Need to secure app on Chromebook

[Dave Hannon]

We need to be able to deliver a "secure" test to a Chromebook, where "secure" means preventing the student from doing things that would constitute cheating (accessing other applications/tabs/web sites/etc.). We also need to run in full-screen or "kiosk" mode. I have research some things online for being able to deliver "packaged" web applications to the Chromebook, that use Chrome, but otherwise work like an application, so there's no omnibox, tabs, or other "chrome" to the viewport that's delivering the application. I've also read information on how to configure a Chromebook to work like a kiosk, enabling full-screen, preventing other access, etc.

What I have not come across is how to run a "packaged" app (or any other approach) on an otherwise general-use Chromebook, in a "secure" kiosk mode with minimal to no configuration/modification to the Chromebook or Chrome OS settings themselves. Here's a user story:

As a student, I should be able to login to a Chromebook at school and access the testing application. I should not be able to cheat or access any other application or content other than what is presented in the testing application while the test is administered. I should be able to go back to normal usage of the Chromebook after completing the test and exiting the testing application.

As a school or district administrator, I should be able to distribute the testing application and any necessary Chromebook or Chrome OS configuration from a centralized administrative console. I should not need to physically modify or change any configuration or setup parameters on the Chromebook or in Chrome OS an a machine by machine basis. I should be able to distribute the testing application to otherwise general use Chromebooks owned by the school system or district.

Any help or pointing in the right direction would be appreciated.

---

Notice: The information contained in this message or any attached document is confidential and intended only for individuals to whom it is addressed. If you got this message in error, please inform me immediately using one of the methods above. In some cases, I may ask you to return the documents at my expense. In general, please simply destroy the information at once. Any unauthorized use, distribution, or copying of this information is prohibited.

[Vincent Scheib]

First, for this scenario you would need to have the student in a controlled environment as well, otherwise they could simply use another computer, phone, tablet, etc to look up information.

Since you'll need a controlled environment, using a managed Chrome OS device seems plausible, and the best option to ship a solution today. You can configure the device to have limited access to only the web server used to deliver the test.

Having a machine able to enter and exit this managed mode is a pretty big ask, I don't suspect it can be done today. 

--
You received this message because you are subscribed to the Google Groups "Chromium Apps" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-app...@chromium.org.
To post to this group, send email to chromi...@chromium.org.
Visit this group at http://groups.google.com/a/chromium.org/group/chromium-apps/?hl=en.
For more options, visit https://groups.google.com/a/chromium.org/groups/opt_out.
 
 

[Brice Ruth]

It is safe to assume that students would be in a proctored environment. This question is about delivering an application to an otherwise general use Chromebook by a third party under contract to a first party, ideally impacting the first party's sys admins minimally.

This is already being done with the iPad (Guided Access + MDM/AppStore) as well as to Mac/Win/Linux via installed app using CEF. Not theoretically, it's done ;-). The Chromebook story is what's lacking here.

So, is this possible? Going to be possible? Never gonna happen? We need to know as it will eventually influence purchasing decisions by districts and states that need this.

Cheers.

[Vincent Scheib]

On Wed, Mar 20, 2013 at 7:46 PM, Brice Ruth <br...@compcc.com> wrote:

It is safe to assume that students would be in a proctored environment. This question is about delivering an application to an otherwise general use Chromebook by a third party under contract to a first party, ideally impacting the first party's sys admins minimally.

This is already being done with the iPad (Guided Access + MDM/AppStore) as well as to Mac/Win/Linux via installed app using CEF. Not theoretically, it's done ;-). The Chromebook story is what's lacking here.

So, is this possible?

Not today.

 

Going to be possible? Never gonna happen?

Bringing up the use case puts it on our radar. You've been heard. 

 

We need to know as it will eventually influence purchasing decisions by districts and states that need this.

Cheers.

--



------------------------------
*Notice*: The information contained in this message or any attached

[Dave Hannon]

Vincent -

Thanks for the replies.  

Can you give us any help in understanding of what "on our radar" means?  I'm guessing that it becomes an informal feature request that may or may not be undertaken?

Or, is it something other than that?  We just don't have much of a feel for how things flow.

Thanks again.

    - Dave

---

Notice: The information contained in this message or any attached document is confidential and intended only for individuals to whom it is addressed. If you got this message in error, please inform me immediately using one of the methods above. In some cases, I may ask you to return the documents at my expense. In general, please simply destroy the information at once. Any unauthorized use, distribution, or copying of this information is prohibited.

[Vincent Scheib]

On Fri, Mar 22, 2013 at 7:56 AM, Dave Hannon <dha...@compcc.com> wrote:

Vincent -

Thanks for the replies.  

Can you give us any help in understanding of what "on our radar" means?  I'm guessing that it becomes an informal feature request that may or may not be undertaken?

Right, several of us have read the use case and are aware of it, along with numerous others. We're starting with launching the core platform and will stabilize, polish, and expand it over time. As we do so we pay attention to the feedback content developers offer.