Identity-based content access control

• US 9,594,890 B2
• Filed: 09/25/2013
• Issued: 03/14/2017
• Est. Priority Date: 09/25/2013
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Baldwin, James A., Medapati, Suri B., Sannomiya, Yoko, Varshavsky, Oleg S.
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US14/037,151
• Publication Number:
  US 20150089668A1
• Time in Patent Office: 1,266 Days
• Field of Search: 726/28
• US Class Current: 1/1
• CPC Class Codes: G06F 21/1077 Recurrent authorisation
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal

Abstract

In embodiments, apparatuses, methods and storage media are described that are associated with performing identity-based access control for content. A content consumption device may be configured to control access to presented content based on identities of one or more content consumers that are physically proximate to the device. The content consumption device may be configured to perform facial and/or voice recognition on one or more content consumers to determine an identity for the one or more content consumers. The content consumption device may be configured to determine access permissions for the identified content consumers. At various times, access to a piece of content may change based on who is physically proximate to the content consumption device. Other embodiments may be described and claimed.

Claims

1. One or more non-transitory computer-readable storage media comprising a plurality of instructions configured to cause a computing device, in response to execution of the instructions by the computing device, to:

receive a request for presentation of content on the computing device, wherein the content comprises media content having at least one of video, audio, or closed captioning for the presentation on the computing device;

determine a plurality of access permissions for a plurality of content consumers;

control presentation of the content based on a determined plurality of access permissions of a plurality of content consumers physically proximate to the computing device;

determine whether to present the content based on a result of the determined permissions of the plurality of content consumers physically proximate to the computing device after a content consumer is no longer physically proximate to the computing device or has become physically proximate to the computing device; and

present the content on determination that the plurality of content consumers physically proximate to the computing device all have access permissions compatible with content

wherein to determine permissions of the plurality of content consumers further includes to;

provide one or more words and/or numbers for one of the plurality of content consumers to read aloud;

capture audio of the one of the plurality of content consumers reading the one or more words and/or numbers; and

authenticate the one of the plurality of content consumers by performing voice recognition on the captured audio.

2. The non-transitory computer-readable storage media of claim 1, wherein the computing device is further caused to obtain biometric data of the plurality of content consumers that are physically proximate to the computing device, compare the obtained biometric data with stored biometric data, and identify, based on the comparison, the plurality of content consumers that are physically proximate to the computing device, wherein obtain biometric data from a plurality of content consumers comprises obtain facial recognition data for the plurality of content consumers.

3. The non-transitory computer-readable storage media of claim 2, wherein obtain biometric data from a plurality of content consumers comprises obtain voice recognition data for the plurality of content consumers.

4. The non-transitory computer-readable storage media of claim 2, wherein identify the plurality of content consumers comprises identify a unique identity for every content consumer of the plurality of content consumers.

5. The non-transitory computer-readable storage media of claim 1, wherein determine a plurality of access permissions comprises determine a plurality of age-based access permissions.

6. The non-transitory computer-readable storage media of claim 1, wherein control presentation of a piece of content collectively based on the determined plurality of access permissions comprises deny access to the content to the entire plurality of content consumers.

7. The non-transitory computer-readable storage media of claim 1, wherein determine a plurality of access permissions further comprises determine access permissions associated with metadata describing the content.

8. The non-transitory computer-readable storage media of claim 7, wherein the metadata describing the content describes one or more age ranges that are permitted to consume the content.

9. The non-transitory computer-readable storage media of claim 8, wherein identify the plurality of content consumers comprises identify an age or an age range for every content consumer of the plurality of content consumers.

10. The non-transitory computer-readable storage media of claim 9, wherein identify an age range for every content consumer of the plurality of content consumers comprises identify for every content consumer of the plurality of content consumers if a content consumer is below or is likely to be below an age threshold indicated by metadata describing the content.

11. The non-transitory computer-readable storage media of claim 10, wherein control presentation of the content collectively comprises deny access to the content based on whether least one of the plurality of content consumers is below or is likely to be below the age threshold.

12. The non-transitory computer-readable storage media of claim 11, wherein the instructions are further configured to cause the computing device to:

receive an override command after denial of access to the content; and

allow access to the content based on the received override command.

13. The non-transitory computer-readable storage media of claim 12, wherein receive an override command comprises receive an override command from a content consumer identified to have permission to override denial of access to the content.

14. The non-transitory computer-readable storage media of claim 1, wherein the instructions are further configured to cause the computing device to receive the plurality of access permissions from an authorized one of the plurality of content consumers.

15. The non-transitory computer-readable storage media of claim 14, wherein receive the plurality of access permissions from an authorized one of the content consumers comprises:

authenticate one of the plurality of content consumers physically proximate to the computing device as the authorized content consumer; and

receive the plurality of access permissions from the authenticated one of the plurality of content consumers.

16. The non-transitory computer-readable storage media of claim 2, wherein the biometric data is associated with at least one of voice features or facial features.

17. An apparatus, comprising:

one or more computing processors;

physical memory coupled with the one or more processors;

a player module, to be loaded into the physical memory and executed by the one or more processors, to present a piece of content comprising at least one of video, audio, or closed captioning; and

an access control module, to be loaded into the physical memory and executed by the one or more processors, to;

determine a plurality of access permissions for a plurality of content consumers;

control access to the content collectively based on a determined plurality of access permissions of a plurality of content consumers physically proximate to a computing device;

determine whether to present the content based on a result of the determined permissions of the plurality of content consumers physically proximate to the computing device after a content consumer is no longer physically proximate to the computing device or has become proximate to the computing device; and

present the content on determination that the plurality of content consumers physically proximate to the computing device all have access permissions compatible with content;

wherein to determine permissions of the plurality of content consumers further includes to;

provide one or more words and/or numbers for one of the plurality of content consumers to read aloud;

capture audio of the one of the plurality of content consumers reading the one or more words and/or numbers; and

authenticate the one of the plurality of content consumers by performing voice recognition on the captured audio.

18. The apparatus of claim 17, further comprising one or more facial and/or voice recognition modules, to operate on the one or more computing processors to:

obtain biometric data from a plurality of content consumers that are physically proximate to the computing device, wherein the biometric data includes facial recognition data and/or voice recognition data for the plurality of content consumers;

compare the obtained biometric data with stored biometric data; and

identify, based on the comparison, the plurality of content consumers that are physically proximate to the apparatus based on stored biometric data.

19. The apparatus of claim 17, wherein determine a plurality of access permissions comprises determine access permissions associated with metadata describing the piece of content.

20. The apparatus of claim 19, wherein the metadata describing the piece of content describes one or more age ranges that are permitted to consume the content.

21. The apparatus of claim 17, wherein the access control module is further to operate on the one or more computing processors to:

receive an override command after denial of access to the piece of content; and

allow access collectively to the piece of content based on the received override command.

22. A computer-implemented method, comprising:

receiving, by a computing device, a request for presentation of content, the content including at least one of video, audio, or closed captioning;

determining, by the computing device, a plurality of access permissions for a plurality of content consumers

controlling, by the computing device, access to the content collectively, based on the determined plurality of access permissions of a plurality of content consumers physically proximate to the computing device;

determining, by the computing device, whether to present the content based on a result of the determined permissions of the plurality of content consumers physically proximate to the computing device after a content consumer is no longer physically proximate to the computing device or has become proximate to the computing device; and

present the content on determination that the plurality of content consumers physically proximate to the computing device all have access permissions compatible with content

wherein to determine permissions of the plurality of content consumers further includes;

providing one or more words and/or numbers for one of the plurality of content consumers to read aloud;

capturing audio of the one of the plurality of content consumers reading the one or more words and/or numbers; and

authenticating the one of the plurality of content consumers by performing voice recognition on the captured audio.

23. The method of claim 22, further comprising obtaining biometric data, by the computing device, from a plurality of content consumers that are physically proximate to the computing device, wherein biometric data includes facial recognition data and/or voice recognition data;

comparing, by the computing device, the obtained biometric data with stored biometric data; and

identifying, by the computing device, and based on the request and based on the comparison, the plurality of content consumers that are physically proximate to an apparatus.

24. The method of claim 22, wherein determining a plurality of access permissions comprises determining access permissions associated with metadata describing the piece of content.

25. The method of claim 24, wherein the metadata describing the content describes one or more age ranges that are permitted to consume the content.