Trust metrics on shared computers

• US 8,875,253 B2
• Filed: 07/03/2012
• Issued: 10/28/2014
• Est. Priority Date: 07/03/2012
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: St. Clair, Luke
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US13/541,244
• Publication Number:
  US 20140013404A1
• Time in Patent Office: 847 Days
• Field of Search: 726/5
• US Class Current: 726/5
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

In one embodiment, a method includes receiving data uniquely identifying a particular user to the verification authority and a request to access a shared device. The shared device being configured for use by at least a number of users. The method also includes accessing a social graph of the particular user to determine whether one or more users in the social graph have previously accessed the shared device; and displaying on a display of the mobile device information indicating which of the users in the social graph have previously accessed the shared device.

Claims

1. A method comprising:

by a verification authority, receiving data uniquely identifying a particular one of a plurality of users to the verification authority and a request to access a shared device, the shared device being configured for use by at least the plurality of users;

by the verification authority, accessing a social graph of the particular user to determine whether one or more users in the social graph have previously accessed the shared device; and

by the verification authority, transmitting to a display of the mobile device information indicating which of the users in the social graph have previously accessed the shared device.

2. The method of claim 1, further comprising:

determining whether an account of the users in the social graph had been compromised subsequent to accessing the shared device, the account being on a social-networking system; and

displaying on the display a trust-based metric indicating a number of the users in the social graph with the account compromised subsequent to accessing the shared device.

3. The method of claim 2, wherein the trust-based metric comprises data from an extended social graph of the particular user with users not directly connected to the particular user.

4. The method of claim 2, further comprising determining whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.

5. The method of claim 1, wherein displaying information indicating the users in the social graph that accessed the shared device comprising displaying an image of each of the users in the social graph that previously accessed the shared device.

6. The method of claim 1, wherein the shared device is registered with the verification authority.

7. The method of claim 1, wherein the data uniquely identifying the particular user to the verification authority comprises a digital credential transmitted by the mobile device, the digital credential uniquely identifying the particular user.

8. One or more computer-readable non-transitory storage media embodying logic configured when executed to:

receive data uniquely identifying a particular one of a plurality of users to the verification authority and a request to access a shared device, the shared device being configured for use by at least the plurality of users;

access a social graph of the particular user to determine whether one or more users in the social graph have previously accessed the shared device; and

transmit to a display of the mobile device information indicating which of the users in the social graph have previously accessed the shared device.

9. The media of claim 8, wherein the logic is further configured to:

determine whether an account of the users in the social graph had been compromised subsequent to accessing the shared device, the account being on a social-networking system; and

display on the display a trust-based metric indicating a number of the users in the social graph with the account compromised subsequent to accessing the shared device.

10. The media of claim 9, wherein the trust-based metric comprises data from an extended social graph of the particular user with users not directly connected to the particular user.

11. The media of claim 9, wherein the logic is further configured to determine whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.

12. The media of claim 8, wherein the logic is further configured to display an image of each of the users in the social graph that previously accessed the shared device.

13. The media of claim 8, wherein the data uniquely identifying the particular user to the verification authority comprises a digital credential transmitted by the mobile device, the digital credential uniquely identifying the particular user.

14. A method comprising:

by an application on a mobile device of a particular one of a plurality of users, transmitting data uniquely identifying the particular user to a verification authority and a request to access a shared device, the shared device being configured for use by at least the plurality of users; and

by the application, presenting on a display of the mobile device information from the verification authority indicating which of one or more users in a social graph of the particular user have previously accessed the shared device, the verification authority accessing the social graph to determine whether one or more of the users in the social graph have previously accessed the shared device.

15. The method of claim 14, further comprising displaying on the display a trust-based metric from the verification authority indicating a number of the users in the social graph having an account compromised subsequent to accessing the shared device, the verification authority determining whether an account of the users in the social graph had been compromised subsequent to accessing the shared device, the account being on a social-networking system.

16. The method of claim 15, wherein the trust-based metric comprises data from an extended social graph of the particular user with users not directly connected to the particular user.

17. The method of claim 15, wherein the verification authority determines whether the account had been compromised based on whether a password of the account has been reset within a pre-determined period of time subsequent to accessing shared device.

18. The method of claim 14, wherein displaying information indicating the users in the social graph that accessed the shared device comprising displaying an image of each of the users in the social graph that previously accessed the shared device.

19. The method of claim 14, wherein the shared device is registered with the verification authority.

20. The method of claim 14, wherein the data uniquely identifying the particular user to the verification authority comprises a digital credential uniquely identifying the particular user.