Systems and methods for providing access to data based on privacy of a user location

Patent metadata

Field	Value
Publication number	US-12147553-B2
Application number	US-202117469969-A
Country	US
Kind code	B2
Filing date	Sep 9, 2021
Priority date	Sep 17, 2020
Publication date	Nov 19, 2024
Grant date	Nov 19, 2024

Abstract

Disclosed herein are systems and method for securely providing access to data. In one exemplary aspect, a method may comprise receiving a request to access data on a computing device of a user and identifying a location of the computing device. The method may comprise determining whether access to the data is allowed in the location based on a location-based rule of a plurality of location-based rule. The method may comprise, in response to determining that access to the data is allowed in the location, detecting, via sensors of the computing device, (1) at least one other person different from the user or (2) a surveillance device in the location, and determining whether the at least one other person or the surveillance device can view the data without direct access to the computing device. If not, the method may comprise providing access to the data on the computing device.

First claim

The invention claimed is:

1. A method for securely providing access to data, the method comprising:
receiving a request to access data on a computing device of a user, wherein the computing device is a mobile device with an accelerometer;
identifying a location of the computing device;
determining whether access to the data is allowed in the location based on a location-based rule of a plurality of location-based rules;
in response to determining that access to the data is allowed in the location, detecting, via sensors of the computing device, (1) at least one other person different from the user or (2) a surveillance device in the location;
determining whether eyes of the at least one other person or a lens of the surveillance device are targeted towards a display of the computing device such that the at least one other person or the surveillance device can view the data without direct access to the computing device;
in response to determining that the eyes of at least one other person or the lens of the surveillance device are targeted towards the display, re-evaluating whether to provide access to the data until the at least one other person or the surveillance device cannot view the data, wherein the re-evaluating comprises:
determining, using the accelerometer, whether an angle at which the computing device is being held has changed to a new angle;
in response to detecting a change in the angle:
determining whether the at least one other person or the surveillance device can view the data at the new angle; and
in response to determining that the at least one other person or the surveillance device cannot view the data at the new angle, providing access to the data on the computing device.

2. The method of claim 1 , wherein the request further comprises access credentials of the user, further comprising prior to determining whether access to the data is allowed in the location:
verifying whether the user is authorized to access the data based on the access credentials;
in response to determining that the user is not authorized to access the data, denying the request.

3. The method of claim 1 , further comprising:
in response to determining that the at least one other person or the surveillance device can view the data, determining whether the at least one other person or the surveillance device are authorized to access the data; and
in response to determining that the at least one other person or the surveillance device are authorized to access the data, providing access to the data on the computing device.

4. The method of claim 1 , further comprising:
in response to determining that the at least one other person or the surveillance device can view the data, denying the request.

5. The method of claim 1 , further comprising:
in response to determining that access to the data is not allowed in the location, denying the request.

6. The method of claim 1 , wherein the data is accessed via an audio-based interface, and wherein determining whether the at least one other person or the surveillance device can view the data without direct access to the computing device further comprises:
determining whether the computing device is connected to an audio output device that outputs sound to the user; and
in response to determining that the computing device is not connected to the audio output device, determining that the at least one other person or the surveillance device can view the data.

7. The method of claim 1 , wherein the data is accessed via a graphical user interface, and wherein determining whether the at least one other person or the surveillance device can view the data without direct access to the computing device further comprises:
determining whether a display of the computing device is in line of sight of the at least one other person or the surveillance device;
in response to determining that the display is in the line of sight, determining that the at least one other person or the surveillance device can view the data.

8. The method of claim 1 , wherein detecting, via the sensors of the computing device, the at least one other person or the surveillance device in the location further comprises:
broadcasting a discovery message from the computing device;
receiving, from a plurality of devices, a respective response message;
identifying a subset of the plurality of devices that are located within a threshold distance from the computing device, wherein the subset comprises the surveillance device or devices of the at least one other person.

9. A system for securely providing access to data, the system comprising:
a hardware processor configured to:
receive a request to access data on a computing device of a user, wherein the computing device is a mobile device with an accelerometer;
identify a location of the computing device;
determine whether access to the data is allowed in the location based on a location-based rule of a plurality of location-based rules;
in response to determining that access to the data is allowed in the location, detect, via sensors of the computing device, (1) at least one other person different from the user or (2) a surveillance device in the location;
determine whether eyes of the at least one other person or a lens of the surveillance device are targeted towards a display of the computing device such that the at least one other person or the surveillance device can view the data without direct access to the computing device;
in response to determining that the eyes of at least one other person or the lens of the surveillance device are targeted towards the display, re-evaluate whether to provide access to the data until the at least one other person or the surveillance device cannot view the data, wherein when re-evaluating the hardware processor is configured to:
determine, using the accelerometer, whether an angle at which the computing device is being held has changed to a new angle;
in response to detecting a change in the angle:
determine whether the at least one other person or the surveillance device can view the data at the new angle; and
in response to determining that the at least one other person or the surveillance device cannot view the data at the new angle, provide access to the data on the computing device.

10. The system of claim 9 , wherein the request further comprises access credentials of the user, wherein the hardware processor is further configured to, prior to determining whether access to the data is allowed in the location:
verify whether the user is authorized to access the data based on the access credentials;
in response to determining that the user is not authorized to access the data, deny the request.

11. The system of claim 9 , wherein the hardware processor is further configured to:
in response to determining that the at least one other person or the surveillance device can view the data, determine whether the at least one other person or the surveillance device are authorized to access the data; and
in response to determining that the at least one other person or the surveillance device are authorized to access the data, provide access to the data on the computing device.

12. The system of claim 9 , wherein the hardware processor is further configured to:
in response to determining that the at least one other person or the surveillance device can view the data, deny the request.

13. The system of claim 9 , wherein the hardware processor is further configured to:
in response to determining that access to the data is not allowed in the location, deny the request.

14. The system of claim 9 , wherein t

Assignees

• Acronis Int Gmbh

Inventors

• Tormasov Alexander
• Melnikov Oleg
• Beloussov Serguei
• Protasov Stanislav

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F2221/032

  Protect output to user by software means · CPC title