User presence detection for altering operation of a computing system

• US 20070300312A1
• Filed: 06/22/2006
• Published: 12/27/2007
• Est. Priority Date: 06/22/2006
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Chitsaz, Behrooz, Kirovski, Darko
• Application Number:
  US11/472,575
• Publication Number:
  US 20070300312A1
• Time in Patent Office: Days
• US Class Current: 726/34
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect

Abstract

Various technologies and techniques are disclosed that modify a computer system based on user presence detection. An input device detects whether a user is present and adjusts the operation of an application accordingly. For example, ports or services can be disabled to increase security, a logging operation can be increased, a port or service that was previously disabled can be enabled, at least one system feature based on a number of users present can be adjusted, etc. If the user is detected to be absent, for example, then the system can disable at least one system port or service that does not need to be enabled while the user is absent to increase the security state of the computer. An attack directory can be accessed to retrieve information about the most likely services to be attacked, and that information can be used to help determine what services to disable.

Claims

1. A method for enhancing security of a computer when a user is detected to be absent comprising the steps of:

detecting an absence of a user from a computer system; and

disabling at least one system port or service on the computer system that does not need to be enabled while the user is absent to increase a security state of the computer system.

2. The method of claim 1, further comprising:

accessing an external attack service to retrieve a most likely list of one or more services to be attacked on the computer system.

3. The method of claim 2, wherein the at least one system port or service disabled is at least in part based upon the list retrieved from the external attack service.

4. The method of claim 2, wherein the external attack service is accessed using a web service.

5. The method of claim 2, wherein the external attack service provides access to information about attacks that are most likely to happen at a current moment.

6. The method of claim 1, wherein the at least one system port or service disabled is a file-sharing port.

7. The method of claim 1, wherein the at least one system port or service disabled is a voice-over-IP port.

8. The method of claim 1, wherein the absence of the user is detected from a period of inactivity on an input device.

9. The method of claim 1, wherein the absence of the user is detected using a camera.

10. The method of claim 1, wherein the absence of the user is detected using a sensor.

11. A computer-readable medium having computer-executable instructions for causing a computer to perform the steps recited in claim 1.

12. A computer-readable medium having computer-executable instructions for causing a computer to perform steps comprising:

use at least one input device to detect whether one or more users are present;

access an attack directory to retrieve information that includes at least one most likely service to be attacked; and

use at least part of the information retrieved from the attack directory along with the detection of whether one or more users are present to make at least one adjustment to a system operation.

13. The computer-readable medium of claim 12, further having computer-executable instructions for causing a computer to perform the step comprising:

detect that the user is absent.

14. The computer-readable medium of claim 13, further having computer-executable instructions for causing a computer to perform steps comprising:

upon detecting that the user is absent, use at least part of the information retrieved from the attack service to determine a service to disable.

15. A method for adjusting the operation of a computer based on a classification of a user present comprising the steps of:

using at least one input device to detect that at least one user is present;

determining a classification associated with the at least one user present; and

adjusting an operation of at least one application based on the classification of the at least one user present.

16. The method of claim 15, wherein the classification of the user is a minor child.

17. The method of claim 16, wherein the operation includes increasing a logging action for the at least one application.

18. The method of claim 16, wherein the operation includes disabling at least one feature in the at least one application.

19. The method of claim 15, wherein the input device is a camera.

20. A computer-readable medium having computer-executable instructions for causing a computer to perform the steps recited in claim 15.