Contextual device locking/unlocking

• US 9,391,994 B2
• Filed: 11/10/2014
• Issued: 07/12/2016
• Est. Priority Date: 10/26/2012
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Matus, Jonathan Arie
• Primary Examiner(s): ZAIDI, SYED A
• Application Number:
  US14/537,704
• Publication Number:
  US 20150067791A1
• Time in Patent Office: 610 Days
• Field of Search: 726/17
• US Class Current: 1/1
• CPC Class Codes: G06F 21/30 Authentication, i.e. establishing the identity or authorisation of security principals
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/032 Protect output to user by software means
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72448 with means for adapting the functionality of the device according to specific conditions
• CPC Class Codes: H04M 1/72454 according to context-related or environment-related conditions

Abstract

Particular embodiments of a computing device associated with a user may detect an event using a sensor of the computing device. The event may be a lock-triggering event or an unlock-triggering event. The computing device may assess a state of the device. The computing device may also access further information associated with the user. The computing device may also monitor activity on the computing device to detect further events if such further monitoring is warranted. Based on the gathered information, the computing device may update a lock status of the device to lock or unlock access interfaces of the computing device, functionality of the computing device, or content accessible from the computing device. If the event comprised the computing device detecting an attempt by a third party to use the device, the device may attempt to identify the third party to determine if they are authorized to use the device.

Claims

1. A method comprising:

receiving, by one or more computer servers of an online social network, from a first client device associated with a first user, unique data identifying a second user, the unique data being determined in response to an event detected by the first client device, wherein the event was triggered by the second user;

accessing, by one or more computer servers of the online social network, social-networking information associated with the first user and the second user, wherein the one or more computer servers of the online social network look up the social-networking information using the received unique data;

determining, by one or more computer servers of the online social network, a level of access to access interfaces of the first client device, functionality of the first client device, or content accessible from the first client device, wherein the determining is based on the social-networking information; and

sending, by one or more computer servers of the online social network, instructions to evaluate a lock status of the first client device, the instructions comprising the determined level of access to the first client device.

2. The method of claim 1, wherein the event comprises receipt of information indicating:

closure of a lid of the first client device;

placement of the first client device into an enclosure;

placement of the first client device onto a surface with a screen of the first client device facing down;

detection that the second party is looking at a screen of the first client device;

detection that the second party is attempting to use or handle the first client device;

disconnection of the first client device from a communications network designated as a familiar network;

detection that the first client device has been removed from being within proximity of a designated familiar device;

receipt of a personal communication while the first client device is not within the first user'"'"'s control;

or

detection that the first client device has been removed from being in a designated familiar location.

3. The method of claim 1, wherein the event comprises receipt of information indicating:

release of a lid of the first client device;

removal of the first client device from an enclosure;

detection based on biometric identification that the first user is looking at a screen of the first client device;

detection, by one or more sensors, that the first user is handling the first client device;

connection of the first client device to a communications network designated as being familiar;

detection that the first client device has been placed within proximity of a designated familiar device;

or

detection that the first client device has been placed in a designated familiar location.

4. The method of claim 1, wherein the unique data comprises an identifier for the second user, the identifier determined based on biometric identification, and wherein the one or more computer servers of the online social network access the social-networking information using the identifier.

5. The method of claim 1, wherein the social-networking information indicates whether the second user is authorized to use the first client device.

6. The method of claim 1, further comprising:

receiving, by one or more computer servers of the online social network, from the first client device, a state of the first client device;

wherein

the determining the level of access is further based on the state of the first client device.

7. The method of claim 6, wherein the state of the first client device comprises:

a lock status of the first client device;

a location of the first client device;

a communications environment of the first client device;

other devices that are in physical proximity to the first client device;

whether a screen of the first client device is visible;

what is being displayed on the screen;

a length of time that the first client device has been idle;

or

a length of time since the first client device was last used by the first user.

8. The method of claim 1, wherein a lock status of the first client device is updated based on the instructions.

9. The method of claim 8, wherein the updating the lock status of the first client device based on the instructions comprises:

locking one or more access interfaces of the first client device;

unlocking one or more access interfaces of the first client device;

locking one or more functions of the first client device;

unlocking one or more functions of the first client device;

blocking access to particular content or all content accessible from the first client device;

allowing access to particular content or all content accessible from the first client device;

or

logging the event in association with the lock status and a timestamp.

10. The method of claim 1, further comprising:

receiving, by one or more computer servers of the online social network, an indication of one or more events detected at the first client device, wherein the indication is received prior to determining the level of access; and

wherein the determining the level of access is further based on the one or more events.

11. One or more computer-readable non-transitory storage media embodying software operable when executed to:

receive, by one or more computer servers of an online social network, from a first client device associated with a first user, unique data identifying a second user, the unique data being determined in response to an event detected by the first client device, wherein the event was triggered by the second user;

access, by one or more computer servers of the online social network, social-networking information associated with the first user and the second user, wherein the one or more computer servers of the online social network look up the social-networking information using the received unique data;

determine, by one or more computer servers of the online social network, a level of access to access interfaces of the first client device, functionality of the first client device, or content accessible from the first client device, wherein the determining is based on the social-networking information; and

send, by one or more computer servers of the online social network, instructions to evaluate a lock status of the first client device, the instructions comprising the determined level of access to the first client device.

12. The media of claim 11, wherein the unique data comprises an identifier for the second user, the identifier determined based on biometric identification, and wherein the one or more computer servers of the online social network access the social-networking information using the identifier.

13. The media of claim 11, wherein the social-networking information indicates whether the second user is authorized to use the first client device.

14. The media of claim 11, further comprising:

receiving, by one or more computer servers of the online social network, from the first client device, a state of the first client device;

wherein

the determining the level of access is further based on the state of the first client device.

15. The media of claim 11, wherein a lock status of the first client device is updated based on the instructions.

16. A computing device comprising:

one or more computer servers of an online social network; and

a memory coupled to the one or more computer servers comprising instructions executable by the one or more computer servers, the one or more computer servers operable when executing the instructions to;

receive from a first client device associated with a first user, unique data identifying a second user, the unique data being determined in response to an event detected by the first client device, wherein the event was triggered by the second user;

access social-networking information associated with the first user and the second user, wherein the one or more computer servers look up the social-networking information using the received unique data;

determine a level of access to access interfaces of the first client device, functionality of the first client device, or content accessible from the first client device, wherein the determining is based on the social-networking information; and

send instructions to evaluate a lock status of the first client device, the instructions comprising the determined level of access to the first client device.

17. The device of claim 16, wherein the unique data comprises an identifier for the second user, the identifier determined based on biometric identification;

and wherein the one or more computer servers access the social-networking information using the identifier.

18. The device of claim 16, wherein the social-networking information indicates whether the second user is authorized to use the first client device.

19. The device of claim 16, further comprising:

receiving, from the first client device, a state of the first client device;

wherein

the determining the level of access is further based on the state of the first client device.

20. The device of claim 16, wherein a lock status of the first client device is updated based on the instructions.