Data loss prevention of social media content

Patent metadata

Field	Value
Publication number	US-10204384-B2
Application number	US-201514976397-A
Country	US
Kind code	B2
Filing date	Dec 21, 2015
Priority date	Dec 21, 2015
Publication date	Feb 12, 2019
Grant date	Feb 12, 2019

Abstract

In an example, there is disclosed a computing apparatus, comprising: a psychological state data interface to receive psychological state data; one or more logic elements, including at least one hardware element, comprising a verification engine to: receive a requested user action; receive a psychological state input via the psychological state data interface; analyze the psychological state input; and bar the requested user action at least partly responsive to the analyzing.

First claim

What is claimed is:

1. A computing apparatus, comprising:
an interface to communicatively couple the computing apparatus to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;
one or more logic elements, including at least one hardware logic element, comprising a verification engine to:
intercept an attempt by the enterprise user to provide content to a social media service;
receive a psychological state input via the interface;
analyze the psychological state input to determine according to a biometric profile that the user may be compromised;
at least partly responsive to a determination that the user may be compromised, provide the content to an enterprise data loss prevention (DLP) engine;
receive from the enterprise DLP engine a response that the content includes matter that is inappropriate according to an enterprise policy; and
bar the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

2. The computing apparatus of claim 1 , wherein analyzing the psychological state input comprises determining that the enterprise user is intoxicated or psychologically compromised.

3. The computing apparatus of claim 1 , wherein the verification engine comprises a trusted execution environment (TEE).

4. The computing apparatus of claim 3 , wherein the verification engine is further to perform attestation on the psychological state input via the TEE.

5. The computing apparatus of claim 3 , wherein the verification engine is further to attest a capability of a device communicatively coupled via the interface to perform a psychological state measurement.

6. The computing apparatus of claim 1 , wherein the computing apparatus further comprises second one or more logic elements comprising the DLP engine.

7. The computing apparatus of claim 1 , wherein the verification engine is further to:
provide a second-tier verification; and
permit the attempt by the enterprise user to provide content at least partly responsive to the second-tier verification.

8. The computing apparatus of claim 7 , wherein the second-tier verification is a cognitive ability test.

9. The computing apparatus of claim 8 , wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

10. The computing apparatus of claim 9 , wherein the cognitive ability test is to include at least partly a datum known to the enterprise user but not publicly known.

11. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions to instruct a processor to:
communicatively couple the processor, further comprising an enterprise data loss prevention (DLP) engine, via an interface to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;
intercept an attempt by the enterprise user to provide content to a social media service;
receive a psychological state input via the interface;
analyze the psychological state input, to determine according to a biometric profile that the user may be compromised;
at least partly responsive to a determination that the user may be compromised, provide the psychological state input to the enterprise DLP engine via the interface;
receive from the enterprise DLP engine via the interface a response that the content includes matter that is inappropriate according to an enterprise policy; and
bar the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

12. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein analyzing the psychological state input comprises determining that the enterprise user is intoxicated or psychologically compromised.

13. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the instructions are further to instruct the processor to provision a trusted execution environment (TEE).

14. The one or more tangible, non-transitory computer-readable mediums of claim 13 , wherein the instructions are further to instruct the processor to perform attestation on the psychological state input via the TEE.

15. The one or more tangible, non-transitory computer-readable mediums of claim 14 , wherein the instructions are further to instruct the processor to attest a capability of a device communicatively coupled via the interface to perform a psychological state measurement.

16. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the instructions are further to:
provide a second-tier biometric profile; and
permit the attempt by the enterprise user to provide content at least partly responsive to the second-tier biometric profile.

17. The one or more tangible, non-transitory computer-readable mediums of claim 16 , wherein the second-tier biometric profile further comprises a cognitive ability test.

18. The one or more tangible, non-transitory computer-readable mediums of claim 17 , wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

19. The one or more tangible, non-transitory computer-readable mediums of claim 17 , wherein the cognitive ability test is to include at least partly a datum known to the enterprise user but not publicly known.

20. A computer-implemented method of providing social media verification, comprising:
communicatively coupling a computing device, further comprising an enterprise data loss prevention (DLP) engine, via an interface to a biometric sensor array of a wearable device, the biometric sensor array configured to provide psychological state data for an enterprise user;
intercepting an attempt by the enterprise user to provide content to a social media service;
receiving a psychological state input via the interface;
analyzing the psychological state input to determine according to a biometric profile that the user may be compromised;
at least partly responsive to a determination that the user may be compromised, providing the content to the enterprise DLP engine via the interface;
receiving from the enterprise DLP engine via the interface a response that the content includes matter that is inappropriate according to an enterprise policy; and
barring the attempt by the enterprise user to provide the content at least partly responsive to the response from the enterprise DLP engine.

21. The method of claim 20 , wherein analyzing the psychological state input comprises determining that the user is intoxicated or psychologically compromised.

22. The method of claim 20 , wherein providing social media verification further comprises providing a second-tier verification.

23. The method of claim 22 , wherein the second-tier verification comprises a cognitive ability test.

24. The method of claim 23 , wherein the cognitive ability test is designed to be more difficult for the enterprise user in a compromised psychological state than in a non-compromised psychological state.

25. The method of claim 24 , wherein the cognitive ability test is to include at least partly a datum known to

Assignees

• Mcafee Llc

Inventors

• Mehta Kunal
• Woodward Carl D
• Grobman Steven
• Durand Ryan
• Hunt Simon

Classifications

• G06Q10/06395 Primary

  Quality analysis or management · CPC title

• G06F2221/2133

  Verifying human interaction, e.g., Captcha · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• A61B5/117

  Identification of persons (methods or arrangements for recognising patterns, e.g. fingerprints, G06F18/00, G06V40/00; identification of persons by analysing their voice or speech G10L17/00) · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title