Systems and methods for identifying unauthorized users of an electronic device

• US 10,318,716 B2
• Filed: 12/04/2015
• Issued: 06/11/2019
• Est. Priority Date: 02/19/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Nakajima, Taido, Rahul, Pareet, Lin, Gloria
• Primary Examiner(s): Blount, Eric
• Application Number:
  US14/960,253
• Publication Number:
  US 20160154950A1
• Time in Patent Office: 1,285 Days
• Field of Search: 340 53, 340541, 340500, 3405391, 34053911, 3405681, 340571, 455410, 455411
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

This is generally directed to identifying unauthorized users of an electronic device. In some embodiments, an unauthorized user of the electronic device can be detected by identifying particular activities that may indicate suspicious behavior. In some embodiments, an unauthorized user can be detected by comparing the identity of the current user to the identity of the owner of the electronic device. When an unauthorized user is detected, various safety measures can be taken. For example, information related to the identity of the unauthorized user, the unauthorized user'"'"'s operation of the electronic device, or the current location of the electronic device can be gathered. As another example, functions of the electronic device can be restricted. In some embodiments, the owner of the electronic device can be notified of the unauthorized user by sending an alert notification through any suitable medium, such as, for example, a voice mail, e-mail, or text message.

Claims

1. A method for denying unauthorized usage of an electronic device, the method comprising, at the electronic device:

collecting a first set of data associated with a current usage identity, wherein the first set of data includes a first motion profile associated with the current usage identity;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes a second motion profile associated with the authorized usage identity;

determining that an unauthorized usage of the electronic device is occurring by comparing at least the first and second motion profiles; and

in response to determining that the electronic device is communicably coupled to a host device;

denying access to at least one function provided by the electronic device,

gathering information associated with the host device, and

communicating, to at least one electronic device associated with the electronic device, a notification that;

(i) indicates the unauthorized usage, and

(ii) includes the information associated with the host device.

2. The method of claim 1, wherein the current usage identity includes one or more of an electrocardiogram (ECG or EKG) associated with a heartbeat associated with a current user of the electronic device, a photograph of the current user of the electronic device, or a voice recording of the current user of the electronic device.

3. The method of claim 2, wherein determining whether the unauthorized usage of the electronic device is occurring further comprises:

comparing at least one of the electrocardiogram, photograph or voice recording to a counterpart electrocardiogram, photograph, or voice recording included in the authorized usage identity.

4. The method of claim 1, wherein the current usage identity is captured during at least one of the following:

during a predetermined regular period of time, when the electronic device is turned on, when an input to execute one or more functions on the electronic device is received, or when the electronic device receives a communication signal.

5. The method of claim 1, further comprising, in response to determining that the unauthorized usage of the electronic device is occurring:

determining that a threshold delay is satisfied, and

backing up data stored on the electronic device to a backup server.

6. The method of claim 5, further comprising, subsequent to backing up the data to the backup server:

deleting the data from the electronic device.

18. The method of claim 1, wherein the first and second motion profiles are gathered using at least one accelerometer included on the electronic device, and the first and second motion profiles include vibrational data that indicate one or more of walking, running, riding on a train, riding in a car, flying in a plane, or riding on a bike.

7. At least one non-transitory computer readable medium storing instructions that, when executed by at least one processor included in an electronic device, cause the electronic device to carry out steps that include:

collecting a first set of data associated with a current usage identity, wherein the first set of data includes a first motion profile associated with the current usage identity;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes a second motion profile associated with the authorized usage identity;

determining that an unauthorized usage of the electronic device is occurring by comparing at least the first and second motion profiles; and

in response to determining that the electronic device is communicably coupled to a host device;

denying access to at least one function provided by the electronic device,

gathering information associated with the host device, and

communicating, to at least one electronic device associated with the electronic device, a notification that;

(i) indicates the unauthorized usage, and

(ii) includes the information associated with the host device.

8. The at least one non-transitory computer readable medium of claim 7, wherein the current usage identity includes one or more of an electrocardiogram (ECG or EKG) associated with a heartbeat associated with a current user of the electronic device, a photograph of the current user of the electronic device, or a voice recording of the current user of the electronic device.

9. The at least one non-transitory computer readable medium of claim 8, wherein determining whether the unauthorized usage of the electronic device is occurring further comprises:

comparing at least one of the electrocardiogram, photograph or voice recording to a counterpart electrocardiogram, photograph, or voice recording included in the authorized usage identity.

10. The at least one non-transitory computer readable medium of claim 7, wherein the current usage identity is captured during at least one of the following:

during a predetermined regular period of time, when the electronic device is turned on, when an input to execute one or more functions on the electronic device is received, or when the electronic device receives a communication signal.

11. The at least one non-transitory computer readable medium of claim 7, wherein the steps further include, in response to determining that the unauthorized usage of the electronic device is occurring:

determining that a threshold delay is satisfied, and

backing up data stored on the electronic device to a backup server.

19. The at least one non-transitory computer readable medium of claim 7, wherein the first and second motion profiles are gathered using at least one accelerometer included on the electronic device, and the first and second motion profiles include vibrational data that indicate one or more of walking, running, riding on a train, riding in a car, flying in a plane, or riding on a bike.

12. An electronic device, comprising:

at least one memory; and

at least one processor configured to cause the electronic device to carry out steps that include;

collecting a first set of data associated with a current usage identity, wherein the first set of data includes a first motion profile associated with the current usage identity;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes a second motion profile associated with the authorized usage identity;

determining that an unauthorized usage of the electronic device is occurring by comparing at least the first and second motion profiles; and

in response to determining that the electronic device is communicably coupled to a host device;

denying access to at least one function provided by the electronic device,

gathering information associated with the host device, and

communicating, to at least one electronic device associated with the electronic device, a notification that;

(i) indicates the unauthorized usage, and

(ii) includes the information associated with the host device.

13. The electronic device of claim 12, wherein the current usage identity includes one or more of an electrocardiogram (ECG or EKG) associated with a heartbeat associated with a current user of the electronic device, a photograph of the current user of the electronic device, or a voice recording of the current user of the electronic device.

14. The electronic device of claim 13, wherein determining whether the unauthorized usage of the electronic device is occurring further comprises:

comparing at least one of the electrocardiogram, photograph or voice recording to a counterpart electrocardiogram, photograph, or voice recording included in the authorized usage identity.

15. The electronic device of claim 12, wherein the current usage identity is captured during at least one of the following:

during a predetermined regular period of time, when the electronic device is turned on, when an input to execute one or more functions on the electronic device is received, or when the electronic device receives a communication signal.

16. The electronic device of claim 12, wherein the steps further include, in response to determining that the unauthorized usage of the electronic device is occurring:

determining that a threshold delay is satisfied, and

backing up data stored on the electronic device to a backup server.

17. The electronic device of claim 16, wherein the steps further include, subsequent to backing up the data to the backup server:

deleting the data from the electronic device.

20. The electronic device of claim 12, wherein the first and second motion profiles are gathered using at least one accelerometer included on the electronic device, and the first and second motion profiles include vibrational data that indicate one or more of walking, running, riding on a train, riding in a car, flying in a plane, or riding on a bike.