Access control of software applications based on biometric identifiers

Patent metadata

Field	Value
Publication number	US-10146922-B2
Application number	US-201615382282-A
Country	US
Kind code	B2
Filing date	Dec 16, 2016
Priority date	Dec 16, 2016
Publication date	Dec 4, 2018
Grant date	Dec 4, 2018

Abstract

In one implementation, the present invention is directed to a method for controlling access to a software application using one or more processors configured by code, the method comprising repeating a usage verification cycle continually during a usage session of the software application, wherein each repetition of the usage verification cycle includes receiving a digital image of an access area used to access the software application, identifying a representation of one or more persons in the digital image, estimating an age of each one of the persons within the digital image, and comparing the estimated age of each one of the persons within the digital image to a predetermined age value provided in a usage policy dataset associated with at least of one of the persons within the digital image. The method further comprises interrupting the usage of the software application in response to the age of at least one of the persons within the digital image exceeding the predetermined age value provided in a usage policy dataset.

First claim

What is claimed is:

1. A method for providing access to a software application using one or more access control processors configured by code executing therein, the method comprising:
receiving from a client device requesting access to the software application, a digital image, wherein the digital image includes a depiction of the present location of a user of the client device;
identifying a representation of one or more persons within in the digital image;
estimating an age of each of the one or more persons within the digital image based on one or more visually identifiable biometric features present within the image;
comparing the estimated age of each one of the persons within the digital image to a usage policy dataset associated with at least the client device user, wherein the usage policy dataset includes at least a predetermined age threshold value for access to the software application; and
providing access to the software application based on the comparison of the age of the identified persons with the usage policy dataset.

2. The method according to claim 1 , wherein the method further comprises:
generating an initial request for a digital image of a client device user in response to a user's request to access the software application; and
transmitting the request to one or more client devices used by the access requesting user.

3. The method according to claim 2 , wherein the method further comprises:
selecting, using a pseudo-random number generator, an entry from a gesture description database;
including, within the initial request, a request to perform the selected gesture description;
evaluating the received digital image for a depiction of the selected gesture description; and
determining the age of the identified individuals within the digital image where the gesture identified in the received digital image matches the gesture description.

4. The method according to claim 1 , wherein the method further comprises:
repeating a usage verification cycle continually upon permitting access to the software application, wherein each repetition of the usage verification cycle includes:
selecting, using a pseudo-random number generator, an entry from a gesture description database;
including, within the initial request, a request to perform the selected gesture description in front of a digital video recorder;
evaluating the received digital video recording for a depiction of the selected gesture description; and
determining the age of the identified individuals within the digital image where the gesture identified in the received digital video matches the gesture description.

5. The method according to claim 4 , wherein the method further comprises:
revoking access to the software application where the age of at least one identified person is above the predetermined age threshold value during at least one usage verification cycle.

6. The method according to claim 1 , wherein identifying a representation comprises:
identifying the representation of a primary individual within a foreground portion of the digital image.

7. The method according to claim 6 , wherein identifying a representation comprises:
identifying the representation of a secondary individual within a background portion of the digital image, and wherein
the usage policy dataset includes:
a first usage rule for the identified primary individual; and
a second usage rule for the identified secondary individual.

8. The method according to claim 7 , wherein the first usage rule includes at least one data value corresponding to a permitted age range of the primary individual.

9. The method according to claim 7 , further comprising:
comparing the estimated age of the user against the age range data value of the first usage policy; and
revoking access when the identified age of the primary user exceeds the age range data value.

10. The method according to claim 1 , wherein the method further comprises:
revoking access to the software application where the age of at least one identified person is above the predetermined age threshold value during at least one usage verification cycle.

11. The method according to claim 10 , wherein said the second rule of the usage policy includes:
at least one data value corresponding to a permitted age range of at least one of the secondary individuals.

12. The method according to claim 11 , wherein the age value of the secondary usage rule is greater than the age value provided in the usage policy.

13. The method according to claim 11 , further comprising revoking access to the software application where the age of at least one secondary person exceeds the permitted age range provided in the second usage rule in a predetermined number of verification cycles.

14. The method according to claim 1 , wherein each repetition of the usage verification cycle comprises:
logging the received digital image,
comparing the received digital image with at least one of a previously logged digital image, and
revoking access to the software application in response a failure to match the received digital image and at least one previously logged digital image.

15. The method according to claim 1 , wherein each repetition of the usage verification cycle comprises:
setting a pseudo-random repetition delay for a next repetition of the usage verification cycle.

16. The method according to claim 1 , wherein the software application is remote to the access control processors.

17. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by a computing system to cause the computing system to perform a method for controlling access to a software application, wherein the method comprises repeating a usage verification cycle continually during a usage session of the software application, each repetition of the usage verification cycle comprising:
receiving a digital image of an access area used to access the software application,
identifying a representation of one or more persons in the digital image based on the image,
estimating an age of each one of the persons according to biometric information of the person extracted from the representation of one or more visually identifiable biometric features present within in the image,
verifying a usage policy based on the age of the persons, and
interrupting the usage of the software application in response to a missing fulfillment of the usage policy.

18. A system for controlling access to a software application, wherein the system comprises:
at least one processor having a memory and being configured with code executing therein to:
repeat a usage verification cycle continually during a usage session of the software application,
receive a digital image of an access area used to access the software application in each repetition of the usage verification cycle,
identify a representation of one or more persons in the digital image in each repetition of the usage verification cycle,
estimate an age of each one of the persons according to biometric information of the person extracted from the representation of one or more visually identifiable biometric features present within in the image in each repetition of the usage verification cycle,
verify a usage policy based on the age of the persons in each repetition of the usage verification cycle, and
interrupt the usage of the software application in response to a missing fulfillment of the usage po

Assignees

• IBM
• Inernational Business Machines Corp

Inventors

• Guidotti Alice
• Pastorelli Bernardo
• Rosati Leonardo
• Tufarolo Elia

Classifications

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title