Managing and predicting privacy preferences based on automated detection of physical reaction

• US 9,208,326 B1
• Filed: 03/14/2013
• Issued: 12/08/2015
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Gates, Carrie E., Silberman, Gabriel M., Velez-Rojas, Maria C., Mankovskii, Serguei, Greenspan, Steven L.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Wyszynski, Aubrey
• Application Number:
  US13/829,982
• Time in Patent Office: 999 Days
• Field of Search: 726/28, 713/186
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06V 40/174 Facial expression recognition

Abstract

Methods for preventing the transmission of sensitive information to locations outside of a secure network by a person who has legitimate access to the sensitive information are described. In some embodiments, in order for an end user of a computing device to establish a secure connection with a secure network and access data stored on the secure network, a client application running on the computing device may be required by the secure network. The client application may monitor visual cues (e.g., facial expressions and gestures) associated with the end user, detect suspicious activity performed by the end user based on the visual cues, and in response to detecting suspicious activity may perform mitigating actions to prevent the transmission of sensitive information such as alerting human resources personnel or requiring authorization prior to sending information to locations outside of the secure network.

Claims

1. A method for preventing transmission of private information associated with a first person, comprising:

detecting that a third person has requested access to the private information associated with the first person;

determining a previous reaction by the first person made in response to a previous authorization request for the private information made by a second person different from the third person, the determining a previous reaction comprises identifying at least one of a facial expression or a gesture performed by the first person while the previous authorization request made by the second person is displayed;

determining that the third person and the second person are associated with a common group identifier;

authorizing access to the private information by the third person in response to identifying the at least one of a facial expression or a gesture performed by the first person while the previous authorization request made by the second person is displayed and determining that the third person and the second person are associated with the common group identifier; and

transmitting the private information to the third person in response to authorizing access to the private information.

2. The method of claim 1, wherein:

the detecting that the third person has requested access to the private information comprises identifying the third person via at least one of a name of the third person or an email address associated with the third person.

3. The method of claim 1, wherein:

the determining a previous reaction comprises capturing images of the first person while displaying the previous authorization request for the private information.

4. The method of claim 3, wherein:

the determining a previous reaction comprises determining the previous reaction based on facial expressions performed by the first person while the first person reads the previous authorization request for the private information.

5. The method of claim 1, further comprising:

determining whether to request authorization from the first person prior to granting access to the private information based on a classification of the private information.

6. The method of claim 1, wherein:

the private information comprises information associated with the first person that is not publicly available.

7. The method of claim 1, wherein:

the detecting that a third person has requested access to the private information associated with the first person comprises identifying the private information within a document using natural language processing techniques.

8. The method of claim 1, wherein:

the detecting that a third person has requested access to the private information associated with the first person is performed by a server associated with a website.

9. The method of claim 8, wherein:

the transmitting the private information to the third person comprises transmitting a dynamically constructed webpage containing the private information to the third person, the transmitting the private information is performed by the server.

10. The method of claim 8, wherein:

the authorizing access to the private information is performed by the server.

11. A system, comprising:

a storage device, the storage device stores a user profile associated with a first person, the user profile includes a mapping of a previous reaction by the first person in response to a previous authorization request for private information associated with the first person made by a second person different from the first person; and

a set of processors in communication with the storage device, the set of processors detects that a third person different from the second person has requested access to the private information associated with the first person, the set of processors determines the previous reaction based on at least one of a facial expression or a gesture performed by the first person while the previous authorization request made by the second person is displayed, the set of processors determines that the third person and the second person are associated with a common group identifier, the set of processors authorizes access to the private information by the third person in response to determining that the previous reaction was a positive reaction and determining that the third person and the second person are associated with the common group identifier, the set of processors causes the private information to be transmitted to the third person in response to the set of processors authorizing access to the private information.

12. The system of claim 11, wherein:

the third person is identified by at least one of a name of the third person or an email address associated with the third person.

13. The system of claim 11, wherein:

the private information comprises information associated with the first person that is not publicly available, the system comprises a mobile computing device.

14. A computer program product, comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising;

computer readable program code configured to detect that a third person has requested access to private information associated with a first person;

computer readable program code configured to determine a previous reaction by the first person in response to a previous authorization request for the private information made by a second person different from the third person, the previous reaction is determined based on at least one of a facial expression or a gesture performed by the first person while the authorization request made by the second person is displayed;

computer readable program code configured to determine that the third person and the second person are associated with a common group identifier;

computer readable program code configured to authorize access to the private information by the third person in response to determining that the previous reaction was a positive reaction and determining that the third person and the second person are associated with the common group identifier; and

computer readable program code configured to cause the transmission of the private information to the third person in response to authorizing access to the private information.

15. The computer program product of claim 14, wherein:

the third person is identified by at least one of a name of the third person or an email address associated with the third person.

16. The computer program product of claim 14, wherein:

the determining a previous reaction comprises capturing images of the first person while displaying the previous authorization request for the private information.

17. The computer program product of claim 14, wherein:

the detecting that a third person has requested access to the private information associated with the first person comprises identifying the private information within a document using natural language processing techniques, the private information comprises information associated with the first person that is not publicly available.