to a shared device application 1020 that is included in the shared space 1016 while the restricted execution mode is activated.

[0074] At 1204, the device application that requests access to the device content via the shared device application is restricted while the restricted execution mode is activated on the device. For example, restricted execution service 1002 at the mobile device 900 restricts a device application 1018 task call to the shared device application 1020 with a request to access the device content 1022 while the restricted execution mode is activated on the device.

[0075] At 1206, the device application is allowed access to the device content via the shared device application while the restricted execution mode is activated based on a request token that the device application includes in a task call to the shared device application for the device content. For example, restricted execution service 1002 at the mobile device 900 allows access to the device content 1022 by the device application 1018 via the shared device application while the restricted execution mode is activated based on a request token that the device application includes in a task call to the shared device application for the device content. The request token indicates that the device application is permitted to access the device content via the shared device application in the shared space.

[0076] FIG. 13 illustrates example method(s) 1300 of restricted execution modes. The order in which the method is described is not intended to be construed as a limitation, and any number or combination of the method operations can be combined in any order to implement a method, or an alternate method.

[0077] At 1302, access to the device content is restricted based on device application tasks being designated as restricted while the restricted execution mode is activated, where the device application initiates a task call to access the device content. For example, restricted execution service 1002 (FIG. 10) at the mobile device 900 restricts access to the device content 1022 based on device application tasks being designated as restricted while the restricted execution mode 1014 is activated, where a device application 1018 initiates task calls to access the device content. [0078] At 1304, the device application is restricted from a file system of the mobile device while the restricted execution mode is activated. For example, restricted execution service 1002 at the mobile device 900 restricts a device application 1018 from a file system of the mobile device while the restricted execution mode is activated.

[0079] At 1306, the device application is determined as user-designated to allow the device application access to the device content in a restricted execution mode if the device application is included in the shared space as a shared device application. Alternatively, at 1308, the device application is determined as designed as not to be allowed access to the device content even if the device application is included in the shared space. For example, restricted execution service 1002 at the mobile device 900 can determine whether a device application user-designated to allow the device application access to the device content in a restricted execution mode if the device application is included in the shared space as a shared device application. The restricted execution service 1002 may also determine that a device application is designed (e.g., programmed) as not to be allowed access to the device content even if the device application is included in the shared space. Additionally, this type of a programmed device application may also be implemented as not even being eligible for user-designation to be included in the shared space.

[0080] Although described herein as a single restricted execution mode, in some examples, a device provides multiple restricted execution modes, such as a first restricted execution mode associated with a child shared space for facilitating sharing a mobile device with a child and a second restricted execution mode associated with a safe driving shared space for facilitating safer driving by a user of a mobile device. These various restricted execution modes may each impose a different set of limitations on the functionality of the device. For example, the child-related execution mode might block access to email data, changes to device settings, or in-app purchases, while the second driving safety restricted execution zone might block graphical user interfaces that could distract a driver from the road.

[0081] From the lock screen displayed on a device, without entering a PIN or other authentication credentials, a user may be able to reach different shared spaces, each of which has a different restricted execution mode associated with it. For example, from the lock screen, a user might enter a first gesture (e.g., a left swipe) to reach a first shared space having a first restricted execution mode and a second different gesture (e.g., a right swipe) to reach a second, different shared space having a second restricted execution mode. In some examples, a shared space associated with a restricted execution mode may be accessed from different entry points than receiving an input (e.g., a gesture input) on the lock screen.

[0082] FIG. 14 illustrates an example system 1400 that includes an example device 1402, which can implement embodiments of mobile device child share. The example device 1402 can be implemented as any of the devices, services, and/or servers described with reference to the previous FIGs. 1-13, such as any type of client or mobile device, mobile phone, tablet, computing, communication, entertainment, gaming, media playback, and/or other type of device. For example, the mobile device 100 shown in FIGs. 1-2, and the mobile device 900 shown in FIGs. 9 and 10, may be implemented as the example device 1402.

[0083] The device 1402 includes communication devices 1404 that enable wired and/or wireless communication of device data 1406, such as media content and the shared messages, updates, and events data at the device. The media content can include any type of audio, video, and/or image data. The communication devices 1404 can also include transceivers for cellular phone communication and/or for network data communication. [0084] The device 1402 also includes input / output (I/O) interfaces 1408, such as data network interfaces that provide connection and/or communication links between the device, data networks, and other devices. The I/O interfaces can be used to couple the device to any type of components, peripherals, and/or accessory devices. The I/O interfaces also include data input ports via which any type of data, media content, and/or inputs can be received, such as user inputs to the device, as well as any type of audio, video, and/or image data received from any content and/or data source.

[0085] The I/O interfaces 1408 also support natural user interface (NUI) inputs to the device 1402, such as any interface technology that enables a user to interact with a device in a "natural" manner, free from artificial constraints imposed by input devices such as mice, keyboards, remote controls, and the like. Examples of natural user interface inputs may rely on speech recognition, touch and stylus recognition, gesture recognition on-screen and motion gesture recognition proximate the device, head, eye, and environment recognition and tracking, augmented reality and virtual reality systems, and any other type of audible, vision, touch, gesture, and/or machine intelligence that may determine user input intentions.

[0086] The device 1402 includes a processing system 1410 that may be implemented at least partially in hardware, such as with any type of microprocessors, controllers, and the like that process executable instructions. The processing system can include components of an integrated circuit, programmable logic device, a logic device formed using one or more semiconductors, and other implementations in silicon and/or hardware, such as a processor and memory system implemented as a system-on-chip (SoC). Alternatively or in addition, the device can be implemented with any one or combination of software, hardware, firmware, or fixed logic circuitry that may be implemented with processing and control circuits. The device 1402 may further include any type of a system bus or other data and command transfer system that couples the various components within the device. A system bus can include any one or combination of different bus structures and architectures, as well as control and data lines.

[0087] The device 1402 also includes computer-readable storage media 1412, such as data storage devices that can be accessed by a computing device, and that provide persistent storage of data and executable instructions (e.g., software applications, programs, functions, and the like). Examples of computer-readable storage media include volatile memory and non-volatile memory, fixed and removable media devices, and any suitable memory device or electronic data storage that maintains data for computing device access. The computer-readable storage media can include various implementations of random access memory (RAM), read-only memory (ROM), flash memory, and other types of storage media in various memory device configurations.

[0088] Generally, computer-readable storage media is representative of media and/or devices that enable persistent and/or non-transitory storage of data in contrast to mere signal transmission, carrier waves, or signals per se. A computer-readable signal media may refer to a signal-bearing medium that transmits instructions, such as via a network. The signal media can embody computer-readable instructions as data in a modulated data signal, such as carrier waves or other transport mechanism.

[0089] The computer-readable storage media 1412 provides storage of the device data 1406 and various device applications 1414, such as an operating system that is maintained as a software application with the computer-readable storage media and executed by the processing system 1410. In this example, the device applications also include a device share service 1416 that implements embodiments of mobile device child share, such as when the example device 1402 is implemented as the mobile device 100 shown in FIG. 1. An example of the device share service 1416 is the device share service 202 that is integrated with the operating system 204 at the mobile device 100, as described with reference to FIGs. 1 and 2.

[0090] The device applications 1414 can also include any of the services and applications 1418 that implement embodiments of mobile device child share. The example device 1402 also includes a family coordination architecture 1420, which may be implemented in the general context of software, firmware, hardware (e.g., fixed logic circuitry), or any combination thereof to support embodiments of mobile device child share and/or mobile devices family coordination. The device 1402 can also include a positioning system 1422, such as a GPS transceiver, or similar positioning system components, that can be utilized to determine a global or navigational position of the device.

[0091] The device 1402 also includes an audio and/or video system 1424 that generates audio data for an audio device 1426 and/or generates display data for a display device 1428. The audio device and/or the display device include any devices that process, display, and/or otherwise render audio, video, display, and/or image data. In implementations, the audio device and/or the display device are integrated components of the example device 1402. Alternatively, the audio device and/or the display device are external, peripheral components to the example device.

[0092] In embodiments, at least part of the techniques described for mobile device child share may be implemented in a distributed system, such as over a "cloud" 1430 in a platform 1432. The cloud 1430 includes and/or is representative of the platform 1432 for services 1434 and/or resources 1436. For example, the services 1434 may include the cloud storage and service 206, and any of the data services 208 as described with reference to FIG. 2. Additionally, the resources 1436 may include the child share profiles 210 as described with reference to FIG. 2. [0093] The platform 1432 abstracts underlying functionality of hardware, such as server devices (e.g., included in the services 1434) and/or software resources (e.g., included as the resources 1436), and connects the example device 1402 with other devices, servers, etc. The resources 1436 may also include applications and/or data that can be utilized while computer processing is executed on servers that are remote from the example device 1402. Additionally, the services 1434 and/or the resources 1436 may facilitate subscriber network services, such as over the Internet, a cellular network, or Wi- Fi network. The platform 1432 may also serve to abstract and scale resources to service a demand for the resources 1436 that are implemented via the platform, such as in an interconnected device embodiment with functionality distributed throughout the system 1400. For example, the functionality may be implemented in part at the example device 1402 as well as via the platform 1432 that abstracts the functionality of the cloud 1430.

[0094] Although embodiments of mobile device child share have been described in language specific to features and/or methods, the appended claims are not necessarily limited to the specific features or methods described. Rather, the specific features and methods are disclosed as example implementations of mobile device child share.