Configurable electronic-device security locking

• US 9,774,597 B2
• Filed: 12/05/2014
• Issued: 09/26/2017
• Est. Priority Date: 12/05/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Speicher, Stephen, Sarkar, Ananda
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US14/562,574
• Publication Number:
  US 20160164865A1
• Time in Patent Office: 1,026 Days
• Field of Search: 726 2- 6, 726 17, 726 21, 713168, 713182, 713186, 382115-118, 382124
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

An interface of an electronic device may be locked in accordance with an authorization confidence level indicating a likelihood that the electronic device is in the possession of an authorized user of the electronic device. Multiple signals may be detected using one or more sensors of an electronic device. The authorization confidence level may be automatically determined using the detected signals. The electronic device may be configured to have a security timeout based at least in part on the authorization confidence level. In some examples, collection(s) of signals may be detected using one or more sensors of an electronic device. A confidence history may be updated using the collection(s) of signals. In response to a match of the confidence history to a stored locking condition, a user interface of the electronic device may be locked.

Claims

1. A method, comprising:

detecting multiple signals using one or more sensors of an electronic device;

automatically determining an authorization confidence level using the detected signals, the authorization confidence level indicative of whether the electronic device is under the control of an authorized user of the electronic device; and

configuring the electronic device to have a security timeout based at least in part on the authorization confidence level.

2. The method as claim 1 recites, the sensors including at least one of a network transceiver, a motion sensor, a proximity detector, a light sensor, a still imager, a video imager, a microphone, a fingerprint reader, a retinal scanner, an iris scanner, or a touchscreen.

3. The method as claim 1 recites, further including automatically determining respective signal-confidence levels of one or more of the detected signals, wherein the authorization confidence level is determined using the determined respective signal-confidence levels.

4. The method as claim 3 recites, the determining respective signal-confidence levels further including analyzing a first collection of one or more of the signals to provide a first one of the signal-confidence levels indicating a level of correspondence of the analyzed signals to distinguishing data of the authorized user.

5. The method as claim 4 recites, the analyzing including applying the one or more of the signals of the first collection to a neural network based at least in part on the distinguishing data, wherein the first of the signal-confidence levels is based at least in part on an output of the neural network.

6. The method as claim 5 recites, further including:

determining a diagnostic confidence level using one or more of the detected signals other than the one or more of the signals in the first collection; and

in response to the diagnostic confidence level matching a training condition, training the neural network using the one or more of the signals in the first collection.

7. The method as claim 1 recites, the configuring including disabling the security timeout in response to the determined authorization confidence level matching a selected confidence condition.

8. A device comprising:

a user interface;

one or more sensors;

one or more processing units operably coupled to the sensors and the user interface; and

one or more computer storage media storing distinguishing data of an authorized user of the device, the computer storage media further storing instructions that, when executed by the one or more processing units, cause the one or more processing units to perform operations comprising;

detecting multiple signals using the one or more sensors;

determining an authorization confidence level of the detected signals based at least in part on the distinguishing data, the authorization confidence level indicative of whether the electronic device is under the control of the authorized user of the electronic device;

determining a time period using the determined authorization confidence level; and

locking the user interface in response to inactivity of the user interface for the determined time period.

9. The device as claim 8 recites, the sensors including at least one of a network transceiver, a motion sensor, a proximity detector, a light sensor, a still imager, a video imager, a microphone, a fingerprint reader, a retinal scanner, an iris scanner, or a touchscreen.

10. The device as claim 8 recites, the user interface including at least one of the sensors.

11. The device as claim 10 recites, the at least one of the sensors included in the user interface comprising a touchscreen.

12. The device as claim 8 recites,

the one or more processing units including a first processing unit and a second processing unit;

the second processing unit configured to perform the locking the user interface; and

the computer storage media further storing instructions that, when executed by the first processing unit, cause the first processing unit to perform second operations comprising;

determining a signal-confidence level based at least in part on a first collection of one or more of the detected signals;

determining that the signal-confidence level matches a stored condition; and

in response to the matching the stored condition, waking the second processing unit from a sleep state.

13. The device as claim 8 recites, the sensors including a network transceiver and the multiple signals including a remote-device confidence signal, the operations further including receiving the remote-device confidence signal via the network transceiver.

14. The device as claim 8 recites, further including a network transceiver, the operations further including transmitting the determined authorization confidence level via the network transceiver.

15. A method, comprising:

detecting a collection of signals using one or more sensors of an electronic device;

updating a confidence history using the collection of signals; and

in response to a match of the confidence history to a stored locking condition, locking a user interface of the electronic device.

16. The method as claim 15 recites, the updating including storing, in the confidence history, values of at least some of the signals in the collection of signals.

17. The method as claim 16 recites, the at least some of the signals including motion signals and grip signals indicative of whether a left hand or a right hand is gripping the electronic device, and the locking condition including motion out of a left hand and into a left hand, or out of a right hand and into a right hand.

18. The method as claim 16 recites, the at least some of the signals including acceleration signals and the locking condition including a change in acceleration having a magnitude exceeding a selected threshold.

19. The method as claim 15 recites, further including repeating the detecting and updating for each of a plurality of collections of the signals, the updating including determining a respective authorization confidence level using each of the collection of signals, the confidence history including an average of the determined respective authorization confidence levels, and the locking condition including an interval of values of the average.

20. The method as claim 15 recites, further including repeating the detecting and updating for each of a plurality of collections of the signals, the updating including determining a respective signal-confidence level for each signal in each of the collections of signals, determining an aggregate confidence level for each of the collections of signals using the corresponding signal-confidence levels, and updating the confidence history using each of the aggregate confidence levels.