User identification based access control

• US 10,050,967 B2
• Filed: 02/18/2014
• Issued: 08/14/2018
• Est. Priority Date: 02/18/2014
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Brique, Olivier, Bocchetti, Salvatore
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/183,400
• Publication Number:
  US 20150237052A1
• Time in Patent Office: 1,638 Days
• Field of Search: 726 1- 4, 726 26- 27, 717172-174, 717176, 713161, 705 1453, 725 12
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security

Abstract

A user'"'"'s access to software applications installed on a device is limited by evaluating the context in which the user requests access to the application and determining, based on the context analysis, whether or not the user is to be given access to the application. When it is determined that the user requesting access is not a primary authorized user, the primary authorized user may be notified of the attempt to access the application.

Claims

1. A method of controlling application-level access offered by a user device, by operating a control device communicatively coupled to the user device over a communication network;

comprising;

providing, at the control device, a control interface to specify an access policy for the user device, the access policy specifying, for an application on the user device, a rule that specifies conditions for allowing access to the application, denying access to the application and allowing access with a notification to the application, the conditions being dependent upon an identity of a user, the control interface allowing specifying a global access policy that is applicable to all applications installed on the user device as the access policy;

transferring the access policy to the user device;

determining, by the user device, the identity of the user by;

detecting a trusted device in a proximity of the control device,

estimating the identity based on a user behavior received from the user in response to a query to the user configured to test an attribute of the user, or

a combination thereof; and

controlling, by the user device, application-level access to applications installed on the user device in accordance with the access policy and determined identity of the user.

2. The method of claim 1, wherein the rule for access with the notification includes an identity of a trusted user to whom to send the notification.

3. The method of claim 2, wherein the notification comprises notifying a parent user.

4. The method of claim 1, wherein the estimating the identity of the user includes:

posing one or more question on the user interface;

receiving at least one response to the posed one or more questions; and

estimating a user'"'"'s age based on the received at least one response.

5. The method of claim 1, wherein the estimating the identity of the user includes:

performing a biometric measurement.

6. The method of claim 1, wherein the estimating the identity of the user includes:

receiving a contextual input; and

estimating a user'"'"'s age based on the received contextual input.

7. The method of claim 1, wherein the providing the control interface to specify the access policy includes:

providing a user-device-specific interface that enables overriding the global access policy for a specific user device.

8. A system for controlling application-level access offered by a user device;

comprising;

an apparatus comprising at least one apparatus processor and at least one apparatus non-transitory memory containing instructions that, when executed by the at least one apparatus processor, cause the at least one apparatus processor to perform processing comprising;

displaying a control interface allowing entry of an access policy for the user device, the access policy specifying, for an application on the user device, a rule that specifies conditions for allowing access to the application, denying access to the application and allowing access with a notification to the application, the conditions being dependent upon an identity of a user, the control interface allowing specifying a global access policy that is applicable to all applications installed on the user device as the access policy;

generating a configuration file from the access policy; and

transferring the configuration file to the user device; and

the user device comprising at least one user device processor and at least one user device non-transitory memory containing instructions that, when executed by the at least one user device processor, cause the at least one user device processor to perform processing comprising;

determining the identity of the user by;

detecting a trusted device in a proximity of the control device,

estimating the identity based on a user behavior received from the user in response to a query to the user configured to test an attribute of the user, or

a combination thereof, and

controlling application-level access to applications installed on the user device in accordance with the access policy and determined identity of the user.

9. The system of claim 8, wherein the configuration file module includes in the configuration file a time during which the configuration file is to remain effective.