Data loss prevention of social media content

• US 10,204,384 B2
• Filed: 12/21/2015
• Issued: 02/12/2019
• Est. Priority Date: 12/21/2015
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, LLC
• Inventors: Mehta, Kunal, Woodward, Carl D., Grobman, Steven, Durand, Ryan, Hunt, Simon
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US14/976,397
• Publication Number:
  US 20170177884A1
• Time in Patent Office: 1,149 Days
• CPC Class Codes: A61B 5/117 Identification of persons methods or arrangements for recognising patterns, e.g. fingerprints, G06F18/00, G06V40/00; identification of persons by analysing their voice or speech G10L17/00
• CPC Class Codes: A61B 5/165 Evaluating the state of mind, e.g. depression, anxiety
• CPC Class Codes: A61B 5/4845 Toxicology, e.g. by detection of alcohol, drug or toxic products A61B5/4848 takes precedence
• CPC Class Codes: A61B 5/6898 Portable consumer electronic devices, e.g. music players, telephones, tablet computers
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06Q 10/06395 Quality analysis or management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

In an example, there is disclosed a computing apparatus, comprising: a psychological state data interface to receive psychological state data; one or more logic elements, including at least one hardware element, comprising a verification engine to: receive a requested user action; receive a psychological state input via the psychological state data interface; analyze the psychological state input; and bar the requested user action at least partly responsive to the analyzing.

Claims

1. A computing apparatus, comprising:

an interface to communicatively couple the computing apparatus to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;

one or more logic elements, including at least one hardware logic element, comprising a verification engine to;

intercept an attempt by the enterprise user to provide content to a social media service;

receive a psychological state input via the interface;

analyze the psychological state input to determine according to a biometric profile that the user may be compromised;

at least partly responsive to a determination that the user may be compromised, provide the content to an enterprise data loss prevention (DLP) engine;

receive from the enterprise DLP engine a response that the content includes matter that is inappropriate according to an enterprise policy; and

bar the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

2. The computing apparatus of claim 1, wherein analyzing the psychological state input comprises determining that the enterprise user is intoxicated or psychologically compromised.

3. The computing apparatus of claim 1, wherein the verification engine comprises a trusted execution environment (TEE).

4. The computing apparatus of claim 3, wherein the verification engine is further to perform attestation on the psychological state input via the TEE.

5. The computing apparatus of claim 3, wherein the verification engine is further to attest a capability of a device communicatively coupled via the interface to perform a psychological state measurement.

6. The computing apparatus of claim 1, wherein the computing apparatus further comprises second one or more logic elements comprising the DLP engine.

7. The computing apparatus of claim 1, wherein the verification engine is further to:

provide a second-tier verification; and

permit the attempt by the enterprise user to provide content at least partly responsive to the second-tier verification.

8. The computing apparatus of claim 7, wherein the second-tier verification is a cognitive ability test.

9. The computing apparatus of claim 8, wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

10. The computing apparatus of claim 9, wherein the cognitive ability test is to include at least partly a datum known to the enterprise user but not publicly known.

11. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions to instruct a processor to:

communicatively couple the processor, further comprising an enterprise data loss prevention (DLP) engine, via an interface to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;

intercept an attempt by the enterprise user to provide content to a social media service;

receive a psychological state input via the interface;

analyze the psychological state input, to determine according to a biometric profile that the user may be compromised;

at least partly responsive to a determination that the user may be compromised, provide the psychological state input to the enterprise DLP engine via the interface;

receive from the enterprise DLP engine via the interface a response that the content includes matter that is inappropriate according to an enterprise policy; and

bar the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

12. The one or more tangible, non-transitory computer-readable mediums of claim 11, wherein analyzing the psychological state input comprises determining that the enterprise user is intoxicated or psychologically compromised.

13. The one or more tangible, non-transitory computer-readable mediums of claim 11, wherein the instructions are further to instruct the processor to provision a trusted execution environment (TEE).

14. The one or more tangible, non-transitory computer-readable mediums of claim 13, wherein the instructions are further to instruct the processor to perform attestation on the psychological state input via the TEE.

15. The one or more tangible, non-transitory computer-readable mediums of claim 14, wherein the instructions are further to instruct the processor to attest a capability of a device communicatively coupled via the interface to perform a psychological state measurement.

16. The one or more tangible, non-transitory computer-readable mediums of claim 11, wherein the instructions are further to:

provide a second-tier biometric profile; and

permit the attempt by the enterprise user to provide content at least partly responsive to the second-tier biometric profile.

17. The one or more tangible, non-transitory computer-readable mediums of claim 16, wherein the second-tier biometric profile further comprises a cognitive ability test.

18. The one or more tangible, non-transitory computer-readable mediums of claim 17, wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

19. The one or more tangible, non-transitory computer-readable mediums of claim 17, wherein the cognitive ability test is to include at least partly a datum known to the enterprise user but not publicly known.

20. A computer-implemented method of providing social media verification, comprising:

communicatively coupling a computing device, further comprising an enterprise data loss prevention (DLP) engine, via an interface to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;

intercepting an attempt by the enterprise user to provide content to a social media service;

receiving a psychological state input via the interface;

analyzing the psychological state input to determine according to a biometric profile that the user may be compromised;

at least partly responsive to a determination that the user may be compromised, providing the content to the enterprise DLP engine via the interface;

receiving from the enterprise DLP engine via the interface a response that the content includes matter that is inappropriate according to an enterprise policy; and

barring the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

21. The method of claim 20, wherein analyzing the psychological state input comprises determining that the user is intoxicated or psychologically compromised.

22. The method of claim 20, wherein providing social media verification further comprises providing a second-tier verification.

23. The method of claim 22, wherein the second-tier verification comprises a cognitive ability test.

24. The method of claim 23, wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

25. The method of claim 24, wherein the cognitive ability test is to include at least partly a datum known to the enterprise user but not publicly known.