Camera-based portal content security

• US 9,117,066 B2
• Filed: 01/14/2013
• Issued: 08/25/2015
• Est. Priority Date: 01/14/2013
• Status: Active Grant

• Current Assignee: Sap Portals Israel Ltd (SAP SE)
• Original Assignee: Sap Portals Israel Ltd (SAP SE)
• Inventors: Nathan, Eyal, Kadishay, Yotam, Cooper, Dvir
• Primary Examiner(s): Werner, Brian P
• Application Number:
  US13/740,858
• Publication Number:
  US 20140198958A1
• Time in Patent Office: 953 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

The disclosure generally describes computer-implemented methods, software, and systems for providing a camera-based portal content security mechanism for client devices. One computer-implemented method includes receiving a request for portal content from a client device, determining that the requested portal content requires a camera security operation, notifying the client device that a camera image is needed as a prerequisite to display at least part of the requested portal content, receiving the camera image from the client device, and analyzing, by operation of a computer, the received camera image for more than one viewer.

Claims

1. A computer-implemented method, comprising:

receiving a request for portal content from a client device;

determining that the requested portal content held by a context object requires a camera security operation, wherein the determination includes identifying an object attribute of the context object, wherein the object attribute classifies the portal content as confidential, and wherein the object attribute invokes sending a request for a camera image to the client device;

sending the request for a camera image to the client device, wherein the request for a camera image places the client device on notice that a camera image is needed as a prerequisite to display at least part of the requested portal content;

receiving a preprocessed camera image from the client device, the preprocessing having analyzed the camera image for more than one viewer; and

analyzing, by operation of a computer, the received preprocessed camera image for more than one viewer.

2. The computer-implemented method of claim 1, further comprising:

activating the client device camera;

attempting to take a camera image using the client device camera; and

determining whether the camera image was obtained.

3. The computer-implemented method of claim 1, further comprising, upon a determination that more than one viewer is detected in the analyzed camera image:

transmitting the requested portal content to the client device;

transmitting an instruction to the client device to obscure a confidential portion of the requested portal content; and

obscuring the confidential portion of the requested portal content.

4. The computer-implemented method of claim 1, further comprising, upon a determination that only one viewer is detected in the analyzed camera image:

serving the requested portal content to the client device; and

displaying the served requested portal content on the client device.

5. The computer-implemented method of claim 3, further comprising providing a graphical user interface to allow additional input of credentials to release the confidential portion of the requested portal content from obscuration.

6. The computer-implemented method of claim 5, wherein the additional input of credentials comprises at least one of a password and a fingerprint.

7. A non-transitory, computer-readable medium storing computer instructions executable by a data processing apparatus to perform operations comprising:

receiving a request for portal content from a client device;

determining that the requested portal content held by a context object requires a camera security operation, wherein the determination includes identifying an object attribute of the context object, wherein the object attribute classifies the portal content as confidential, and wherein the object attribute invokes sending a request for a camera image to the client device;

sending the request for a camera image to the client device, wherein the request for a camera image places the client device on notice that a camera image is needed as a prerequisite to display at least part of the requested portal content;

receiving a preprocessed camera image from the client device, the preprocessing having analyzed the camera image for more than one viewer; and

analyzing the received preprocessed camera image for more than one viewer.

8. The computer-readable medium of claim 7, further comprising operations:

activating the client device camera;

attempting to take a camera image using the client device camera; and

determining whether the camera image was obtained.

9. The computer-readable medium of claim 7, further comprising operations, upon a determination that more than one viewer is detected in the analyzed camera image:

transmitting the requested portal content to the client device;

transmitting an instruction to the client device to obscure a confidential portion of the requested portal content; and

obscuring the confidential portion of the requested portal content.

10. The computer-readable medium of claim 7, further comprising operations, upon a determination that only one viewer is detected in the analyzed camera image:

serving the requested portal content to the client device; and

displaying the served requested portal content on the client device.

11. The computer-readable medium of claim 9, further comprising operations providing a graphical user interface to allow additional input of credentials to release the confidential portion of the requested portal content from obscuration.

12. The computer-readable medium of claim 11, wherein the additional input of credentials comprises at least one of a password and a fingerprint.

13. A system, comprising:

at least one computer configured to;

receive a request for portal content from a client device;

determine that the requested portal content held by a context object requires a camera security operation, wherein the determination includes identifying an object attribute of the context object, wherein the object attribute classifies the portal content as confidential, and wherein the object attribute invokes sending a request for a camera image to the client device;

send the request for a camera image to the client device, wherein the request for a camera image places the client device on notice that a camera image is needed as a prerequisite to display at least part of the requested portal content;

receive a preprocessed camera image from the client device, the preprocessing having analyzed the camera image for more than one viewer; and

analyze the received preprocessed camera image for more than one viewer.

14. The system of claim 13, further configured to:

activate the client device camera;

attempt to take a camera image using the client device camera; and

determine whether the camera image was obtained.

15. The system of claim 13, further configured, upon a determination that more than one viewer is detected in the analyzed camera image, to:

transmit the requested portal content to the client device;

transmit an instruction to the client device to obscure a confidential portion of the requested portal content; and

obscure the confidential portion of the requested portal content.

16. The system of claim 13, further configured, upon a determination that only one viewer is detected in the analyzed camera image, to:

serve the requested portal content to the client device; and

display the served requested portal content on the client device.

17. The system of claim 15, further configured to provide a graphical user interface to allow additional input of credentials to release the confidential portion of the requested portal content from obscuration.

18. The system of claim 17, wherein the additional input of credentials comprises at least one of a password and a fingerprint.