Systems and methods for identifying unauthorized users of an electronic device

• US 10,657,238 B2
• Filed: 06/04/2019
• Issued: 05/19/2020
• Est. Priority Date: 02/19/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Nakajima, Taido, Rahul, Pareet, Lin, Gloria
• Primary Examiner(s): Blount, Eric
• Application Number:
  US16/431,697
• Publication Number:
  US 20190370452A1
• Time in Patent Office: 350 Days
• Field of Search: 340541, 340500, 3405391, 34053911, 3405681, 340571, 455410, 455411
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

This is generally directed to identifying unauthorized users of an electronic device. In some embodiments, an unauthorized user of the electronic device can be detected by identifying particular activities that may indicate suspicious behavior. In some embodiments, an unauthorized user can be detected by comparing the identity of the current user to the identity of the owner of the electronic device. When an unauthorized user is detected, various safety measures can be taken. For example, information related to the identity of the unauthorized user, the unauthorized user'"'"'s operation of the electronic device, or the current location of the electronic device can be gathered. As another example, functions of the electronic device can be restricted. In some embodiments, the owner of the electronic device can be notified of the unauthorized user by sending an alert notification through any suitable medium, such as, for example, a voice mail, e-mail, or text message.

Claims

1. A method for identifying an unauthorized user of an electronic device, the method comprising, at the electronic device, and in response to identifying that at least one condition is satisfied:

collecting a first set of data associated with a current usage identity, wherein the first set of data includes at least one image of a current user of the electronic device;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes information that is associated with at least one image of an authorized user of the electronic device; and

determining, based on comparing the first and second sets of data, that a potential unauthorized usage of the electronic device is occurring; and

in response to determining that the electronic device is communicably coupled to a host device;

gathering information associated with the host device, and

communicating, to at least one computing device associated with the authorized usage entity, a notification that indicates an unauthorized usage of the electronic device, wherein the notification at least includes the information associated with the host device.

2. The method of claim 1, wherein the at least one image comprises at least one digital photograph.

3. The method of claim 1, wherein the information comprises one or more of:

a current global positioning system (GPS) location of the electronic device, or

data associated with an auxiliary computing device with which the electronic device is communicably coupled.

4. The method of claim 3, wherein the data comprises an Internet Protocol (IP) address associated with the auxiliary computing device.

5. The method of claim 1, wherein the at least one condition is satisfied when at least one of the following situations arises:

an incorrect password is input into the electronic device a threshold number of times,

a jailbreak procedure is performed on the electronic device, or

a subscriber identity module (SIM) card is removed from the electronic device.

6. The method of claim 1, further comprising:

determining whether a threshold amount of time has lapsed relative to determining that the unauthorized usage of the electronic device occurred; and

in response to determining that the threshold amount of time has lapsed;

deleting at least one data element stored on the electronic device.

7. The method of claim 6, further comprising, prior to deleting the at least one data element:

providing the at least one data element to a cloud storage service.

8. At least one non-transitory computer readable storage medium configured to store instructions that, when executed by at least one processor included in an electronic device, cause the electronic device to identify an unauthorized user of the electronic device, by carrying out steps that include, in response to identifying that at least one condition is satisfied:

collecting a first set of data associated with a current usage identity, wherein the first set of data includes at least one image of a current user of the electronic device;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes information that is associated with at least one image of an authorized user of the electronic device; and

determining, based on comparing the first and second sets of data, that a potential unauthorized usage of the electronic device is occurring; and

in response to determining that the electronic device is communicably coupled to a host device;

gathering information associated with the host device, and

communicating, to at least one computing device associated with the authorized usage entity, a notification that indicates an unauthorized usage of the electronic device, wherein the notification at least includes the information associated with the host device.

9. The at least one non-transitory computer readable storage medium of claim 8, wherein the at least one image comprises at least one digital photograph.

10. The at least one non-transitory computer readable storage medium of claim 8, wherein the information comprises one or more of:

a current global positioning system (GPS) location of the electronic device, or

data associated with an auxiliary computing device with which the electronic device is communicably coupled.

11. The at least one non-transitory computer readable storage medium of claim 10, wherein the data comprises an Internet Protocol (IP) address associated with the auxiliary computing device.

12. The at least one non-transitory computer readable storage medium of claim 8, wherein the at least one condition is satisfied when at least one of the following situations arises:

an incorrect password is input into the electronic device a threshold number of times,

a jailbreak procedure is performed on the electronic device, or

a subscriber identity module (SIM) card is removed from the electronic device.

13. The at least one non-transitory computer readable storage medium of claim 8, wherein the steps further include:

determining whether a threshold amount of time has lapsed relative to determining that the unauthorized usage of the electronic device occurred; and

in response to determining that the threshold amount of time has lapsed;

deleting at least one data element stored on the electronic device.

14. The at least one non-transitory computer readable storage medium of claim 13, wherein the steps further include, prior to deleting the at least one data element:

providing the at least one data element to a cloud storage service.

15. An electronic device configured to identify an unauthorized user of the electronic device, the electronic device comprising:

at least one processor; and

at least one memory storing instructions that, when executed by the at least one processor, cause the electronic device to perform steps that include, in response to identifying that at least one condition is satisfied;

collecting a first set of data associated with a current usage identity, wherein the first set of data includes at least one image of a current user of the electronic device;

obtaining a second set of data associated with an authorized usage identity, wherein the second set of data includes information that is associated with at least one image of an authorized user of the electronic device; and

determining, based on comparing the first and second sets of data, that a potential unauthorized usage of the electronic device is occurring; and

in response to determining that the electronic device is communicably coupled to a host device;

gathering information associated with the host device, and

communicating, to at least one computing device associated with the authorized usage entity, a notification that indicates an unauthorized usage of the electronic device, wherein the notification at least includes the information associated with the host device.

16. The electronic device of claim 15, wherein the at least one image comprises at least one digital photograph.

17. The electronic device of claim 15, wherein the information comprises one or more of:

a current global positioning system (GPS) location of the electronic device, or

data associated with an auxiliary computing device with which the electronic device is communicably coupled.

18. The electronic device of claim 17, wherein the data comprises an Internet Protocol (IP) address associated with the auxiliary computing device.

19. The electronic device of claim 15, wherein the at least one condition is satisfied when at least one of the following situations arises:

an incorrect password is input into the electronic device a threshold number of times,

a jailbreak procedure is performed on the electronic device, or

a subscriber identity module (SIM) card is removed from the electronic device.

20. The electronic device of claim 15, wherein the at least one processor further causes the electronic device to perform steps that include:

determining whether a threshold amount of time has lapsed relative to determining that the unauthorized usage of the electronic device occurred; and

in response to determining that the threshold amount of time has lapsed;

deleting at least one data element stored on the electronic device.