# US 11,442,782 B2 · Resource access > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,442,782 B2 - Document ID: US11442782B2 - Status: Granted - Kind: B2 - Application number: 16/887,628 - Filed: 2020-05-29 - Published: 2020-12-10 - Granted: 2022-09-13 - Earliest claimed: 2019-06-10 - Assignees: Nokia Technologies Oy - Applicants: Nokia Technologies Oy - Inventors: Timothy Giles Beard; Christopher John Wright - Web page: https://patentgrep.com/patent/US11442782B2 ## CPC - G06N 20/10: using kernel methods, e.g. support vector machines [SVM] - G06F 3/013: {Eye tracking input arrangements (G06F3/015 takes precedence)} - G06F 9/4843: {by program, e.g. task dispatcher, supervisor, operating system} - G06F 9/5038: {considering the execution order of a plurality of tasks, e.g. taking priority or time dependency constraints into consideration (scheduling strategies G06F9/4881 and subgroups)} - G06F 18/22: Matching criteria, e.g. proximity measures - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06N 3/08: Learning methods - G06N 3/09: Supervised learning - G06N 7/01: Probabilistic graphical models, e.g. probabilistic networks - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/105: {Multiple levels of security} - G06F 2221/2137: Time limited access, e.g. to a computer or data - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An apparatus comprising means for performing: at a first time, controlling whether a user is granted access to a resource based on a response of the user to a first access task, and setting one or more restrictions on granted access to the resource based on the response of the user to the first access task; at a second time, controlling whether the user is granted access to the resource based on a response of the user to a second access task, different to the first access task, and setting one or more restrictions on granted access to the resource based on the response of the user to the second access task; and initiating a change from the first access task to the second access task, wherein the initiation of the change is causally independent of the response of the user to the first access task. ## Claims ### Claim 1 An apparatus comprising: at least one processor; and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to perform: at a first time: controlling whether or not a user is granted access to at least one resource based on an obtained response of the user to a first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the first access task, at a second time: controlling whether or not the user is granted access to the at least one resource based on an obtained response of the user to a second access task, different to the first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the second access task; obtaining an expected usage of the at least one resource at the first time and at the second time based on one or more values of the one or more monitored parameters at the first and second time, respectively, which vary with actions of the user, and wherein the one or more monitored parameters comprises one or more of (i) a time of day the user attempts to access the at least one resource, (ii) a physical location of the user when the user attempts to access the at least one resource, or (iii) biometric parameters indicative of one or more of a mood or behavior of the user; and initiating a change from the first access task to the second access task, wherein the initiation of the change is causally independent of the obtained response of the user to the first access task, wherein the initiation of the change from the first access task to the second access task occurs in response to a change, occurring between the first and second times, in the one or more values of the one or more monitored parameters, and from the first access task to the second access task if the expected usage at the second time is different to the expected usage at the first time. ### Claim 2 (depends on 1) The apparatus of claim 1 wherein setting one or more restrictions on granted access comprises controlling one or more permissions of the at least one resource to at least one system resource via which the user can interact with the at least one resource. ### Claim 3 (depends on 1) The apparatus of claim 1 wherein setting one or more restrictions on granted access comprises granting access for the user to at least one of a plurality of resources and denying access for the user to at least one other of the plurality of resources. ### Claim 4 (depends on 1) The apparatus of claim 1 wherein setting one or more restrictions on granted access to the at least one resource comprises setting a time limit on the granted access. ### Claim 5 (depends on 1) The apparatus of claim 1 wherein setting one or more restrictions on granted access to the at least one resource comprises controlling settings of at least one system resource via which the user can interact with the at least one resource. ### Claim 6 (depends on 1) The apparatus of claim 1 wherein the first and second access task comprise rendering one or more target elements rendered to the user for identification by the user. ### Claim 7 (depends on 6) The apparatus of claim 6 wherein the first access task differs from the second access task in respect of one or more distractor elements rendered to the user. ### Claim 8 (depends on 7) The apparatus of claim 7 wherein the change from the first access task to the second access task comprises changing one or more of: a ratio; a proximity; a similarity; or a relative movement, of the one or more distractor elements to the one or more target elements. ### Claim 9 (depends on 6) The apparatus of claim 6 wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to further perform: obtaining gaze-tracking data of the user; and determining when a fixation position of a gaze of the user matches a rendered position of the one or more target elements, wherein the obtained response of the user to the first and/or second access task is based on a duration and/or frequency of the fixation position of the gaze of the user matching the rendered position of the one or more target elements. ### Claim 10 (depends on 1) The apparatus of claim 1 wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to further perform: preventing access to the at least one resource if the determined response of the user is within a first class of responses; setting first one or more restrictions on granted access to the at least one resource if the determined response of the user is within a second class of responses; and setting second one or more restrictions, different to the first restrictions, on granted access to the at least one resource if the measured response of the user is within a third class of responses. ### Claim 11 (depends on 1) The apparatus of claim 1 wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to further perform: classifying the obtained response of the user to the first and/or second access task; controlling whether or not a user is granted access to at least one resource based on a classification of the determined response of the user; and setting one or more restrictions on granted access to the at least one resource based on the classification of the determined response of the user. ### Claim 12 (depends on 1) The apparatus of claim 1, wherein the obtained response of the user to the first access task and the second access task is based on gaze-tracking data. ### Claim 13 A method comprising: at a first time: controlling whether or not a user is granted access to at least one resource based on an obtained response of the user to a first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the first access task, at a second time: controlling whether or not the user is granted access to the at least one resource based on an obtained response of the user to a second access task, different to the first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the second access task; obtaining an expected usage of the at least one resource at the first time and at the second time based on one or more values of the one or more monitored parameters at the first and second time, respectively, which vary with actions of the user, and wherein the one or more monitored parameters comprises one or more of (i) a time of day the user attempts to access the at least one resource, (ii) a physical location of the user when the user attempts to access the at least one resource, or (iii) biometric parameters indicative of one or more of a mood or behavior of the user; and automatically initiating a change from the first access task to the second access task, wherein the initiation of the change is causally independent of the obtained response of the user to the first access task, wherein the initiation of the change from the first access task to the second access task occurs in response to a change, occurring between the first and second times, in the one or more values of the one or more monitored parameters, and from the first access task to the second access task if the expected usage at the second time is different to the expected usage at the first time. ### Claim 14 (depends on 13) The method of claim 13 wherein setting one or more restrictions on granted access comprises controlling one or more permissions of the at least one resource to at least one system resource via which the user can interact with the at least one resource. ### Claim 15 (depends on 13) The method of claim 13, wherein the obtained response of the user to the first access task and the second access task is based on gaze-tracking data. ### Claim 16 A non-transitory computer readable medium comprising program instructions stored thereon for performing at least the following: at a first time: controlling whether or not a user is granted access to at least one resource based on an obtained response of the user to a first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the first access task, at a second time: controlling whether or not the user is granted access to the at least one resource based on an obtained response of the user to a second access task, different to the first access task, and setting one or more restrictions on granted access to the at least one resource based on the obtained response of the user to the second access task; obtaining an expected usage of the at least one resource at the first time and at the second time based on one or more values of the one or more monitored parameters at the first and second time, respectively, which vary with actions of the user, and wherein the one or more monitored parameters comprises one or more of (i) a time of day the user attempts to access the at least one resource, (ii) a physical location of the user when the user attempts to access the at least one resource, or (iii) biometric parameters indicative of one or more of a mood or behavior of the user; and initiating a change from the first access task to the second access task, wherein the initiation of the change is causally independent of the obtained response of the user to the first access task, wherein the initiation of the change from the first access task to the second access task occurs in response to a change, occurring between the first and second times, in the one or more values of the one or more monitored parameters and from the first access task to the second access task if the expected usage at the second time is different to the expected usage at the first time. ### Claim 17 (depends on 16) The non-transitory computer readable medium of claim 16, wherein the obtained response of the user to the first access task and the second access task is based on gaze-tracking data.