Managing access based on activities of entities

Patent metadata

Field	Value
Publication number	US-11568034-B2
Application number	US-202017097079-A
Country	US
Kind code	B2
Filing date	Nov 13, 2020
Priority date	Jul 12, 2017
Publication date	Jan 31, 2023
Grant date	Jan 31, 2023

Abstract

Concepts and technologies are disclosed herein for managing access based on activities of entities. A computing device can collect data that comprises an image. The computing device can identify an entity that is located in a range of a sensor. The computing device can determine an identity that is associated with the entity and an activity associated with the entity. The computing device can obtain a trust indicator associated with the entity. The computing device can determine, based on the trust indicator, if the activity should be allowed. If the computing device determines that the activity should be allowed, the computing device can initiate allowing of the activity. If the computing device determines that the activity should not be allowed, the computing device can initiate blocking of the activity.

First claim

The invention claimed is:

1. A gateway device comprising:
an imaging device;
a networking interface;
a processor; and
a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising:
capturing, by the imaging device, a plurality of images of an entity that is located in an environment comprising a proximity of the imaging device,
determining, based on one image of the plurality of images, an identity of the entity,
determining, based on the plurality of images, a movement of the entity in the environment,
determining, based on the movement, a physical activity of the entity in the environment,
obtaining, using the identity and via the networking interface, a plurality of trust indicators that are defined for the entity, wherein each of the plurality of trust indicators comprises a respective trust value for a respective activity if performed by the entity,
generating, based on the plurality of trust indicators, a trust score for the entity, wherein the trust score defines a trustworthiness of the entity in general,
if a determination is made that the plurality of trust indicators do not include a defined trust value for the physical activity of the entity in the environment, determining, based on the trust score, if the entity is trustworthy to perform the physical activity of the entity in the environment,
if a determination is made that one of the plurality of trust indicators includes the defined trust value for the physical activity of the entity in the environment, determining, based on one of the plurality of trust indicators, if the entity is trustworthy to perform the physical activity of the entity in the environment,
if a determination is made that the physical activity of the entity in the environment should be allowed, initiating allowing of the physical activity of the entity in the environment, and
if a determination is made that the physical activity of the entity in the environment should not be allowed, initiating blocking of the physical activity of the entity in the environment.

2. The gateway device of claim 1 , wherein determining the identity comprises:
sending, to an identity source, the one image of the plurality of images; and
receiving, from the identity source, identity data that indicates the identity.

3. The gateway device of claim 2 , wherein the identity source comprises a social networking service.

4. The gateway device of claim 1 , wherein one of the plurality of trust indicators comprises an associated trust value for the entity accessing a resource via the networking interface.

5. The gateway device of claim 1 , wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising:
executing a background process to track additional movements of the entity in the environment;
detecting, during the executing of the background process and based on the additional movements of the entity, a further activity of the entity in the environment; and
determining, based on a further trust indicator, if the entity is to be allowed to perform the further activity in the environment.

6. The gateway device of claim 2 , wherein the identity source comprises a web search engine.

7. The gateway device of claim 1 , wherein determining the physical activity comprises:
sending, directed to a server computer and via the networking interface, the plurality of images; and
receiving, from the server computer and via the networking interface, activity data that indicates the physical activity.

8. The gateway device of claim 1 , wherein one of the plurality of trust indicators comprises a trust value that is defined for the physical activity at a particular geographic location, and wherein the environment is located at the particular geographic location.

9. The gateway device of claim 1 , wherein determining the physical activity further comprise obtaining audio associated with the entity and determining, based on the audio, the physical activity.

10. The gateway device of claim 1 , wherein determining the physical activity comprises:
accessing information that defines types of movements that correspond to activities comprising the physical activity; and
determining the physical activity based on the movements and the information.

11. A method comprising:
capturing, at a gateway device comprising an imaging device and a networking interface, and using the imaging device, a plurality of images of an entity that is located in an environment comprising a proximity of the imaging device;
determining, based on one image of the plurality of images, an identity of the entity;
determining, based on the plurality of images, a movement of the entity in the environment;
determining, based on the movement, a physical activity of the entity in the environment;
obtaining, by the gateway device via the networking interface and using the identity, a plurality of trust indicators that are defined for the entity, wherein each of the plurality of trust indicators comprises a respective trust value for a respective activity if performed by the entity;
generating, by the gateway device and based on the plurality of trust indicators, a trust score for the entity, wherein the trust score defines a trustworthiness of the entity in general;
if a determination is made that the plurality of trust indicators do not include a defined trust value for the physical activity of the entity in the environment, determining, by the gateway device and based on the trust score, if the entity is trustworthy to perform the physical activity of the entity in the environment;
if a determination is made that one of the plurality of trust indicators includes the defined trust value for the physical activity of the entity in the environment, determining, by the gateway device and based on one of the plurality of trust indicators, if the entity is trustworthy to perform the physical activity of the entity in the environment;
if a determination is made that the physical activity of the entity in the environment should be allowed, initiating, by the gateway device, allowing of the physical activity of the entity in the environment; and
if a determination is made that the physical activity of the entity in the environment should not be allowed, initiating, by the gateway device, blocking of the physical activity of the entity in the environment.

12. The method of claim 11 , further comprising:
executing a background process to track additional movements of the entity in the environment;
detecting, during the executing of the background process and based on the additional movements of the entity, a further physical activity of the entity in the environment; and
determining, based on a further trust indicator, if the entity is to be allowed to perform the further physical activity in the environment.

13. The method of claim 11 , wherein determining the physical activity further comprise obtaining audio associated with the entity and determining, based on the audio, the physical activity.

14. The method of claim 11 , wherein determining the identity of the entity comprises:
sending, directed to an identity source, the one image of the plurality of images; and
receiving, from the identity source, identity data that indicates the identity.

15. The method of claim 11 , wherein determining the physical activity comprises:
accessing information that defines types of movements that correspond to activities comprising the physical activity; and
determining the physi

Assignees

• At & T Ip I Lp

Inventors

• Zellner Samuel N

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04W12/08

  Access security · CPC title

• G06F21/55

  Detecting local intrusion or implementing counter-measures · CPC title

• H04W12/68

  Gesture-dependent or behaviour-dependent · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title