US 2016/0080393 A1Published application

Allowing varied device access based on different levels of unlocking mechanisms

AssigneeIntel Corporation

InventorsKeith Shippy, Tobias Kohlenberg, Mubashir Mian, Ned Smith, Omer Ben-Shalom, Tarun Viswanathan, Dennis Morgan, Timothy Verrall, Manish Dave, Eran Birk

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Systems and methods may provide for receiving runtime input from one or more unlock interfaces of a device and selecting a level of access with regard to the device from a plurality of levels of access based on the runtime input. The selected level of access may have an associated security policy, wherein an authentication of the runtime input may be conducted based on the associated security policy. In one example, one or more cryptographic keys are used to place the device in an unlocked state with regard to the selected level of access if the authentication is successful. If the authentication is unsuccessful, on the other hand, the device may be maintained in a locked state with regard to the selected level of access.

Claims20

Dependent claims

A device comprising:

a processor;
a plurality of unlock interfaces coupled to the processor, wherein the plurality of unlock interfaces enable use of runtime input related to authentication of a user and re-lock one or more of the device or data stored on the device based on one or more of subsequent monitoring of a presence of the user, one or more gestures to signal a desire to re-lock, or a change in continuous authentication that falls below an acceptable tolerance level;
and
a policy module comprising:
level determination logic to select a level of access of a plurality of levels of access to the device based on the runtime input, wherein different levels of access have associated security policies that specify different combinations of the plurality of unlock interfaces;
and
user authentication logic to conduct an authentication of the runtime input based on an associated security policy of the selected level of access;
and
a secure processor coupled to the processor, the secure processor including a cryptographic hardware module to perform cryptographic operations using one or more cryptographic keys.

6 more elements

A method comprising:

receiving, in a policy module of a processor, runtime input from one or more of a plurality of unlock interfaces of a device including the processor, wherein the plurality of unlock interfaces enable use of runtime input related to authentication of a user;
identifying metadata associated with data stored on the device;
comparing the runtime input to the metadata to select a level of access to the device from a plurality of levels of access, wherein different levels of access have associated security policies that specify different combinations of the plurality of unlock interfaces;
conducting an authentication of the runtime input based on an associated security policy of the selected level of access;
providing one or more cryptographic keys to a cryptographic hardware module of a security processor coupled to the processor to place the device in an unlocked state with regard to the selected level of access if the authentication is successful;
and
causing the one or more cryptographic keys to be removed from the cryptographic hardware module responsive to a duration of device inactivity, the duration of device inactivity dependent on the associated security policy.

4 more elements

At least one computer readable storage medium comprising instructions that when executed enable a system to:

receive, in a policy module of a processor, runtime input from one or more of a plurality of unlock interfaces of the system, wherein the plurality of unlock interfaces enable use of runtime input related to authentication of a user;
identify metadata associated with data stored on the system;
compare the runtime input to the metadata to select a level of access to the system from a plurality of levels of access, wherein different levels of access have associated security policies that specify different combinations of the plurality of unlock interfaces;
conduct an authentication of the runtime input based on an associated security policy of the selected level of access;
provide one or more cryptographic keys to a cryptographic hardware module of a security processor coupled to the processor to unlock the system with regard to the selected level of access if the authentication is successful;
and
lock the system responsive to a duration of inactivity, the duration of inactivity dependent on the associated security policy.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/951,654Filed 25 Nov 2015
Priority: 28 Sep 2012
Published: 17 Mar 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/105
For controlling access to devices or network resources: multiple levels of security
G06F 21/316
User authentication: by observing the pattern of computer usage, e.g. typical user behaviour
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04W 12/068
Authentication: using credential vaults, e.g. password manager applications or one time password [OTP] applications

Family

Application13/630,100Continuation · filed 28 Sep 2012
Application14/951,654Continuation
US 2014/0096178 A1Published application
US 9,223,952 B2Related patent
US 9,578,037 B2Related patent
US 2016/0080393 A1This patent

From the US filing history. Foreign family members aren’t listed.