System and method for concealing sensitive data on a computing device

• US 9,898,610 B1
• Filed: 08/24/2015
• Issued: 02/20/2018
• Est. Priority Date: 10/22/2014
• Status: Active Grant

• Current Assignee: State Farm Mutual Automobile Insurance Company (State Farm)
• Original Assignee: State Farm Mutual Automobile Insurance Company (State Farm)
• Inventors: Hadsall, Jacob L.
• Primary Examiner(s): Avery, Jeremiah
• Application Number:
  US14/833,263
• Time in Patent Office: 911 Days
• Field of Search: None
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06V 40/1365 Matching; Classification
• CPC Class Codes: G09G 2358/00 Arrangements for display data security
• CPC Class Codes: G09G 5/003 Details of a display terminal, the details relating to the control arrangement of the display terminal and to the interfaces thereto specific for a CRT G09G1/165; for a flat panel G09G3/2092

Abstract

A computer-implemented method may conceal sensitive data displayed within a viewport of a display of a client computing device, such as sensitive data relating to auto, home, life, or renters insurance, banking, and/or vehicle loans. In one aspect, the method may receive a user credential authenticating a user of the computing device and determine that a sensitive data flag has been triggered. The sensitive data flag may indicate that sensitive user data is displayed within a viewport of the computing device. The method may also initiate a biometric detection service, application, and/or functionality in response to determining that the sensitive data flag has been triggered and detect a first biometric identifier belonging to the user of the computing device. The method may further detect a second biometric identifier belonging to someone other than the user, and obscure the sensitive user data displayed within the viewport of the computing device.

Claims

1. A computer-implemented method for concealing sensitive data displayed within a viewport of a display of a computing device, the method comprising:

receiving, via a computer network and/or one or more processors, a user credential authenticating a user of the computing device;

determining, by the one or more processors, that a sensitive data flag has been triggered, wherein the sensitive data flag indicates that sensitive user data is being, or about to be, displayed within a viewport of the computing device;

initiating, by the one or more processors, a biometric detection service, application, or functionality in response to determining that the sensitive data flag has been triggered;

detecting, by the one or more processors, a first biometric identifier belonging to the user of the computing device;

detecting, by the one or more processors, a second biometric identifier belonging to an eavesdropper or someone other than the user of the computing device, and

obscuring, via the computer network and/or the one or more processors, the sensitive user data displayed within the viewport of the computing device in response to detecting that the eavesdropper or someone other than the user of the computing device is viewing, or potentially viewing, a display screen of the computing device for more than a threshold duration of at least one second.

2. The computer-implemented method of claim 1 further comprising:

receiving, via a computer network and/or the one or more processors, an indication that the sensitive data flag has been triggered, wherein the indication originates from a second computing device,

wherein the one or more processors are local to the computing device or remote to the computing device.

3. The computer-implemented method of claim 1 further comprising:

creating, at the one or more processors, a biometric fingerprint for the user of the computing device; and

determining, at the one or more processors, that the first biometric identifier matches the biometric fingerprint.

4. The computer-implemented method of claim 1 wherein the sensitive data flag further indicates that a user has navigated to a sensitive data portion of an application, the method further comprising:

ending the biometric detection service, application, or functionality in response to the user navigating away from the sensitive data portion of the application.

5. The computer-implemented method of claim 1 further comprising:

capturing, using a camera of the computing device, a digital image upon detection of the second biometric indicator and including the sensitive data being, or about to be, displayed within the viewport of the computing device in the digital image.

6. The computer-implemented method of claim 1 further comprising:

receiving a user selection defining one or more sensitive user data categories.

7. The computer-implemented method of claim 1, the method further comprising:

determining, at the one or more processors, that the second biometric identifier matches a biometric fingerprint of an unauthorized user.

8. The computer-implemented method of claim 1 wherein the threshold duration is a first threshold duration and further comprising:

unobscuring, via the computer network and/or the one or more processors, the sensitive user data displayed within the viewport of the computing device in response to detecting for more than a second threshold duration that the eavesdropper or someone other than the user of the computing device is no longer viewing, or potentially viewing, the display screen of the computing device.

9. A computer device for concealing sensitive data displayed within a viewport of a display, the method comprising:

one or more processors; and

one or more memories coupled to the one or more processors;

the one or more memories including non-transitory computer executable instructions stored therein that, when executed by the one or more processors, cause the one or more processors to;

determine that a sensitive data flag has been triggered, wherein the sensitive data flag indicates that sensitive user data is being, or about to be, displayed within a viewport of the computing device;

initiate a biometric detection service, application, or functionality in response to determining that the sensitive data flag has been triggered;

detect a first biometric identifier belonging to the user of the computing device;

detect a second biometric identifier belonging to someone other than the user of the computing device, and

obscure or blur the sensitive user data being, or about to be, displayed within the viewport of the computing device in response to detecting that someone other than the user of the computing device is viewing, or potentially viewing, a display screen of the computing device for more than a threshold duration of at least one second.

10. The computer device of claim 9, further comprising non-transitory computer executable instructions to cause the one or more processors to:

receive an indication that the sensitive data flag has been triggered, wherein the indication originates from a second computing device.

11. The computer device of claim 9, further comprising non-transitory computer executable instructions to cause the one or more processors to:

create a biometric fingerprint for the user of the computing device; and

determine that the first biometric identifier matches the biometric fingerprint.

12. The computer device of claim 9, wherein the sensitive data flag further indicates that a user has navigated to a sensitive data portion of an application, further comprising non-transitory computer executable instructions to cause the one or more processors to:

end the biometric detection service in response to the user navigating away from the sensitive data portion of the application.

13. The computer device of claim 9, further comprising a camera and non-transitory computer executable instructions to cause the one or more processors to:

cause the camera to capture a digital image upon detection of the second biometric indicator and including the sensitive data displayed within the viewport of the computing device in the digital image.

14. The computer device of claim 9, further comprising non-transitory computer executable instructions to cause the one or more processors to:

receive a user selection defining one or more sensitive user data categories.

15. The computer device of claim 9, further comprising non-transitory computer executable instructions to cause the one or more processors to:

determine that the second biometric identifier matches a biometric fingerprint of an unauthorized user.

16. A computer-implemented method of sensitive information security, the method comprising:

determining, by one or more processors, that confidential or sensitive information is about to be, or is currently being, displayed on a display screen or other display of, or associated with a mobile or other computing device of a user;

collecting, by the one or more processors, image data from a front facing camera mounted on, or associated with, the mobile or other computing device of the user;

determining, by the one or more processors, that a potential eavesdropper or unauthorized user is viewing the display screen or other display from computer analysis of the image data collected;

blurring or obscuring, by the one or more processors, the confidential or sensitive information being displayed on the display screen or other display when it is determined that the potential eavesdropper or unauthorized user is viewing the display screen or other display for more than a threshold duration of at least one second; and

generating, by the one or more processors, a warning to the user indicating a presence of the potential eavesdropper or unauthorized user when (a) it is determined that the potential eavesdropper or unauthorized user is viewing the display screen or other display, and (b) confidential or sensitive information is about to be displayed, or is being displayed, on the display screen or other display to maintain information security.

17. The computer-implemented method of claim 16, wherein determining, by the one or more processors, that the potential eavesdropper or unauthorized user is viewing the display screen or other display from computer analysis of the image data collected is accomplished by the one or more processors (1) determining that two people are currently looking at the display screen or other display, and (2) determining that one of the people is not an owner or authorized user of the mobile or other computing device.

18. The computer-implemented method of claim 16, wherein determining, by the one or more processors, that the potential eavesdropper or unauthorized user is viewing the display screen or other display from computer analysis of the image data collected is accomplished by the one or more processors (1) determining that two sets of human eyes are currently looking at the display screen or other display, and (2) determining that one of the sets of eyes do not belong to an owner or authorized user of the mobile or other computing device.

19. The computer-implemented method of claim 16, wherein determining, by the one or more processors, that the potential eavesdropper or unauthorized user is viewing the display screen or other display from computer analysis of the image data collected is accomplished by the one or more processors (1) determining that two people are currently looking at the display screen or other display, and (2) determining that one of the people is not an owner or authorized user of the mobile or other computing device by using facial recognition or eye recognition software.

20. The computer-implemented method of claim 16, wherein determining, by the one or more processors, that the potential eavesdropper or unauthorized user is viewing the display screen or other display from computer analysis of the image data collected is accomplished by the one or more processors determining that a person currently looking at the display screen or other display is not an owner or authorized user of the mobile or other computing device by using facial recognition techniques or eye recognition techniques on the image data.