Computing system for privacy-aware sharing management and method of operation thereof

• US 9,836,620 B2
• Filed: 12/30/2014
• Issued: 12/05/2017
• Est. Priority Date: 12/30/2014
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Jin, Hongxia
• Primary Examiner(s): Mehramanesh, Amir
• Assistant Examiner(s): TAYLOR, SAKINAH W
• Application Number:
  US14/585,985
• Publication Number:
  US 20160188902A1
• Time in Patent Office: 1,071 Days
• Field of Search: 726 27, 726 28
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

A computing system includes a control unit configured to determine a usage context including a capability of a device, a usage time and a device location associated with the device, and a user context of one or more users with access to the device; analyze a privacy risk level of a resource based on a resource content included in the resource, a metadata concerning the resource, a collective input regarding the resource, and the usage context; and generate one or more options for sharing the resource with the device based on the privacy risk level and the usage context.

Claims

1. A computing system for privacy-aware sharing management comprising:

a control unit, including a microprocessor, configured to;

determine a usage context including a capability of a device, a usage time and a device location associated with the device, and a user context of one or more users with access to the device;

analyze a privacy risk level of a resource based on a metadata concerning the resource, a collective input regarding the resource, the usage context, and identifying a privacy trigger within a substantive content included in the resource through analysis of the substantive content;

retrieve one or more historical sharing profiles of the device, wherein each of the historical sharing profiles links a sharing privacy preference with a particular instance of the usage context;

generate one or more options for sharing the resource with the device by generating a privacy recommendation and a security measure based on the historical sharing profile, the privacy risk level and the usage context, wherein;

the privacy recommendation is for representing a choice or preference presented to the one or more users in one or more actions available to manage privacy risk, and

the security measure is for representing a command or setting to implement the one or more actions to manage the privacy risk; and

a storage unit, coupled to the control unit, configured to store the resource.

2. The system as claimed in claim 1 wherein the control unit is configured to:

retrieve the one or more historical sharing profiles, including, a record of a previous sharing operation.

3. The system as claimed in claim 1 wherein the control unit is further configured to:

generate a privacy geo-fence around the device;

determine a permission level of a further device detected within the privacy geo-fence for granting access to the resource; and

generate the one or more options for sharing the resource with the further device based on the permission level.

4. The system as claimed in claim 1 wherein the control unit is configured to generate the privacy recommendation to include a message to deploy the security measure.

5. The system as claimed in claim 1 wherein the control unit is further configured to:

determine an intra-enterprise sharing operation for sharing the resource within an enterprise; and

generate the one or more options for the device based on the intra-enterprise sharing operation, the privacy risk level, and the usage context.

6. The system as claimed in claim 1 wherein the control unit is further configured to determine the privacy risk level of the resource by analyzing a pictorial content of the resource.

7. The system as claimed in claim 1 wherein the control unit is further configured to generate the one or more options by deploying a locking procedure, a substitution procedure, an encryption procedure, or a combination thereof.

8. The system as claimed in claim 1 wherein the control unit is further configured to determine the user context by determining a companion identity and a companion demographic.

9. A method for privacy-aware sharing management, comprising:

determining, with a control unit, a usage context including a capability of a device, a usage time and a device location associated with the device, and a user context of one or more users with access to the device;

analyzing a privacy risk level of a resource based on a metadata concerning the resource, a collective input regarding the resource, the usage context, and identifying a privacy trigger within a substantive content included in the resource through analysis of the substantive content; and

retrieving one or more historical sharing profiles of the device, wherein each of the historical sharing profiles links a sharing privacy preference with a particular instance of the usage context;

generating one or more options for sharing the resource with the device by generating a privacy recommendation and a security measure based on the historical sharing profile, the privacy risk level and the usage context, wherein;

the privacy recommendation is for representing a choice or preference presented to the one or more users in one or more actions available to manage privacy risk, and

the security measure is for representing a command or setting to implement the one or more actions to manage the privacy risk.

10. The method as claimed in claim 9 wherein:

retrieving one or more historical sharing profiles includes retrieving the one or more historical sharing profiles including a record of a previous sharing operation.

11. The method as claimed in claim 9 further comprising:

generating a privacy geo-fence around the device;

determining a permission level of a further device detected within the privacy geo-fence for granting access to the resource; and

generating the one or more options for sharing the resource with the further device based on the permission level.

12. The method as claimed in claim 9 wherein generating the privacy recommendation includes generating the privacy recommendation including a message to deploy the security measure.

13. The method as claimed in claim 9 further comprising:

determining an intra-enterprise sharing operation for sharing the resource within an enterprise; and

generating the one or more options for the device based on the intra-enterprise sharing operation, the privacy risk level, and the usage context.

14. The method as claimed in claim 9 further comprising determining the privacy risk level of the resource by analyzing a pictorial content of the resource.

15. The method as claimed in claim 9 further comprising generating the one or more options by deploying a locking procedure, a substitution procedure, an encryption procedure, or a combination thereof.

16. The method as claimed in claim 9 further comprising determining the user context by determining a companion identity and a companion demographic.

17. A non-transitory computer readable medium including instructions for execution, comprising:

determining a usage context including a capability of a device, a usage time and a device location associated with the device, and a user context of one or more users with access to the device;

analyzing a privacy risk level of a resource based on a metadata concerning the resource, a collective input regarding the resource, the usage context, and identifying a privacy trigger within a substantive content included in the resource through analysis of the substantive content; and

retrieving one or more historical sharing profiles of the device, wherein each of the historical sharing profiles links a sharing privacy preference with a particular instance of the usage context;

generating one or more options for sharing the resource with the device by generating a privacy recommendation and a security measure based on the historical sharing profile, the privacy risk level and the usage context, wherein;

the privacy recommendation is for representing a choice or preference presented to the one or more users in one or more actions available to manage privacy risk, and

the security measure is for representing a command or setting to implement the one or more actions to manage the privacy risk.

18. The non-transitory computer readable medium as claimed in claim 17 wherein:

retrieving one or more historical sharing profiles includes retrieving the one or more historical sharing profiles including a record of a previous sharing operation.

19. The non-transitory computer readable medium as claimed in claim 17 further comprising:

generating a privacy geo-fence around the device;

determining a permission level of a further device detected within the privacy geo-fence for granting access to the resource; and

generating the one or more options for sharing the resource with the further device based on the permission level.

20. The non-transitory computer readable medium as claimed in claim 17 wherein generating the privacy recommendation includes generating the privavy recommendation including a message to deploy the security measure.

21. The non-transitory computer readable medium as claimed in claim 17 further comprising:

determining an intra-enterprise sharing operation for sharing the resource within an enterprise; and

generating the one or more options for the device based on the intra-enterprise sharing operation, the privacy risk level, and the usage context.

22. The non-transitory computer readable medium as claimed in claim 17 further comprising determining the privacy risk level of the resource by analyzing a pictorial content of the resource.

23. The non-transitory computer readable medium as claimed in claim 17 further comprising generating the one or more options by deploying a locking procedure, a substitution procedure, an encryption procedure, or a combination thereof.

24. The non-transitory computer readable medium as claimed in claim 17 further comprising determining the user context by determining a companion identity and a companion demographic.