Application Auto Lock

Have you considered designing the app as a thin client app? 
The remote
object (a CAO) for your business layer (running either on
the client -
but out of process - or on a remote applcation server) can
be set to
time out after a specific period of inactivity, and is
refreshed
according to parameters set by you after each call.

If your client tries to use a timed-out remote object the
exception can
be caught and a login screen displayed.

It is up to you to determine what events trigger a call to
the remote
object.

HTH


Peter