Facial capture managing access to resources by a device

• US 9,378,350 B2
• Filed: 03/15/2013
• Issued: 06/28/2016
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich
• Primary Examiner(s): Mehta, Bhavesh
• Assistant Examiner(s): LEMIEUX, IAN L
• Application Number:
  US13/837,255
• Publication Number:
  US 20140270410A1
• Time in Patent Office: 1,201 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04N 7/188 Capturing isolated or intermittent images triggered by the occurrence of a predetermined event, e.g. an object reaching a predetermined position signal generation from motion picture films H04N5/253
• CPC Class Codes: H04W 12/08 Access security

Abstract

Disclosed are various embodiments for controlling access to resources by a client device. Methods may include receiving a user request to access a resource on the device and determining whether the resource requires a facial capture. If the resource requires a facial capture, a camera of the device may be automatically activated to capture an image and the resource may be rendered on the device. In some cases, access to the resource may be limited based on whether the image includes a face or not. A record associating the image and the requested resource may be stored, for example, on the device or on a remote server.

Claims

1. A method of managing access to resources by a device, comprising:

receiving a request to access a computing resource;

determining that access to the computing resource requires a facial capture;

activating a camera of the device to capture a first image, wherein the first image comprises a first face of a user attempting to access the computing resource;

determining that the first face fails to match a second face of the user stored in a second image;

deleting the computing resource from the device in response to determining that the first face fails to match the second face;

storing a record associating the first image and the requested computing resource, wherein the record includes a time and a date that the computing resource was accessed and information that indicates a version of the computing resource; and

transmitting the record and the first image to a remote server associated with the computing resource.

2. The method of claim 1, wherein the computing resource comprises an application.

3. The method of claim 1, wherein the computing resource is located on a remote server, the method further comprising:

sending a request to access the computing resource to the remote server, the request including a copy of the captured image.

4. The method of claim 1, wherein the computing resource comprises a computer folder.

5. The method of claim 1, wherein the computing resource comprises a data file.

6. The method of claim 1, wherein the computing resource comprises an electronic document.

7. The method of claim 1, wherein the computing resource comprises a profile.

8. A method of managing access to resources on a server, comprising:

receiving a request from a client device to access a server resource;

receiving a first image associated with the request from the client device;

determining whether the request is valid based at least in part on a comparison of the first image to a second image;

responsive to determining that the request is invalid, denying access to the server resource to the client device;

responsive to determining that the request is invalid, sending an instruction to the client device to delete a local copy of the server resource stored on the client device; and

storing a record associating the image and the server resource provided to the client device, wherein the record includes a time and a date that the server resource was accessed and a version identifier of the server resource that was accessed.

9. The method of claim 8, further comprising determining whether the first image includes a face.

10. The method of claim 8, further comprising sending the client device an indication that the requested server resource requires a facial capture record.

11. The method of claim 8, wherein the server resource includes an application.

12. The method of claim 8, wherein the server resource comprises a computer folder.

13. The method of claim 8, wherein the server resource comprises a data file.

14. The method of claim 8, wherein the server resource comprises an electronic document.

15. The method of claim 8, wherein the server resource comprises a profile.

16. An apparatus, comprising:

a two-way communication device;

a camera;

a display; and

a processor, configured to;

receive a request to access a computing resource;

determine whether the computing resource requires a facial capture to access the computing resource;

activate the camera to capture an first image in response to determining that the computing resource requires the facial capture, the first image comprising a first face of a user authorized to access the computing resource;

determine whether the first face of the first user matches a second face of the user;

render the computing resource on the display in response to the first face matching the second face;

delete a locally stored copy of the computing resource in response to the first face failing to match the second face; and

cause a record associating the image and the computing resource to be stored on a remote server, wherein the record includes a time and date that the computing resource was accessed, and information that indicates a version of the computing resource.

17. The apparatus of claim 16, wherein the computing resource is located on a remote server, the processor is further configured to send a request to access the computing resource to the remote server, and send a copy of the captured image associated with the request to the remote server.

18. The apparatus of claim 16, wherein the computing resource comprises an application.

19. The apparatus of claim 16, wherein the computing resource comprises a profile.

20. The apparatus of claim 16, wherein the computing resource comprises a data file.