DATA PROTECTION SYSTEM BASED ON USER INPUT PATTERNS ON DEVICE

• US 20160275277A1
• Filed: 06/27/2014
• Published: 09/22/2016
• Est. Priority Date: 06/27/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Jerry Huang, Microsoft Technology Licensing LLC (Microsoft Corporation), Zhen Liu
• Inventors: HUANG, Jerry, LIU, Zhen
• Granted Patent: US 10,423,766 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Methods, systems, and computer program products are provided for protecting data stored on a device based on user input patterns. The device may have one or more types of user interfaces. The user interacts with a user interface of the device according to a pattern. The interaction pattern is monitored, and compared to one or more stored acceptable user interface patterns associated with sensitive data. If the interaction pattern of the user does not match an acceptable user interface pattern, a data protection response assigned to the data is enacted.

Claims

1. A system in a computing device to protect data stored by the computing device, comprising:

a user input pattern monitor configured to determine whether a detected user interaction pattern with a user interface of the computing device indicates an interaction by an unauthorized user; and

a data protection enactor configured to discretely enact a data protection response associated with data when the detected user interaction pattern is determined by the user input pattern monitor to indicate an interaction by an unauthorized user.

2. The system of claim 1, wherein the user input pattern monitor is configured to compare the detected user interaction pattern with an acceptable user interaction pattern to determine whether the detected user interaction pattern indicates an interaction by an unauthorized user.

3. The system of claim 2, further comprising:

a user input pattern manager configured to receive detected user interaction patterns with the user interface, and to process the detected user interaction patterns to generate the acceptable user interaction pattern for the user interface.

4. The system of claim 2, wherein the user interface is a keyboard.

5. The system of claim 4, wherein the acceptable user interaction pattern for the keyboard includes at least one of an average typing speed range, an average typing speed for a particular word, or a predetermined typographical error.

6. The system of claim 2, wherein the user interface is a pointing device.

7. The system of claim 6, wherein the acceptable user interaction pattern for the pointing device includes at least one of a movement of a pointer within a determined screen area or an amount of file and/or folder exploration less than a predetermined threshold.

8. The system of claim 2, wherein the user interface is a touch screen.

9. The system of claim 8, wherein the acceptable user interaction pattern for the touch screen includes at least one of an average touch area or an average touch pressure range.

10. The system of claim 1, further comprising:

a user interface module that enables a data sensitivity level, the data protection response, and a contextual trigger to be associated with the data.

11. A method in a computing device to protect data stored by the computing device, comprising:

determining whether a detected user interaction pattern with a user interface of the computing device indicates an interaction by an unauthorized user; and

discretely enacting a data protection response associated with data when the detected user interaction pattern is determined to indicate an interaction by an unauthorized user.

12. The method of claim 11, wherein said determining comprises:

comparing the detected user interaction pattern with an acceptable user interaction pattern to determine whether the detected user interaction pattern indicates an interaction by an unauthorized user.

13. The method of claim 12, further comprising:

receiving detected user interaction patterns with the user interface; and

processing the detected user interaction patterns to generate the acceptable user interaction pattern for the user interface.

14. The method of claim 12, wherein the user interface is a keyboard, and the acceptable user interaction pattern for the keyboard includes at least one of an average typing speed range, an average typing speed for a particular word, or a predetermined typographical error.

15. The method of claim 12, wherein the user interface is a pointing device, and the acceptable user interaction pattern for the pointing device includes at least one of a movement of a pointer within a determined screen area or an amount of file and/or folder exploration less than a predetermined threshold.

16. The method of claim 12, wherein the user interface is a touch screen, and the acceptable user interaction pattern for the touch screen includes at least one of an average touch area or an average touch pressure range.

18. The method of claim 12, wherein the user interface is a keyboard, and the acceptable user interaction pattern for the keyboard includes at least one of an average typing speed range, an average typing speed for a particular word, or a predetermined typographical error.

19. The method of claim 12, wherein the user interface is a pointing device, and the acceptable user interaction pattern for the pointing device includes at least one of a movement of a pointer within a determined screen area or an amount of file and/or folder exploration less than a predetermined threshold.

20. The method of claim 12, wherein the user interface is a touch screen, and the acceptable user interaction pattern for the touch screen includes at least one of an average touch area or an average touch pressure range.

17. A method in a computing device to protect data stored by the computing device, comprising:

enabling data to be selected, and a data sensitivity level, a data protection response, and a contextual trigger to be associated with the data;

receiving detected user interaction patterns with a user interface of the computing device;

processing the detected user interaction patterns to generate an acceptable user interaction pattern for the user interface;

determining whether a detected user interaction pattern with the user interface indicates an interaction by an unauthorized user by comparison with the acceptable user interaction pattern; and

discretely enacting the data protection response when the detected user interaction pattern is determined to indicate an interaction by an unauthorized user.