Patent Description:
<CIT> discloses an acquiring unit which acquires a captured image of a user, an extracting unit which extracts first feature data and second feature data of the user from the image, and an authentication unit which authenticates the user based on the first and second feature data.

<CIT> discloses an authenticator worn by a user which is capable of communicating with remotely located electronic devices.

<CIT> discloses a biometrics identification module which communicates with user sensing devices to authenticate user transactions.

Viewed from a first aspect, the invention provides a computer-implemented method comprising: executing an initial login operation of the user in response to receiving user credentials; capturing, by a detection device coupled to a computer, characteristics of a target at the time of the initial login operation, wherein the characteristics of the target comprises a unique wireless signal; associating the characteristics of the target with the user credentials only during this login session; wherein the detection by the detection device of the characteristics of the target causes a resetting of an inactivity timer; automatically executing, by the computer, a temporary logoff operation of a user at a conclusion of the inactivity timer; initiating, by the computer, an operation of a logoff timer in response to the execution of the temporary logoff operation; automatically executing, by the computer, a login operation of the user when the characteristics are redetected by the detection device during the operation of the logoff timer, wherein the computer executes a full logout operation of the user at a conclusion of the logoff timer, and wherein the detection device comprises a transceiver, the target comprises a wireless beacon on the user, and wherein the unique wireless signal is outputted by the wireless beacon and detectable by the transceiver.

Viewed from a second aspect, the invention provides a detection system comprising a computer and a detection device, the computer comprising a memory and a processor, the memory storing program instructions thereon, the program instructions executable by the processor to cause: executing an initial login operation of the user in response to receiving user credentials; capturing, by the detection device coupled to the computer, characteristics of a target at the time of the initial login operation, wherein the characteristics of the target comprises a unique wireless signal; associating the characteristics of the target with the user credentials only during this login session; wherein the detection by the detection device of the characteristics of the target causes a resetting of an inactivity timer; automatically executing, by the computer, a temporary logoff operation of a user at a conclusion of the inactivity timer; initiating, by the computer, an operation of a logoff timer in response to the execution of the temporary logoff operation; automatically executing, by the computer, a login operation of the user when the characteristics are redetected by the detection device during the operation of the logoff timer, wherein the computer executes a full logout operation of the user at a conclusion of the logoff timer, and wherein the detection device comprises a transceiver, the target comprises a wireless beacon on the user, and wherein the unique wireless signal is outputted by the wireless beacon and detectable by the transceiver.

Viewed from a third aspect of the invention, a computer program product is provided. The computer program product includes a computer readable storage medium having program instructions embodied therewith. The program instructions are executable by a computer coupled to a detection device and configure the computer to carry out the method of the first aspect.

In accordance with one or more embodiments, a system comprises one or more detection devices that detect a target with respect to whether a user remains logged-in. The system can be implemented as a method, computer program product, and/or a device, and is further described herein with respect to, but not limited thereto, a reception desk example. The system will now be described with respect to <FIG>.

<FIG> depicts a detection system <NUM>. The detection system <NUM> can be implemented at a reception desk <NUM> and it comprises a computer <NUM> and a detection device <NUM>. The computer <NUM> comprises a processor <NUM> and a memory <NUM>. The detection device <NUM> can be built-in to the computer <NUM> or it can be a peripheral of the computer and connected via wireless or wired means to the computer (e.g. through a USB connection or Wi-Fi, Bluetooth, or the like). The memory <NUM> of the detection system <NUM> stores program instructions that are executable by the processor <NUM> to cause the operation described herein. The detection device <NUM> can maintain one or more detection zones (e.g., a first detection zone <NUM> and a second detection zone <NUM>) within which characteristics of a target <NUM> are captured and detected. In accordance with one or more embodiments, the target <NUM> can be a device on the user (e.g., a Bluetooth beacon or mobile phone), and the like.

In general, the detection system <NUM> operates to immediately logoff of the computer <NUM> a user when that user is away from the detection system <NUM>, while still providing a user friendly mechanism for the user to log back on to the computer <NUM>. For example, upon the user logging-in, the detection device <NUM> captures characteristics of the target <NUM> associated with the user (not shown) that is logging-in and provides these characteristics to the software on the computer <NUM>. The computer <NUM> then loops an inactivity timer with respect to whether the characteristics are subsequently detected by the detection device <NUM>. At a conclusion of the inactivity timer, the computer <NUM> automatically executes a temporary logoff operation of the user if the characteristics have not been detected. Then, the computer <NUM> initiates a logoff timer in response to the execution of the temporary logoff operation and only automatically executes a login operation of the user when the characteristics are redetected by the detection device <NUM> during the operation of the logoff timer. In accordance with one or more embodiments, the inactivity timer may be configured to execute a temporary logoff operation much sooner than a conventional inactivity timer that was based on mouse movement or keyboard use by a user. This leads to the technical effect and benefit of higher security. The temporary logoff timer allows for the convenience of the user returning to the computer <NUM> and may be a similar length to a conventional inactivity timer so that the overall convenience of the user is about the same with respect to how often the user needs to re-login and submit their respective user credentials. Further, the temporary logoff increases security because someone cannot use the computer <NUM> unless they are the same user or they execute a full new login as a different user.

The detection system <NUM> is an example and is not intended to suggest any limitation as to the scope of use or operability of embodiments described herein (indeed additional or alternative components and/or implementations may be used). Further, while single items are illustrated for items of the detection system <NUM>, these representations are not intended to be limiting and thus, any item may represent a plurality of items.

The computer <NUM> can include any processing hardware, software, or combination of hardware and software utilized by the detection system <NUM> to carry out computer readable program instructions by performing arithmetical, logical, and/or input/output operations. The computer <NUM> operates to provide front desk and reception services to customer, along with transmit and receive communications to and from the detection device <NUM>. The computer <NUM> operates two or more timers (e.g., an inactivity timer and a logoff timer) with respect to the operations described herein. The processor <NUM> can comprise one or more central processing units (CPU(s)), also referred to as processing circuits, coupled via a system bus to the memory <NUM> and various other components (e.g., the detection device <NUM>). The memory <NUM> can include a read only memory (ROM) and a random access memory (RAM). In accordance with one or more embodiments, the computer <NUM> can record in a log of the memory <NUM> when a user logs in or out with respect to the first login, the temporary logouts based on the inactivity timer, the automatic logins based on the detection of the target <NUM>, etc. In this regard, when a valid user successfully logs into or out of the detection system <NUM>, the log can generate a line indicating a user name date and time stamp.

The detection device <NUM> can be an electro-mechanical component that detects events in an environment and generates an electrical signal as a function of the events (e.g., generates an electrical signal in response to detecting characteristics of the target <NUM>). The detection device <NUM> can utilize software and/or firmware to carry out operations particular thereto. The software and/or firmware utilized by the detection device <NUM> can be provided with respect to continuously sensing characteristics of the target <NUM>. The detection device includes a transceiver (e.g., communications and/or interface adapter), the target includes a wireless beacon on the user (e.g., an electronic bracelet), and the characteristics include a unique wireless signal outputted by the wireless beacon and detectable by the transceiver.

The first detection zone <NUM> and the second detection zone <NUM> are operation areas to and from which the target <NUM> can move. In the case of when the detection device <NUM> is a transceiver, the second detection zone <NUM> can be a detection area defined by a radius R. Note that either detection zone <NUM> and <NUM> can comprise or overlap with a wide area network designed for communications with the target <NUM> (e.g., any wireless communication architecture, such as Bluetooth, Wi-Fi, ZigBee, etc.) or computer <NUM>.

<FIG> depicts a process flow <NUM> of the detection system <NUM> according to one or more embodiments. The process flow begins at block <NUM>, where the detection system <NUM> receives user credentials to execute a login operation of a user. The user credentials can include a username and a password unique to the user logging-in, or be of any other form for identifying and verifying a user with a computer software program. The login operation can include an operation by the computer <NUM> that provides a unique interface tailored to the user providing the user credentials.

At block <NUM>, the detection system <NUM> captures characteristics of a target <NUM> with respect to the user credentials and the login operation of the user. The characteristics can correspond to distinguishing features of a radio signal, etc. At block <NUM>, the detection system <NUM> initiates an inactivity timer. The inactivity timer is a mechanism that tracks an amount of time in which no activity has taken place with respect to the computer <NUM>. The inactivity timer counts, either up or down, to a predefined variable. The predefined variable is a time limit that can be set by an administrator, such as <NUM> seconds, <NUM> seconds, <NUM> seconds, <NUM> minutes, <NUM> minutes, <NUM> minutes, and the like (e.g., any time greater than zero).

At decision block <NUM>, the detection device <NUM> determines whether any characteristics are present (e.g., within one or more detection zones). If the detection device <NUM> determines that the characteristics of the target <NUM> are present, then the process flow <NUM> proceeds to block <NUM> (e.g., as indicated by the YES arrow). At block <NUM>, the detection system <NUM> resets the inactivity time. In this regard, it is clear that the user is still local to the computer <NUM> and, thus, the threat to an unauthorized person using the computer <NUM> is low. After block <NUM>, the process flow <NUM> returns to decision block <NUM>. If the detection device <NUM> determines that the characteristics of the target <NUM> are not present, then the process flow <NUM> proceeds to decision block <NUM> (e.g., as indicated by the NO arrow).

At decision block <NUM>, the detection system <NUM> determines whether the inactivity timer has concluded. If the detection system <NUM> determines that the inactivity timer has not concluded, then the process flow <NUM> proceeds back to decision block <NUM> (e.g., as indicated by the NO arrow). In this regard, the user has not been absent from the computer <NUM> for a sufficient amount of time to warrant a logoff. If the detection system <NUM> determines that the inactivity timer has concluded, then the process flow <NUM> proceeds to block <NUM> (e.g., as indicated by the YES arrow).

At block <NUM>, the detection system <NUM> automatically executes a temporary logoff operation of the user. In this regard, it is clear that the user is still away from the computer <NUM> and has been for a significant amount of time. Thus, the threat to an unauthorized person using the computer <NUM> is high. At block <NUM>, the detection system <NUM> initiates a logoff timer.

At decision block <NUM>, the detection device <NUM> determines whether any characteristics are present (e.g., within one or more detection zones). If the detection device <NUM> determines that the characteristics of the target <NUM> are present, then the process flow <NUM> proceeds to block <NUM> (e.g., as indicated by the YES arrow). At block <NUM>, the detection system <NUM> automatically executes the login operation of the user. In this regard, it is clear that the user has return to the computer <NUM> and rather than require the manual entry of the previous user credentials, the computer <NUM> can automatically logon the user based on the characteristics of the target <NUM> being present. After block <NUM>, the process flow <NUM> returns to block <NUM>. If the detection device <NUM> determines that the characteristics of the target <NUM> are not present, then the process flow <NUM> proceeds to decision block <NUM> (e.g., as indicated by the NO arrow).

At decision block <NUM>, the detection system <NUM> determines whether the logoff timer has concluded. If the detection system <NUM> determines that the logoff timer not has concluded, then the process flow <NUM> proceeds back to decision block <NUM> (e.g., as indicated by the NO arrow). If the detection system <NUM> determines that the logoff timer has concluded, then the process flow <NUM> proceeds to block <NUM> (e.g., as indicated by the YES arrow). At block <NUM>, the detection system <NUM> automatically executes a full logout operation of the user. At this stage, the computer <NUM> will require the manual entry of any user credentials for access to the computer <NUM> to be granted.

Turning now to <FIG>, the above detection system will now be further described. <FIG> depicts a detection system <NUM> using biometrics. The detection system <NUM> can be implemented at a reception desk <NUM> and it comprises a computer <NUM> and a detection device <NUM> (e.g., camera). The computer <NUM> comprises a processor <NUM> and a memory <NUM>. The memory <NUM> of the detection system <NUM> stores program instructions that are executable by the processor <NUM> to cause the operation described herein. The detection device <NUM> can maintain a detection zone <NUM> (e.g., a field of view) within which one or more targets 320a and 320b can be captured and detected (where target 320a is a user and target 320b is a name tag).

In general, the detection system <NUM> can operate facial recognition, e.g., biometrics software as a service. In this regard, a user can login into the computer <NUM> using their user credentials and, after successfully logging-in to the computer <NUM>, an internal facial recognition software of the computer <NUM> initiates and tracks the user's face or the name tag characters (e.g., using the detection device <NUM>). Thus, when the user goes away from the computer <NUM>, the computer <NUM> automatically logs-off and will only automatically log-on (without a manual login) if the same user returns to the computer <NUM> and is identified by the facial recognition software. In this example, the user is not initially identified by the facial recognition software, but rather they are identified with their normal user account identification and then authenticated by their account password. Further, the facial characteristics that are captured as part of process flow <NUM> at block <NUM> may only be temporarily associated with the current user that is logged into the computer <NUM>. After the logoff timer expires (block <NUM>) the characteristics captured in block <NUM> may be forgotten by the computer <NUM>. Thus, the facial recognition ensures that the same person that logged in is continuing to use the software. If the person changes from a first user to a second user, the facial recognition software determines the change and the computer <NUM> will automatically log-off. If the user logs in a first time, but then leaves the detection zone <NUM> then the computer <NUM> will automatically log-off. Later, if the user returns at some later time and logs-in a second time, but they are wearing different clothing, or they have altered their face (e.g. by shaving) the detection device <NUM> will possibly identify different characteristics of the user that may on the second login from the first login. One example of a different characteristic is the color tone of their clothing.

<FIG> depicts a detection system <NUM> using Bluetooth communication according to one or more embodiments. The detection system <NUM> can be implemented at a reception desk <NUM> and it comprises a computer <NUM> and a detection device <NUM> (e.g., transceiver). The computer <NUM> comprises a processor <NUM> and a memory <NUM>. The memory <NUM> of the detection system <NUM> stores program instructions that are executable by the processor <NUM> to cause the operation described herein. The detection device <NUM> can maintain a detection zone <NUM> with a radius R (e.g., a detection area) within which one or more targets <NUM> can be captured and detected (where target <NUM> is a bracelet or Bluetooth wearable badge).

In general, each user interacting with the detection system <NUM> can have a corresponding Bluetooth wearable badge <NUM> that can be applied or fixed to a shirt during working hours. A user can login into the computer <NUM> using their user credentials and, after successfully logging-in to the computer <NUM>, the corresponding Bluetooth wearable badge <NUM> will advertise and communicate the computer <NUM>. Thus, when the user goes away from the computer <NUM>, the computer <NUM> automatically logs-off and will only automatically log-on (without a manual login) if the same user having the same badge <NUM> returns to the computer <NUM> and is identified by the corresponding Bluetooth wearable badge <NUM>.

In view of the above, the technical effects and benefits of the system described herein include a fully secured system only accessed by authorized staff via face detection or Bluetooth communication, such that a receptionist need not worry if they temporarily forgot to lock a computer or logoff when they step away (indeed the system will automatically logoff).

Claim 1:
A computer-implemented method comprising:
executing an initial login operation of the user in response to receiving user credentials;
capturing (<NUM>), by a detection device (<NUM>) coupled to a computer (<NUM>), characteristics of a target (<NUM>) at the time of the initial login operation, wherein the characteristics of the target comprises a unique wireless signal; and
associating the characteristics of the target with the user credentials only during this login session;
wherein the detection by the detection device of the characteristics of the target causes a resetting of an inactivity timer;
automatically executing (<NUM>), by the computer, a temporary logoff operation of a user at a conclusion of the inactivity timer;
initiating (<NUM>), by the computer, an operation of a logoff timer in response to the execution of the temporary logoff operation; and
automatically executing (<NUM>), by the computer, a login operation of the user when the characteristics are redetected by the detection device during the operation of the logoff timer, wherein the computer executes a full logout operation of the user at a conclusion of the logoff timer,
wherein the detection device comprises a transceiver, the target comprises a wireless beacon (<NUM>) on the user, and wherein the unique wireless signal is outputted by the wireless beacon and detectable by the transceiver.