Abstract:
A device and method for unobtrusively conducting security access checks via biometric data. The device and method obtains biometric data in response to a request for content and initiates a security clearance process that is substantially unobservable to an individual with clearance to access the requested content.

Description:
FIELD OF THE DISCLOSURE 
       [0001]    The present disclosure is related to automated methods and devices for controlling content using real-time biometric data. 
       BACKGROUND 
       [0002]    In computing, including the tablet space, there is a focus on ease of use including use of either automatic or extremely intuitive device behaviors. One example of automatic behaviors includes things like display rotation based on the built in orientation sensors. 
         [0003]    Tablets, one kind of computing device, are designed to be very sharable devices that get handed around, left on coffee tables, or are otherwise viewable by individuals other than their owners. This is presents a low security usage model. As tablets progress to being “enterprise” ready, thereby expecting increasingly sensitive data thereon, layers of security are being added. Such security features have the potential to run afoul of the ease of use that has at least partially driven their success. 
         [0004]    Also, tablet devices are known that employ an accelerometer which detects motion such that when the tablet is picked up from a table and motion is detected, the current user that is logged on is again allowed access. The user stays logged in but the device can shut off when the user sets the tablet down or if there is no more movement detected. However, the user is still logged into the account. When others pass the device or others can also see the contents of the device so that security can be readily breached. 
         [0005]    Accordingly, there exists a need for an improved method and apparatus that automates increased security functionality in a way that does not interfere with the ease of use and automatic behaviors. Additionally, there exists a need for an improved method and apparatus that automates increased security functionality in a way that is itself easy to use and presented in an intuitive way. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0006]      FIG. 1  is a diagrammatic view of a computing entity employed in accordance with an embodiment of the present disclosure; 
           [0007]      FIG. 2  is a flowchart showing a process employed by the computing entity of  FIG. 1  in accordance with an embodiment of the present disclosure; 
           [0008]      FIG. 3  is a diagrammatic view of hardware and software interaction between parts of the computing entity of  FIG. 1 ; and 
           [0009]      FIG. 4  is an exemplary diagrammatic view of the content of a content access control user profile used with the computing entity of  FIG. 1 . 
       
    
    
     DETAILED DESCRIPTION 
       [0010]    Briefly, in one example, a method is provided for providing content on a device. The method includes detecting a content request on the device, in response to the content request, determining which of a plurality of users is a current user of the device based on at least one of a visual and audio recognition process carried out by the device, and allowing access to the requested content or restricting access to the requested content in response to the visual or audio recognition process that determines the current user. 
         [0011]    In another example, a content presentation device is provided. The device includes a processor; a display; and memory. The memory storing software thereon, that when invoked by the processor cause the processor to: detect a content request on the device; determine, in response to the content request, which of a plurality of users is a current user of the device based on at least one of a visual and audio recognition process carried out by the device; and allow access to the requested content or restricting access to the requested content in response to the visual or audio recognition process that determines the current user. 
         [0012]    In yet another example, a method is provided for providing content on a device. The method includes: logging a first user into the device; post log-in of the first user, and in response to a request for content, performing at least one of a visual or audio recognition process on a current user of the device; and preventing displaying of the content on the device in response to determining that the current user is different from the first user, the determining being based on the post-log-in visual or audio recognition process performed on the current user of the device. 
         [0013]    Among other advantages, for example, the method and device provide for automatic, continual, intuitive content access control. Access control is achieved without overt specific request by a user to invoke the access control. Continual access control is achieved without requiring repeated logins by the user. Continual access control is achieved without continual perception by the user. The method also provides the advantage that user specific and user appropriate content can be automatically provided to the user without a distinct user-perceptible login event. Also, while preventing undesired content access, the method provides for allowing deliberate sharing of content by an authorized user to a second user. This sharing is achieved without giving the second user access to content beyond what was specifically deliberately shared. Furthermore, the present method provides for security while a user remains logged in. A user is not required to log out in order to prevent unauthorized access. Accordingly, faster access for authorized users is also provided by not requiring user input into an access protocol at every request for access. The present method also provides content specific granularity with respect to the access controls. The same application may be available to all users, but only specific content within that application will be available to certain users. 
         [0014]    Turning now to the drawings wherein like numerals represent like components,  FIG. 1  is a diagram of a device  10  that provides for automated, continual, and seamless implementation of content security. Device  10  includes one or more processors  12 , display  14 , memory  16 , communications device  18 , and one or more biometric data sensor  20 , shown as camera  21 . 
         [0015]    Device  10  is illustratively a tablet computing device, such as an iPad. While device  10  is discussed herein as a tablet, embodiments are also envisioned where device  10  is a laptop computer, a desktop computer, a phone, a TV, or other content delivery device capable of receiving biometric information. 
         [0016]    Display  14  is illustratively a touch screen such that it also operates as an input for device  10 . Communications device  18  is shown as a wireless transceiver for communicating over Wi-Fi, cell networks, or otherwise. While communications device  18  is shown as being a wireless transceiver, embodiments are envisioned where the communications device provides for wired communication. 
         [0017]    Memory  16  stores applications, data used by the applications, and an operating system all of which are considered “content.” Camera  21  is located such that it is able to capture image(s) of a user attempting to access content on device  10 . Embodiments are envisioned where multiple cameras  21  are used. Such multi-camera embodiments potentially allow for multiple pictures to be taken from multiple angles, thereby increasing the sophistication of the biometric signature that can be detected as known in the art. Additionally, embodiments are envisioned where camera  21  is not integrated into device  10 , but rather is an attachable peripheral. Furthermore, while camera  21  is provided as biometric data sensor  20 , embodiments are envisioned where other biometric data sensors are used. Such other embodiments include, but are not limited to, microphones and hand or fingerprint scanners. 
         [0018]    Device  10  further includes user recognition module  22  and content controller  24 . Each of recognition module  22  and content controller are described herein as software modules. However, embodiments are envisioned where the functionality of user recognition module  22  and content controller  24  are provided by dedicated hardware pieces. User recognition module  22  receives data from biometric data sensor  20  to determine an identity of a user. User recognition module  22  takes the provided biometric data and processes it to generate a biometric signature of the user. In one embodiment, the biometric signature is generated according to an algorithmic analysis of the biometric data. User recognition module  22  then accesses a database of biometric signatures  26 . ( FIG. 3 ). Device  10  then attempts to find a profile stored in database  26  to which the detected biometric signature is linked. If no such linked profile is found, the user is offered at least one of the opportunity to create a profile, or to append or link the current user to an existing profile the opportunity to operate under a “guest” account. Alternatively, embodiments are envisioned where the failure to find a linked profile does not allow creation or appending to a profile which results in blocking of all secured content. 
         [0019]    Profile creation is invoked for new users. Appending and linking are invoked for instances where new biometric signatures are presented for existing users. New biometric signatures can result from an audio based signature being added to a profile that previously had only a visual based signature. New biometric signatures can also result from a significant change in visual appearance, such as a man growing or removing facial hair or otherwise. Such creation or addition of biometric signatures may involve the input of a password or other validation means to allow the linking of the biometric signature with a profile. 
         [0020]    User recognition module  22  then passes profile identification information to content controller  24 . In one embodiment, profile identification information is a unique user ID. In another embodiment, profile identification information is a security profile that lists in detail access privileges of the identified user. Content controller  24  receives profile identification information and uses the profile identification information to determine whether the current user has access privileges to the desired content. 
         [0021]    In embodiments where profile identification information is a unique user ID, content controller  24  accesses a permissions database to determine what content the user is allowed to access. In another embodiment, the content itself may have an embedded listing of user ID&#39;s that are allowed to access it. 
         [0022]    Access can be processed at a number of levels such as device  10 , application  28 , application profile  34 , and information (file)  32 . Device level permissions determine whether a user is permitted to use device  10  at all. Application level permissions determine whether a user is permitted to use an application. Application profile permissions determine a user&#39;s profile within an application, such as an e-mail application specifying the user&#39;s account(s). Information level permissions include document level permissions. By way of example, information (file) level  32  and application level  28  can be tied to parental control type interactions. 
         [0023]    Operation of device  10  will now be discussed with reference to the flowchart of  FIG. 2  and the diagram of  FIG. 3 . Access control  100  is initiated through a request or attempt by a user to access some type of content. Access control  100  is discussed herein as being present at every level (device, application, profile, information (file)). However, security can be selectively implemented at each of the levels as desired. 
         [0024]    The first point of security is to check whether the current user is authorized to use device  10 . Upon detecting a user attempt to access device  10 , step  110 , device  10  through content controller  24 , initiates a biometric check of the current user, step  120 . In the present example, content controller  24  sends a request for analysis to user recognition module  22 . User recognition module  22  controls camera  21  or otherwise arranges for biometric data to be received. User recognition module  22  processes the received biometric data to provide user identification information. This information is then compared to entries in database  26  to determine a user ID, step  130 . This user ID is then passed back to content controller  24 . Alternatively, if the submitted user identification information does not match up with a user ID in database  26 , this fact is reported to content controller  24 . 
         [0025]    Content controller  24  queries permissions database  30  with the user ID (or lack of a user ID) to request the user&#39;s profile to determine whether the current user is authorized to use device  10 , step  140 . A user profile  31 , see  FIG. 4 , associated with the user ID is found, if any, and used to determine whether a user is authorized to access the requested content. If the user is authorized, the user is granted access to device  10 , step  150 . If the user is not authorized, content controller  24  prevents access to device  10 , step  160 . Optionally, a message is displayed indicating that the user is not authorized, step  180 . An alternative message is envisioned for the case where biometric sensor  20  is unable to perceive biometric data from a user, such as the user not being in the view of camera  21 , instructing the user to adjust device  10  to allow capturing of the biometric data. 
         [0026]    Accordingly, in the case of the authorized user, the user has obtained device  10 , attempted to access device  10 , and through a process that is almost completely undetectable to the user, been granted access to device  10 . 
         [0027]    The authorized user continues use of device  10  by attempting to access application  28 . Again, device  10  detects that the user is attempting to access content, step  110 . Content controller  24  is again invoked and performs a biometric check, step  120 , through a request to recognition module  22 , collection of biometric data, querying of database  26 , and receipt of a current user ID. Content controller  24  again consults the user profile of database  30 , step  130 , to determine if the current user is authorized for requested application  28 , step  140 . If the user is authorized, the user is allowed access to application  28 , step  150 . If the user is not authorized, content controller  24  prevents access to application  28 , step  160 . Optionally, a message is displayed indicating that the user is not authorized, step  180 . Again, an alternative message is envisioned for the case where biometric sensor  20  is unable to perceive biometric data from a user, such as the user not being in the view of camera  21 , instructing the user to adjust device  10  to allow capturing of the biometric data. 
         [0028]    Accordingly, in the case of the authorized user, the user has obtained device  10 , attempted to access device  10 , attempted to access application  28 , and through a process that is almost completely undetectable to the user, been granted access to application  28 . 
         [0029]    The authorized user continues use of device  10  by attempting to access application profile  34 . One example of an application profile  34  is an e-mail inbox for a specific user. Again, device  10  detects that the user is attempting to access content, step  110 . Content controller  24  is again invoked and performs a biometric check, step  120 , through a request to recognition module  22 , collection of biometric data, querying of database  26 , and receipt of a current user ID. Content controller  24  again consults the user profile of database  30 , step  130 , to determine if the current user is authorized for requested application profile  34 , step  140 . If the user is authorized, the user is allowed access to application profile  34 , step  150 . If the user is not authorized, content controller  24  prevents access to application profile  34 , step  160 . Optionally, a message is displayed indicating that the user is not authorized, step  180 . Again, an alternative message is envisioned for the case where biometric sensor  20  is unable to perceive biometric data from a user, such as the user not being in the view of camera  21 , instructing the user to adjust device  10  to allow capturing of the biometric data. Additionally, for cases such as those where the user is not authorized for the requested application profile  34 , but an application profile  34  exists for which the user is authorized, the authorized application profile  34  is shown to the user instead, step  170 . In such cases, a user intentionally or accidentally attempting to access someone else&#39;s inbox would be redirected to their own inbox. In cases where the device supports multiple inboxes simultaneously, only those authorized for the currently detected user are presented. 
         [0030]    Accordingly, in the case of the authorized user, the user has obtained device  10 , attempted to access device  10 , attempted to access application  28 , attempted to access application profile  34  and through a process that is almost completely undetectable to the user, been granted access to application profile  34 . 
         [0031]    As the authorized user continues use of device  10 , either through application  28  or otherwise, the user continues by attempting to access file content  32 . Examples of file content  32  are Word documents, PDF files, images, or any other data files. Again, device  10  detects that the user is attempting to access file content  32 , step  110 . Content controller  24  is again invoked and performs a biometric check, step  120 , through a request to recognition module  22 , collection of biometric data, querying of database  26 , and receipt of a current user ID. Content controller  24  again consults the user profile of database  30 , step  130 , to determine if the current user is authorized for requested file content  32 , step  140 . If the user is authorized, the user is allowed access to file content  32 , step  150 . If the user is not authorized, content controller  24  prevents access to file content  32 , step  160 . Optionally, a message is displayed indicating that the user is not authorized, step  180 . Again, an alternative message is envisioned for the case where biometric sensor  20  is unable to perceive biometric data from a user, such as the user not being in the view of camera  21 , instructing the user to adjust device  10  to allow capturing of the biometric data. In yet another example, applications, such as application stores, require authorization for actions within the application, such as making purchases. In such examples, content controller  24  can be used to seamlessly authorize purchases upon detection of an approved user. Similarly, other payment information and details can be linked to the user profile to allow auto-population of various purchasing forms and authorizations for applications, websites, or the like. 
         [0032]    Accordingly, in the case of the authorized user, the user has obtained device  10 , attempted to access device  10 , possibly attempted to access application  28 , attempted to access file content  32  and through a process that is almost completely undetectable to the user, been granted access to file content  32 . 
         [0033]    From the forgoing, it should be appreciated that secure access is presented at multiple levels without requiring a user to input a password. Furthermore, security checks are conducted upon the attempt to access the content. In use, an authorized user can access a piece of content for which he/she is authorized such that the content is shown on display  14  and then pass the device or otherwise provide such that display  14  is viewable by another, potentially unauthorized user. In that the second unauthorized user has not made a request for the content, no security controllers will have been invoked such that the second user is able to view the content. In this way, a user can share content, such as an e-mail with another. 
         [0034]    According to another embodiment, the entire device  14  may be provisioned with profiles. In such an embodiment, a request to access device  10  invokes method  100 , which results in allowing access, step  150 , but such access is to a specific portion or profile within device  10  rather than the device as a whole. While profiles are discussed as being part of device  10 , it should be appreciated that embodiments are envisioned where the profile information is not stored on the device but rather in the cloud or on enterprise servers. Such off-device locations can provide for easy centralized control of biometric and access profiles. 
         [0035]    As discussed above, step  120  includes receiving biometric data, analyzing that data and comparing the data to a database of users. Part of receiving biometric data, specifically via camera  21  is to capture an image of user(s) perceiving display  14 . Accordingly, an additional feature is to monitor for, warn of, and prevent “over the shoulder” readers. While the user is looking at device  10 , camera  21  is looking back at the user. Consequently, camera  21  is able to capture any individual other than the user that is also viewing or attempting to view display  14 . Recognition module  22  is able to discern multiple biometric signatures within a single image taken by camera  21 . Thus, embodiments are envisioned where presentation of content requires that all detected users have access privileges. Other embodiments are envisioned where upon the detection of multiple users, the highest or lowest security levels are used to determine access. 
         [0036]    While the above discussion of access control process  100  discusses allowing access to content step  150  and the step of offering content accessible to the current user, step  170 , it should be appreciated that steps  170  and  150  can be combined. Similarly, the process of requesting access to application  28  can be implicitly requesting access to application profile  34 . In such embodiments, requesting and invoking application  28 , subject to the biometric security access control, automatically invokes application profile  34  for the detected authorized user. Similarly, a request to access device  10  can automatically invoke a device level profile that selectively presents only applications  34  for which the user is authorized. 
         [0037]    The above-described device and method provide for a “medium” security model where, as discussed, once content is accessed, it can be shared by allowing other users to view display  14 . Embodiments are also envisioned where a “high” security model is employed. Such a “high” security model involves biometric detection during presentation of content. Thus, as opposed to sampling biometric data only upon an access request, the “high” security model continually or periodically samples and verifies that the user(s) is authorized to view the displayed content. The above described device can also be employed to provide a “low” security model. Such a “low” security model provides that only certain applications or content be subject to the biometric verification. 
         [0038]    Having described the device and method above, examples are provided below. 
       EXAMPLE 1 
     Mail Accounts 
       [0039]    Device  10  is a tablet capable of accessing multiple email accounts for a family. One account is a general account for the family. A second account is for a personal account of the father. A third account is for a personal account of the mother. Fourth and fifth accounts are business accounts for the father and mother, respectively. When a user attempts to access the email program, device  10  completes a biometric check, and based on the result, provides access to the email accounts as shown in the following table: 
         [0000]    
       
         
               
               
               
             
           
               
                   
                   
               
               
                   
                 User 
                 Available Accounts 
               
               
                   
                   
               
             
             
               
                   
                 Father 
                 General, Father&#39;s personal, Father&#39;s work 
               
               
                   
                 Mother 
                 General, Mother&#39;s personal, Mother&#39;s work 
               
               
                   
                 Child 
                 General 
               
               
                   
                 Unknown 
                 General -or- none 
               
               
                   
                   
               
             
          
         
       
     
       EXAMPLE 2 
     Media or Other File Based Content 
       [0040]    Device  10  is a tablet. Device  10  includes preloaded file content  32 , specifically video and audio. Device  10  further has access to additional file content  32  stored in the cloud or otherwise. Based on the user as determined by the biometric data, portions of this content are selectively available. Accordingly, users can be screened from age-inappropriate material while allowing similar but age appropriate material to be consumed. Such determinations can be a function of specific permissions linking a user to specific content, where such linking is stored with the content, or user profiles can have flags or indications that indicate larger classes of file content  32  to which the user is availed. File content  32  can thus be categorized into such classes. 
       EXAMPLE 3 
     Parental Controls 
       [0041]    As discussed in Example 2, user profiles can have indications that indicate larger classes of file content  32  to which a user is availed. Accordingly, certain members of a family may be permitted to watch “G” rated content. Other members may be allowed to watch “PG” rated content. 
         [0042]    Furthermore, biometric identification can be used to filter access to the entire device. A curfew can be associated with a particular user. If a user subject to a curfew attempts to access the device during a curfew time, such access is permitted. A child is thus prevented from pretending to be asleep while actually having a tablet hidden under the covers and watching a video. 
         [0043]    Similarly, the device can keep track of the amount of time each user is using device  10  and use that data to enforce usage limits. 
       EXAMPLE 4 
     Applications 
       [0044]    As previously discussed, permission to run an application is one of the levels of security envisioned by this disclosure. In addition to changing an application profile  34 , an application can alter its operation in response to a determination of the user accessing it. One such example includes pre-populating a list of frequently used files or user created files. A second example includes restoring a saved game point specific to the user. 
         [0045]    Devices  10  can also be used for applications, such as games or otherwise, where specific users are allowed specific inputs and inputs have differing effects depending on the user who has input them. One such example is in “pass-and-play” games. One user makes a move, such as moving a virtual chess piece. The first user then passes tablet  10  to a second user. Tablet  10  then determines the biometric data of the holder of tablet  10  and upon determining that it is the second user, switches the board perspective and allows the second user to move his/her pieces. Still further, embodiments are envisioned for use where individual users have private game views, such as Scrabble, where each user is privately shown his chosen tiles that are available to play. Such embodiments include access control that prevents users from viewing the private views of other players by using biometric detection to link a player with the correct private view. 
         [0046]    Similarly, applications regarding permissions settings and configurations can be restricted to only allow certain users to make changes thereto. The biometric determination can be done independent of user login so that even after a user is logged into a device, the method and apparatus can continue to analyze whether content is being accessed and perform the operations independent of the user login. 
         [0047]    The above detailed description and the examples described therein have been presented for the purposes of illustration and description only and not for limitation. For example, the operations described may be done in any suitable manner. The method steps may be done in any suitable order still providing the described operation and results. It is therefore contemplated that the present embodiments cover any and all modifications, variations or equivalents that fall within the spirit and scope of the basic underlying principles disclosed above and claimed herein.