Resource Access

Abstract

A device including components for performing the following operations, a method including the following operations, and a computer program for performing the following operations: at a first time, based on an obtained user response to a first access task, controlling whether a user is granted access to at least one resource; at a first time, based on an obtained user response to the first access task, setting one or more constraints on granted access to at least one resource; at a second time, based on an obtained user response to a second access task different from the first access task, controlling whether the user is granted access to at least one resource; at a second time, based on an obtained user response to the second access task, setting one or more constraints on granted access to at least one resource; and initiating a change from a first access task to a second access task, wherein the initiation of the change is independent of the obtained user response to the first access task in terms of cause.

Description

Technical Field

[0001] Embodiments of the present disclosure relate to resource access. Some embodiments relate to controlling user access to at least one resource based on a user's response to an access task. Background Art

[0002] Access roles protect access to resources. Access roles are used to decide whether to grant or deny a user access to a resource. If a user completes an access role, access to a resource is granted, and if a user fails to complete the same access role, access to the same resource is denied.

[0003] Examples of access tasks include a PIN-based device unlock task or a facial recognition-based device unlock task.

[0004] Resources protected by access tasks include system resources, such as system software and hardware controlled and operated by system software, and application software resources, such as productivity software, entertainment software, social software, etc., and their respective constituent functions, processes, and threads. Summary of the invention

[0005] According to various but not all embodiments, a device is provided, comprising components for performing the following operations: at a first time, controlling whether a user is granted access to at least one resource based on an obtained response of the user to a first access task; at a first time, setting one or more constraints regarding granted access to at least one resource based on an obtained response of the user to the first access task; at a second time, controlling whether the user is granted access to at least one resource based on an obtained response of the user to a second access task different from the first access task; at a second time, setting one or more constraints regarding granted access to at least one resource based on an obtained response of the user to the second access task; and initiating a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from the obtained response of the user to the first access task.

[0006] The apparatus may be configured as a device and include: at least one resource; a component for presenting an access task to a user; and a component for obtaining a response of the user to the first access task and / or the second access task.

[0007] According to various but not all embodiments, a device is provided, which includes at least one processor and at least one memory including computer program code. The at least one memory and the computer program code are configured to, together with the at least one processor, cause the device to at least perform: at a first time, based on the obtained user's response to a first access task, control whether the user is granted access to at least one resource; at a first time, based on the obtained user's response to the first access task, set one or more constraints on the granted access to at least one resource; at a second time, based on the obtained user's response to a second access task different from the first access task, control whether the user is granted access to at least one resource; at a second time, based on the obtained user's response to the second access task, set one or more constraints on the granted access to at least one resource; and initiate a change from the first access task to the second access task, wherein the initiation of the change is independent of the obtained user's response to the first access task in terms of cause.

[0008] According to various but not all embodiments, a method is provided, comprising: at a first time, controlling whether a user is granted access to at least one resource based on an obtained response of the user to a first access task; at a first time, setting one or more constraints regarding granted access to at least one resource based on an obtained response of the user to the first access task; at a second time, controlling whether the user is granted access to at least one resource based on an obtained response of the user to a second access task different from the first access task; at a second time, setting one or more constraints regarding granted access to at least one resource based on an obtained response of the user to the second access task; and automatically initiating a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from the obtained response of the user to the first access task.

[0009] According to various but not all embodiments, a computer program is provided that performs the following operations when run on a computer: at a first time, based on an obtained response of the user to a first access task, controls whether the user is granted access to at least one resource; at a first time, based on an obtained response of the user to the first access task, sets one or more constraints regarding granted access to at least one resource; at a second time, based on an obtained response of the user to a second access task different from the first access task, controls whether the user is granted access to at least one resource; at a second time, based on an obtained response of the user to the second access task, sets one or more constraints regarding granted access to at least one resource; and initiates a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from the obtained response of the user to the first access task.

[0010] According to various but not all embodiments, a non-transitory computer-readable medium, computer product, or machine-readable medium is provided, which includes instructions stored thereon for performing at least the following operations: at a first time, controlling whether a user is granted access to at least one resource based on an obtained user response to a first access task; at a first time, setting one or more constraints regarding granted access to at least one resource based on an obtained user response to the first access task; at a second time, controlling whether the user is granted access to at least one resource based on an obtained user response to a second access task different from the first access task; at a second time, setting one or more constraints regarding granted access to at least one resource based on an obtained user response to the second access task; and initiating a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from the obtained user response to the first access task.

[0011] The subsequent part of this Summary section describes various features that may be characteristic of any one of the embodiments described in the previous part of the Summary section. In addition, a description of a function should be considered to also disclose any means suitable for performing that function.

[0012] Setting one or more constraints on the access granted may include controlling one or more permissions of the at least one resource to at least one system resource via which the user can interact with the at least one resource.

[0013] Setting one or more constraints on granted access may include granting the user access to at least one resource of the plurality of resources and denying the user access to at least another resource of the plurality of resources.

[0014] Setting one or more constraints on the granted access to the at least one resource may include setting a time limit on the granted access.

[0015] Setting one or more constraints regarding the granted access to the at least one resource may include controlling settings of at least one system resource via which the user can interact with the at least one resource.

[0016] The first access task and the second access task may include presenting one or more target elements to the user for identification by the user.

[0017] In some but not all examples, the first access task differs from the second access task in one or more distractor elements presented to the user.

[0018] Changing from the first access task to the second access task may include changing one or more of: a ratio; proximity; similarity; or relative motion of one or more distractor elements and one or more target elements.

[0019] The component can be configured to: obtain gaze tracking data of the user; and determine when a fixed position of the user's gaze matches a rendering position of one or more target elements, wherein the obtained response of the user to the first access task and / or the second access task is based on the duration and / or frequency of the fixed position of the user's gaze matching the rendering position of one or more target elements.

[0020] The component may be configured to: block access to at least one resource if the determined response of the user is within a first category of responses; set one or more first constraints regarding granted access to at least one resource if the determined response of the user is within a second category of responses; and set one or more second constraints regarding granted access to at least one resource that are different from the first constraints if the measured response of the user is within a third category of responses.

[0021] The component can be configured to: classify the user's responses to the first access task and / or the second access task; control whether the user is granted access to at least one resource based on the determined classification of the user's responses; and set one or more constraints on granted access to at least one resource based on the determined classification of the user's responses.

[0022] Initiation of a change from a first access task to a second access task may be causally dependent upon a change occurring between the first time and the second time in one or more values ​​of one or more monitored parameters that vary as a function of an action of the user.

[0023] The component can be configured to: obtain the expected usage of at least one resource at a first time and a second time based on one or more values ​​of one or more monitored parameters at the first time and the second time, respectively; and initiate a change from a first access task to a second access task if the expected usage at the second time is different from the expected usage at the first time.

[0024] According to various but not all embodiments, examples are provided as claimed in the following claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Some examples will now be described with reference to the accompanying drawings, in which:

[0026] Figure 1 An example of the method described herein is shown;

[0027] Figure 2illustrates examples of the different contemplated uses described herein;

[0028] Figure 3 shows an example of the apparatus described herein;

[0029] FIG. 4A to FIG. 4C shows an example of the access task described herein;

[0030] Figure 5 shows an example of gaze tracking as described herein;

[0031] Figure 6 An example of obtaining a user's response to an access task as described herein is shown;

[0032] FIG. 7A to FIG. 7C shows examples of the different responses described herein;

[0033] Fig. 8A and 8B shows examples of constraints described herein on granted access;

[0034] 9A to 9C showing other examples described herein regarding constraints on granted access;

[0035] Fig.10 shows an example of a controller described herein;

[0036] Fig.11 An example of the delivery mechanism described herein is shown. DETAILED DESCRIPTION

[0037] Figure 1 A method for controlling user access to one or more resources 250 (first in Figure 3 1 and 2. The method 100 for accessing resources 250 is shown in FIG. 1. These resources 250 may include: system resources, including system software and hardware controlled and operated by the system software; and application software resources, including productivity software, entertainment software, social software, etc., and their respective component functions, processes, and threads. Access to these resources 250 may be granted or denied. When access is granted, the user may interact with the resources 250. When access is denied, the user cannot operate or control the resources 250.

[0038] Method 100 includes a method for accessing tasks 240 based on user Figure 3) and a second submethod 120 for initiating a change to an access task 240 so that the user faces different access tasks 240 at different times. The two submethods 110, 120 are causally independent because initiating a change to an access task 240 is causally independent from the user's response to the previous access task 240 and therefore also causally independent from the resulting control of the user's access to one or more resources 250.

[0039] The first sub-method 110 includes, at block 112, controlling whether a user is granted access to at least one resource 250 based on an obtained user response to the access task 240. Then, the first sub-method 110 includes, at block 114, setting one or more constraints on the granted access to at least one resource 250 based on the obtained user response to the access task 240.

[0040] The obtained user response to the access task 240 may be received from a device for measuring the response, or may be determined by processing data received from a device for measuring the response, or determined from a measurement of the response.

[0041] The user's response to the access task 240 is indicative of the user's cognitive control state. The cognitive control state is related to an individual's ability to resist distracting or absent-minded events. Thus, for example, the time it takes a user to complete the access task 240 is indicative of their level of distraction during the access task 240, and thus their cognitive control state can be estimated accordingly. For example, if the time it takes a user to complete the access task 240 differs by a statistically significant amount from the statistical mean time it takes a user to complete the access task 240 or a comparable access task (e.g., in terms of complexity), this can be attributed to the user's cognitive control state being higher or lower than usual during the access task 240.

[0042] For example, when in a lower cognitive control state, using certain resources 250 such as social software makes the user vulnerable to the technical means adopted by these resources 250 to gain the user's attention and distract them from other activities. This leads to an increase in the time spent interacting with these resources 250. The increase in the time spent interacting with these resources 250 can have an adverse effect on the user's mental health, a direct adverse effect on the user's physical health such as eye fatigue or repetitive strain injury (RSI), and an adverse effect on the power consumption of the device on which the user interacts with these resources 250. The setting of one or more constraints on the access granted in accordance with box 114 of the first sub-method 110 is a countermeasure against the technical means adopted by these resources 250, thereby reducing the time spent interacting with these resources 250 and mitigating the adverse effects mentioned above.

[0043] The second sub-method 120 includes initiating a change of the access task 240 from the first access task to the different second access task at block 122. Thus, at a first time, controlling whether the user is granted access to the at least one resource 250 and setting one or more constraints on the granted access in accordance with blocks 112 and 114 of the first sub-method 110, respectively, are based on the user's response to the first access task, while at a second time, they are based on the user's response to the different second access task.

[0044] The initiation of the change is causally independent of the obtained user response to the first access task. For example, if the user fails to complete the access task 240 in the first time, this will not initiate the change to the access task 240. To further illustrate this point, it should be understood that if the initiation of the change to the access task 240 is causally dependent on the user's response to the access task 240 (as opposed to block 122 of method 100), the user's failure to complete the access task 240 in the first time may trigger the change to the access task 240. An example of such a causal dependency is switching from a facial recognition-based device unlock task to a PIN-based device unlock task in response, at least in part, to the failure of the facial recognition-based device unlock task.

[0045] The change is not initiated by the user. For example, the change is not initiated by the user manually adjusting settings related to the access task 240 in the interval between the first time and the second time so that the user faces a different access task 240 at the second time. The change is initiated by the machine, and thus the change is automatically initiated. In some examples, the machine autonomously initiates the change.

[0046] In some examples, the initiation of the change of access task 240 depends on the cause of the change in one or more values ​​of one or more monitored parameters that vary with the user's action between the first time and the second time. Examples of such monitored parameters include, but are not limited to:

[0047] A time of day at which the user seeks access to at least one resource 250 via an access task 240;

[0048] a real-world location from which the user seeks access to at least one resource 250 via an access task 240; and

[0049] Biometric parameters that indicate the user's emotions or behavior, such as facial expressions, heart rate, and breathing rate.

[0050] The initiation of the change of access task 240 may not only be in response to any change in one or more values ​​of one or more monitored parameters. In some examples, the initiation of the change of access task 240 is in response to determining that the aforementioned change in one or more values ​​of one or more monitored parameters represents a change in the expected use of at least one resource 250 that the user seeks to access.

[0051] Thus, the method 100 may include obtaining an expected usage of at least one resource 250 at a first time and a second time based on the values ​​of the one or more monitored parameters at the first time and the second time, respectively. In this example, the method 100 includes initiating a change from the first access task to the second access task according to block 122 if the expected usage at the second time is different from the expected usage at the first time.

[0052] Figure 2 The parameter space 124 defined by one or more monitored parameters α, β that vary with the user's actions is schematically shown. Each dimension 126 of the parameter space 124 1 , 126 2 It is represented by one of the monitored parameters α and β. Figure 2 The parameter space 124 is only two-dimensional 126 1 , 126 2 It is not shown, but it should be understood that the parameter space 124 can be one-dimensional or multi-dimensional, where the number of dimensions corresponds to the number of monitored parameters α, β. Therefore, the parameter space 124 is spanned by the monitored parameters α, β.

[0053] In this example, parameter space 124 is divided into a plurality of defined subspaces 128 1 , 128 2 , 128 3 , 128 4 , each subspace is associated with a different expected usage of at least one resource 250 that the user seeks to access. Thus, if the values ​​of the monitored parameters α, β describe points within a subspace, then those values ​​are indicative of the expected usage associated with that particular subspace. Thus, determining that a change in one or more values ​​of one or more monitored parameters α, β represents a change in expected usage between a first time and a second time includes determining whether the values ​​of those monitored parameters α, β at the second time describe points within a different subspace than the points described by the values ​​of those monitored parameters α, β at the first time.

[0054] In some examples, subspaces 128 associated with different expected uses are mapped according to a set of rules (or a specific algorithm) that define boundaries about specific monitored parameters α, β. 1 , 128 2 , 128 3 , 1284 The definition of is determined. These rules can be personalized by the user. For example, the user can specify his working hours, during which the expected use of at least one resource is for work purposes, and can specify his free time, during which the expected use of at least one resource is for leisure purposes. These rules can be adapted to the itinerary specified by the user.

[0055] In other examples, subspaces 128 associated with different intended uses 1 , 128 2 , 128 3 , 128 4 The definition of is controlled by machine learning (or non-specific algorithms).

[0056] Machine learning may be supervised, such as classification of training data that associates previous values ​​of monitored parameters α, β with previous data obtained through resource usage tracking using the parameter space 124. Based on the data obtained through resource usage tracking, the resulting trained algorithm may classify resource usage according to how users will typically use resources 250 and / or according to which specific resources 250 users will use.

[0057] Unsupervised machine learning is also possible, such as clustering in parameter space 124, for example, K-means clustering in parameter space 124.

[0058] Machine learning can be achieved through pre-trained algorithms or dynamically updated algorithms.

[0059] In some examples, method 100 includes further categorizing the expected use with respect to its expected impact on the user's health.

[0060] In this example, the initiation of a change in access task 240 in which a user seeks access to at least one resource 250 between a first time and a second time is in response to determining that an expected impact of the expected use on the user's health at the second time is different than the expected impact of the expected use at the first time.

[0061] The expected impact can be determined from a lookup table of predefined impact scores for different resource usages. The impact score can be personalized for the user. In some examples, the personalized impact score is defined by the user, while in other examples, the personalized impact score is learned from user behavior over time.

[0062] In some examples, the impact score in the lookup table also varies with the total resource usage time in the previous period. For example, a user may set a target usage limit of one hour per day for at least one resource 250. As the user approaches that time, the impact score may decrease and become at least negative once the limit is reached. Additionally, during user-defined or learned work hours, resources 250 that are not related to the user's work may have a negative impact score, while outside of work hours, the health score may be higher.

[0063] If the impact score in the lookup table for the expected usage at the second time is different than the impact score for the expected usage at the first time, a change in access task 240 for the user seeking access to at least one resource 250 between the first time and the second time may be initiated.

[0064] In some examples, the change in the access task 240 initiated is to produce an access task 240 that is more or less sensitive to differences in the cognitive control state of the user. An access task 240 that is more sensitive to differences in the cognitive control state of the user can be an access task in which the difference in the way the access task 240 is performed by a focused user and a non-focused user is emphasized. Therefore, more concentration is required to complete such an access task 240, thereby obtaining access to the resource it protects. An access task 240 that is less sensitive to differences in the cognitive control state of the user will require less concentration and may therefore be easier to perform.

[0065] For example, when the intended use identified is related to:

[0066] absent-minded and therefore unhealthy use of at least one resource 250; or

[0067] the use of one or more resources 250 that employ technical means to gain the user's attention and distract them from other activities,

[0068] Unless the user demonstrates that they are in a high cognitive control state, restricting access to the resources 250 reduces the time the user spends interacting with those resources 250. When in a high cognitive control state, the user is more likely to use the at least one resource 250 to which they are granted access in a focused manner, and therefore spend less time interacting with the at least one resource 250.

[0069] This may be accomplished by initiating an access task 240 that is changed, in response to determining such expected usage, to an access task 240 that is more sensitive to differences in the user's cognitive control state.

[0070] Aside from this expected use, differentiating between users' cognitive control states may not be a priority. A priority may be given to the ease with which a user can gain access to at least one resource 250. In this case, a change in access task 240 is initiated that results in a resulting access task 240 that is less sensitive to differences in users' cognitive control states and therefore easier to complete for a non-focused user.

[0071] The method 100 may also include determining a confidence score for the accuracy of the expected usage, and if the confidence in the accuracy of the expected usage is low, then no change in accessing the task 240 may be initiated. For example, if the user is at home at 7:00 PM on a weekday, and the user has used at least one resource 250 in a particular way under similar circumstances 9 out of 10 times in the past, then there may be a 90% confidence that the user will use at least one resource 250 in the same way this time.

[0072] If the user's predicted tolerance for such changes is low, the initiation of a change to the access task 240 that results in a more sensitive access task 240 to differences in the user's cognitive control state may be ignored. The user's predicted tolerance for changes to the access task 240 may be based on past resource usage, current circumstances, and user-specific rules, such as lower tolerance when at the user's workplace and higher tolerance when at the user's home, for example.

[0073] In other examples, the change of the access task 240 initiated is to generate an access task 240 that is more suitable in the context or compensates for the difficulties caused by the adverse conditions. For example, an access task based on visual search (e.g., image recognition verification code) can be more challenging due to lighting conditions that produce screen glare, and under such conditions, a change of the access task 240 can be initiated to simplify the access task based on visual search or switch to another type of access task. As another example, facial recognition may be less accurate in poor lighting conditions, and under such conditions, a change of the access task 240 can be initiated to switch to another type of access task.

[0074] Figure 3 An example of an apparatus 200 suitable for performing the method 100 is schematically shown.

[0075] The apparatus 200 includes a controller 202 .

[0076] In this example, the controller 202 includes an access control module 212 configured to control whether a user 300 is granted access 232 to at least one resource 250 based on an obtained response 230 of the user to the access task 240. The controller 202 also includes a constraint control module 214 configured to set one or more constraints 234 regarding the granted access 232 to at least one resource 250 based on an obtained response 230 of the user 300 to the access task 240.

[0077] In this example, the controller 202 also includes a task control module 222 configured to initiate a change 236 of the access task 240 so that the user 300 is faced with a first access task to respond to at a first time, and then faced with a different second access task to respond to at a second time. As described above, the initiation of the change 236 is independent of the obtained user response 230 to the first access task.

[0078] The controller 202 may be provided by any suitable hardware or circuit. The modules 212, 214, 222 may be hardware modules of the controller 202 or may be functional modules of the controller 202 and may be implemented by firmware or software. For example, in some implementations, the controller 202 is a processor, such as a central processing unit running an operating system. The modules 212, 214, 222 represent functions provided by the operating system when running on the processor.

[0079] In some examples, the device 200 also includes at least one resource 250 with which the user 300 can interact when granted access 232 by the controller 202. In addition, the device 200 can be configured to present the access task 240 to the user 300 and obtain the user 300's response 230 to the access task 240 by receiving user input that can be obtained directly or by processing the received user input or by measuring parameters that parameterize the user 300's response 230. Examples of such parameters may include the following about Figure 5 and Figure 6 Describes the fixed location of the user's gaze.

[0080] For example, the apparatus 200 may be configured as or included in a device such as a smart phone or a tablet computer.

[0081] In this example, at least one resource 250 includes a device system resource, such as device hardware or device system software including an operating system and / or application software resources operable on the device.

[0082] In this example, the device can be configured to present the access task 240 to the user 300. Presenting the access task 240 sets the access task 240 into a format that can be perceived by the user 300. The access task 240 can be presented to the user 300 as a visual output from a display of the device, as an audio output from a speaker of the device, or as another perceptible output from another user interface of the device. These components for presenting the access task 240 to the user 300 can also be configured to enable interaction between the user 300 and at least one resource 250 if access 232 is granted.

[0083] In this example, the device may also include a sensor configured to receive user input from the user 300 (from which the response 230 of the user 300 to the access task 240 may be obtained) or to otherwise measure a parameter that parameterizes the response 230 of the user 300 .

[0084] FIG. 4A to FIG. 4C Schematically shows different access tasks 240 1 , 240 2 , 240 3 In these examples, the type of access task remains the same, but the parameters of the access task change.

[0085] In these examples, access task 240 1 , 240 2 , 240 3 All are visual search based tasks. Visit Task 240 1 , 240 2 , 240 3 includes one or more target elements T presented to the user 300 for identification by the user 300 1 To T 3 In each case, the user 300 has a request to one or more target elements T 1 To T 3 The successful identification completed the visit task 240 1 , 240 2 , 240 3 In some examples, completing access task 240 1 , 240 2 , 240 3 The user 300 is required to successfully identify one or more target elements T in a predetermined order. 1 To T 3 For example, one or more target elements T 1 To T 3There may be a set of numbers from a grid of numbers that is presented, and access task 240 may be to enter a PIN code comprising the set of numbers in a predetermined order.

[0086] Visit Mission 240 1 , 240 2 , 240 3 One or more distractor elements D are presented to the user. 1 To D 6 There are some differences.

[0087] In these examples, one or more target elements T 1 To T 3 and one or more distractor elements D 1 To D 6 is a graphical element presented to the user 300 via the display 242. In other examples, one or more target elements T 1 To T 3 and one or more distractor elements D 1 To D 6 For example, it may be presented as audio via a speaker. Presenting one or more target elements T 1 To T 3 and one or more distractor elements D 1 To D 6 Any of which formats these elements into a format in which they can be perceived by user 300.

[0088] The change 236 of the access task 240 initiated according to block 122 of the second sub-method 120 includes changing one or more distractor elements D 1 To D 6 with one or more target elements T 1 To T 3 One or more of: ratio; proximity; similarity (e.g., of shape, size, and / or color); and relative motion.

[0089] like Figure 4A Schematically shown, in accessing task 240 1 In the example, only the target element T 1 To T 3 No distractor elements are presented to the user 300.

[0090] like Figure 4B Schematically shown, in accessing task 240 2 In addition to the target element T 1 To T 3 In addition, the interference element D 1 , D 2 is also presented to the user 300 .

[0091] like Figure 4C Schematically shown, in accessing task 240 3 In addition to the target element T 1 To T 3 In addition, the interference element D 3 To D 6 is also presented to the user 300 .

[0092] With access to Task 240 2 The interference element D 1 , D 2 Compared to access task 240 3 The interference element D 3 To D 6 More, closer to the target element T 1 To T 3 , and in some cases with the target element T 1 To T 3 Therefore, user 300 distinguishes the target element T 1 To T 3 and interference element D 3 To D 6 Than the user distinguishes the target element T 1 To T 3 and interference element D 1 , D 2 Therefore, it is easier to focus on distractor elements D 3 To D 6 on, and therefore on Figure 4C Visiting Mission 240 3 It is easier to be distracted during the period. Figure 4B Visiting Mission 240 2 In contrast, the difference between the responses 230 of the user 300 when they are more easily distracted (i.e., in a low cognitive control state) and the responses 230 of the user 300 when they are less easily distracted (i.e., in a high cognitive control state) is represented by Figure 4C Visiting Mission 240 3 To emphasize. Figure 4C Visiting Mission 240 3 It is more sensitive to the difference in the cognitive control state of the user 300 .

[0093] An access task 240 having a higher ratio, proximity, similarity, and / or relative motion of distractor elements to target elements is more sensitive to differences in the cognitive control state of the user 300. An access task 240 having a lower ratio, proximity, similarity, and / or relative motion of distractor elements to target elements is less sensitive to differences in the cognitive control state of the user 300.

[0094] The parameters of the access task 240 provided to the user 300 when the user 300 seeks access to the at least one resource 250 may be based on the expected usage (as described above with respect to Figure 2 For example, one or more interfering elements D 1 To D 6 with one or more target elements T 1 To T 3 Parameters of ratio, proximity, similarity, and / or relative motion may be based on expected usage when user 300 seeks access to at least one resource 250. In these examples, task control module 222 is configured to determine these parameters.

[0095] The values ​​of the parameters of the access task 240 may be determined by using the expected usage to query a lookup table of preset values ​​that enable a suitably sensitive assessment of the user's cognitive control state in light of the expected usage. The preset values ​​may include an acceptable range within which the exact values ​​of the parameters of the access task 240 may be assigned sequentially, randomly, or otherwise, so that the access task 240 changes for different scenarios in which the user 300 seeks access to at least one resource 250 via the access task 240, even if the expected usage remains the same. Thus, the access task 240 cannot be learned by the user 300.

[0096] One or more distractor elements D 1 To D 6 Graphical icons may be designed to look like a plurality of resources 250, and the prominence of a fixed location of a user's gaze on one or more of these graphical icons may be used to gain further information about the intended usage.

[0097] In some examples, one or more target elements T are identified. 1 To T 3 This includes identifying the locations of these elements within the display 242. This can be done by Figure 5 The gaze tracking shown is implemented.

[0098] In this example, a camera 244, such as a front-facing camera mounted near the display 242 and included in the device 200, observes the eyes 302 of the user 300. The gaze tracking data obtained by the camera 244 is processed to determine a fixed position 304 of the gaze of the user 300 as a function of time. The fixed position 304 is determined when the gaze of the user 300 is focused on a series of points that are closely clustered (in time and space).

[0099] Figure 5Two fixed positions 304 are shown—one with the target element T 1 The rendering position of the other element D 2 's rendering position.

[0100] Figure 6 Schematically shows the Figure 5 An example of the apparatus 200 obtaining a response 230 of the user 300 .

[0101] In this example, at the apparatus 200, a fixed position 304 of the gaze of the user 300 as a function of time is associated with one or more target elements T 1 To T 3 Rendering position 246 T The comparison is performed to determine when the fixed position 304 of the user's 300 gaze matches one or more target elements T 1 To T 3 Rendering position 246 T The fixed position 304 of the user's 300 gaze is close to the target element T 1 To T 3 The rendering position of one of 246 T A match of can be considered as identifying the target element.

[0102] In one or more target elements T 1 To T 3 The fixed duration on the graph may be determined from the fixed position 304 of the user's 300 gaze and the one or more target elements T 1 To T 3 Rendering position 246 T The duration of the match between them is determined.

[0103] If the target element T 1 To T 3 is dynamic rather than static, then one or more target elements T 1 To T 3 Location 246 T is also expressed as a function of time.

[0104] The obtained response 230 of the user 300 to the access task 240 may be based on identifying one or more target elements T 1 To T 3 The total time taken to complete the access task 240 and thus all target elements in the access task 240. For example, the obtained response 230 of the user 300 to the access task 240 can be based on the fixed position 304 of the user 300's gaze having been in contact with one or more target elements T 1 To T 3 The rendering position of all target elements in 246T The total time spent matching.

[0105] Additionally or alternatively, the obtained response 230 of the user 300 to the access task 240 may be based on the target element T 1 To T 3 The time elapsed between new recognitions of target elements that were not previously recognized in .

[0106] Alternatively, the obtained response 230 of the user 300 to the access task 240 may be based on the one or more target elements T 1 To T 3 The fixed duration of the gaze on the image and / or the fixed position 304 of the user 300 matches one or more target elements T 1 to T 3 Rendering position 246 T frequency.

[0107] In some but not all examples, the fixed position 304 of the gaze of the user 300 as a function of time may also be associated with one or more distractor elements D 1 To D 6 Rendering position 246 D 314 of the user's 300 gaze is compared to determine when the fixed position 314 of the user's 300 gaze is aligned with one or more distractor elements D 1 To D 6 Rendering position 246 D Match.

[0108] In one or more distractor elements D 1 To D 6 The fixed duration on the image may be derived from the fixed position 304 of the user's 300 gaze and the one or more distractor elements D 1 To D 6 Rendering position 246 D The duration of the match between them is determined.

[0109] If the interference element D 1 To D 6 is dynamic rather than static, then one or more distractor elements D 1 To D 6 Location 246 D is also expressed as a function of time.

[0110] In one example, the obtained response 230 of the user 300 to the access task 240 is obtained from the one or more target elements T 1 To T 3 The duration of the fixation on one or more distractor elements D 1 To D 6is determined by a ratio of a fixed duration.

[0111] In another example, the obtained response 230 of the user 300 to the access task 240 is obtained from the fixed position 304 of the gaze of the user 300 from matching one or more target elements T 1 To T 3 Rendering position 246 T Change to match one or more distractor elements D 1 To D 6 Rendering position 246 D The frequency is determined.

[0112] Figure 6 This can be implemented by a gaze processing module that is part of the controller 202 or associated with the camera 244. The gaze processing module receives as input: a fixed position 304 of the gaze of the user 300 as a function of time; one or more target elements T 1 To T 3 Rendering position 246 T ; and one or more distractor elements D 1 To D 6 Rendering position 246 D The gaze processing module outputs the obtained response 230 of the user 300 to the access task 240 to the access control module 212 and the constraint control module 214 .

[0113] Different responses 230 of the user 300 to the access task 240 result in different levels of access of the user 300 to the at least one resource 250 .

[0114] FIG. 7A to FIG. 7C Different responses 230 of a user 300 to an access task 240 and the resulting access of the user 300 to at least one resource 250 are schematically shown.

[0115] exist Fig. 7A In the example, user 300 responds with 230 1 Falling within the first type of response. In this example, the first type of response corresponds to the user 300 failing to complete the access task 240. According to block 112 of the first sub-method 110, based on the user 300 failing to complete the access task 240, access to at least one resource 250 is blocked.

[0116] exist Figure 7B In the example of FIG. 2 , the user 300 responds 230 to the access task 240 2In this example, the second type of response corresponds to a situation in which the user 300 completes the access task 240 and thereby demonstrates that they are in a low cognitive control state. For example, the user 300 may need to make repeated attempts before completing the access task 240, or may take a long time to complete the access task 240. In this example, because the user 300 has completed the access task 240, the user 300 is granted access 232 to at least one resource 250. Based on the response 230 2 , setting one or more first constraints 234 regarding the granted access 232 to the at least one resource 250 1 .

[0117] exist Figure 7C In the example of FIG. 2 , the user 300 responds 230 to the access task 240 3 falls into the third category of responses. In this example, the third category of responses corresponds to situations in which the user 300 completes the access task and thereby demonstrates that they are in a medium cognitive control state. Figure 7B As in the example of FIG. 2 , because the user 300 has completed the access task 240, the user 300 is granted access 232 to at least one resource 250. However, in this example, one or more second constraints 234 are set regarding the granted access 232. 2 , the one or more second constraints 234 2 With one or more first constraints 234 1 Different. Since in this example user 300's response 230 3 Prove that the user is in a higher position than they are in Figure 7B In the example of a higher cognitive control state, therefore, one or more second constraints 234 are set regarding the access 232 being granted. 2 than one or more first constraints 234 1 The user 300 is granted access 232 to at least one resource 250. Figure 7C In the example, Figure 7B The example is less constrained.

[0118] The responses 230 of the user 300 to the access task 240 may be explicitly classified, for example, according to a specific algorithm or rule such as a lookup table, or, for example, according to a non-specific algorithm derived from supervised machine learning using classified past responses as training data (categories). Alternatively, the responses 230 of the user 300 to the access task 240 may be implicitly classified, for example, according to a non-specific algorithm derived from unsupervised machine learning using unlabeled past responses as training data (clusters).

[0119] It should be appreciated that there may be more than three categories of responses, and that a category indicating that the user is in a sufficiently high state of cognitive control may result in the user 300 being granted unrestricted access 232 to the at least one resource 250 .

[0120] Fig. 8A and Figure 8B as well as 9A to 9C An example of one or more constraints 234 on the granted access 232 set according to block 114 of the first sub-method 110 is schematically shown.

[0121] exist Fig. 8A and 8B In the example of , setting one or more constraints 234 regarding the granted access 232 includes controlling one or more settings of at least one system resource 260 .

[0122] exist Fig. 8A In the example of FIG. 2 , the at least one resource 250 to which access is controlled by the controller 202 is at least one system resource 260 .

[0123] exist Figure 8B In the example of FIG. 3 , at least one system resource 260 is an intermediate component in a communication chain between a user 300 and at least one resource 250 that the user 300 seeks to access. Thus, at least one system resource 260 enables the user to interact with at least one resource 250. At least one resource 250 may be an application software resource that the user 300 may interact with via at least one system resource 260.

[0124] In either example, controlling one or more settings of at least one system resource 260 to constrain what is granted access 232 may include controlling one or more settings to reduce performance of at least one system resource 260. For example, if at least one system resource 260 includes a processor, the processing speed may be adjusted, or if at least one system resource 260 includes a display driver, the color palette may be reduced, e.g., from full color to grayscale.

[0125] The reduction in performance of at least one system resource 260 prevents continued use of at least one resource 250 .

[0126] Alternatively, controlling one or more settings of at least one system resource 260 to restrict what is granted access 232 may include controlling one or more settings to improve the wellness of the user 300. For example, a blue light filter may be applied or screen brightness may be reduced.

[0127] When the user 300 is granted access to at least one resource, the lower the cognitive control state of the user 300, the greater the likelihood that the user will be distracted and spend an extended time interacting with the at least one resource 250. Rather than preventing continued use, by controlling one or more settings of the at least one system resource 260 to improve the well-being of the user 300, the adverse effects of extended use discussed above may be ameliorated.

[0128] exist Figures 9A to 9C In the example of , setting one or more constraints 234 regarding the granted access 232 includes controlling one or more permissions 266 of at least one resource 250 to a system resource 260 via which a user 300 can interact with the at least one resource 250. The at least one resource 250 can be an application software resource via which the user 300 can interact.

[0129] exist Fig. 9A In the example of , the one or more constraints 234 regarding the granted access 232 include reducing permissions 266 of the at least one resource 250 to the system resources 260 via which the user 300 can interact with the at least one resource 250. In this example, the at least one resource 250 is denied permissions to a first subset 262 of the system resources 260 and is granted permissions to a second subset 264 of the system resources 260. The different one or more constraints 234 change the first subset and the second subset 262, 264. The one or more first constraints 234 1 The at least one resource 250 is denied permission to access the specific system resource 260, and the one or more second constraints 234 2 The at least one resource 250 is not denied permission to the particular system resource 260. Thus, under one or more second constraints 234 2 In the present embodiment, being granted access 232 enables interaction between the user 300 and at least one resource via the particular system resource 260.

[0130] In an illustrative example, user 300 may be provided with restricted access to an application so long as user 300 can run the application, however, the application may be denied permission to a notification system and therefore unable to attract the user's attention via presenting notifications to user 300, and / or denied permission to an audio presentation system and therefore unable to attract the user's attention via audio being presented to user 300.

[0131] exist Fig. 9BIn some examples, the one or more constraints 234 regarding the granted access 232 include reducing permissions 266 of a first resource or a first subset 252 of the plurality of resources 250 to at least one system resource 260, wherein a second resource or a second subset 254 of the plurality of resources 250 (which may constitute the remainder) is granted permissions to the at least one system resource 260. In some examples, the user 300 is granted access to only a subset 254 of the plurality of resources 250 that would otherwise be accessible to the user 300 in the absence of the one or more constraints 234.

[0132] In the illustrative example, permission to use the processor to run a social application may be denied while a productivity application may be run by the processor. Thus, through the one or more constraints 234 set on the granted access 232, the user 300 is granted access to the productivity application but is denied access to the social application. More generally, setting one or more constraints 234 on the granted access 232 may include granting the user access to at least one resource in the plurality of resources 250 and denying the user access to at least another resource in the plurality of resources 250.

[0133] It should be noted that in some examples, one or more permissions 266 for individual ones of plurality of resources 250 may be independently controlled with respect to individual ones of plurality of system resources 260 via which user 300 may interact with resource 250 .

[0134] Permission 266 may be obtained from a permission lookup table. In this example, the permission lookup table is an array having different dimensions spanned by: different characteristics that resource 250 may have; identification of plurality of system resources 260; and classification of response to access task 240.

[0135] The first subset 262 and the second subset 264 of system resources 260 may be determined by querying a permissions lookup table using the determined classification of the user 300 response to the access task 240 and the known characteristics of the at least one resource 250. Such a query returns permissions 266 for different ones of the plurality of system resources 260. Those system resources 260 for which permissions are denied form the first subset 262, and those system resources 260 for which permissions are not denied form the second subset 264.

[0136] The first subset 252 and the second subset 254 of the plurality of resources 250 may be determined by querying a permissions lookup table using the determined classification of the user 300's response to the access task 240 and the identification of the at least one system resource 260. Such a query returns permissions 266 indexed by characteristics that the resource 250 may have. In turn, the first subset 252 and the second subset 254 are based on characteristics of different resources in the plurality of resources 250.

[0137] The characteristics of at least one resource 250 may include, for example: a purpose such as productivity, entertainment, education, etc.; a contextual association such as work or entertainment; a distraction potential that may or may not be personalized to the user 300. These characteristics may be predefined by the resource creator, determined from previous resource usage, or specified by the user 300.

[0138] exist Fig. 9C , the one or more constraints 234 regarding the granted access 232 include a time limit 268 on the one or more permissions 266 of the at least one resource 250 to the at least one system resource 260 via which the user 300 can interact with the at least one system 250. The time limit 268 can be a limit on a time period starting with the granting of access 232, or can be a limit on the duration of the interaction between the user 300 and the at least one resource 250 during a given time period after the granting of access 232.

[0139] In the illustrative example, permission to use the processor to run the application may be granted until the time limit 268 expires, and then the permission is denied. Thus, in effect, one or more constraints 234 set a time limit 268 on the time that access 232 is granted.

[0140] It should be noted that in some examples, the time limits 268 on permissions 266 of different resources 250 to different system resources 260 may be independently controlled.

[0141] In other examples, setting one or more constraints 234 on the granted access 232 includes enabling or disabling one or more functions, processes, or threads of at least one resource 250. Figures 9A to 9C Similar to the exemplary one or more constraints 234, the one or more constraints 234 may:

[0142] Preventing at least one resource 250 from executing one or a subset of functions, processes, or threads that the at least one resource 250 would have been able to execute in the absence of the one or more constraints 234; and / or

[0143] A time limit is set on when at least one resource 250 can execute one or a subset of functions, processes, or threads.

[0144] Although different one or more constraints 234 regarding being granted access 232 have been described above as separate examples, it should be understood that these one or more constraints 234 may be combined and implemented simultaneously.

[0145] Fig.10An example of a controller 202 is shown. The controller 202 may be implemented as a controller circuit. The controller 202 may be implemented in hardware only, with certain aspects in software including firmware only, or may be a combination of hardware and software (including firmware).

[0146] like Fig.10 As shown, the controller 202 may be implemented using instructions that implement the hardware functionality, for example, by using executable instructions of a computer program 208 in a general or special purpose processor 204 (which may be stored on a computer readable storage medium (disk, memory, etc.) for execution by such processor 204).

[0147] The processor 204 is configured to read from and write to the memory 206. The processor 204 may also include an output interface via which the processor 204 outputs data and / or commands and an input interface via which data and / or commands are input to the processor 204.

[0148] The memory 206 stores a computer program 208 including computer program instructions (computer program code) that controls the operation of the device 200 when loaded into the processor 204. The computer program instructions of the computer program 208 provide logic and routines that enable the device 200 to perform the methods shown in the drawings. By reading the memory 206, the processor 204 can load and execute the computer program 208.

[0149] Therefore, the apparatus 200 comprises:

[0150] at least one processor 204; and

[0151] at least one memory 206 comprising computer program code,

[0152] The at least one memory 206 and the computer program code are configured to, together with the at least one processor 204, cause the apparatus 200 to at least perform:

[0153] At the first time:

[0154] controlling whether the user 300 is granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the first access task; and

[0155] setting one or more constraints 234 regarding the granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the first access task;

[0156] In the second time:

[0157] controlling whether the user 300 is granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to a second access role different from the first access role; and

[0158] setting one or more constraints 234 regarding the granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the second access task; and

[0159] A change 236 is initiated from the first access task to the second access task, wherein the initiation of the change 236 is independent in cause from the response 230 of the user 300 to the first access task.

[0160] like Fig.11 As shown, the computer program 208 may arrive at the apparatus 200 via any suitable delivery mechanism 400. The delivery mechanism 400 may be, for example, a machine-readable medium, a computer-readable medium, a non-transitory computer-readable storage medium, a computer program product, a storage device, a recording medium such as a compact disk read-only memory (CD-ROM) or a digital versatile disk (DVD) or a solid-state memory, an article of manufacture that includes or tangibly embodies the computer program 208. The delivery mechanism may be a signal configured to reliably deliver the computer program 208. The apparatus 200 may propagate or send the computer program 208 as a computer data signal.

[0161] When executed on a processor, the computer program instructions cause the apparatus to at least perform the following operations or enable at least the following operations:

[0162] At the first time:

[0163] controlling whether the user 300 is granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the first access task; and

[0164] setting one or more constraints 234 regarding the granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the first access task;

[0165] In the second time:

[0166] controlling whether the user 300 is granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to a second access role different from the first access role; and

[0167] setting one or more constraints 234 regarding the granted access 232 to the at least one resource 250 based on the obtained response 230 of the user 300 to the second access task; and

[0168] A change 236 is initiated from the first access task to the second access task, wherein the initiation of the change 236 is independent in cause from the response 230 of the user 300 to the first access task.

[0169] The computer program instructions may be included in a computer program, a non-transitory computer readable medium, a computer program product, a machine readable medium. In some but not all examples, the computer program instructions may be distributed over more than one computer program.

[0170] Although memory 206 is shown as a single component / circuit, it may be implemented as one or more separate components / circuit, some or all of which may be integrated / removable and / or may provide permanent / semi-permanent / dynamic / cache storage.

[0171] Although processor 204 is shown as a single component / circuit, it may be implemented as one or more separate components / circuit, some or all of which may be integrated / removable.Processor 204 may be a single-core or multi-core processor.

[0172] References to "computer-readable storage medium", "computer program product", "tangibly embodied computer program", etc., or "controller", "computer", "processor", etc., should be understood to include not only computers with different architectures such as single / multiple processor architectures and serial (von Neumann) / parallel architectures, but also special circuits such as field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), signal processing devices, and other processing circuits. References to computer programs, instructions, codes, etc., should be understood to include software for programmable processors, or firmware such as programmable content of hardware devices that may include instructions for processors, or configuration settings for fixed function devices, gate arrays, or programmable logic devices, etc.

[0173] As used in this application, the term "circuitry" refers to one or more or all of the following:

[0174] (a) hardware circuit implementation only (such as analog and / or digital circuit implementation only);

[0175] (b) a combination of hardware circuitry and software such as (where applicable):

[0176] (i) a combination of analog and / or digital hardware circuits and software / firmware; and

[0177] (ii) any portion of a hardware processor with software (including a digital signal processor, software and memory that work together to enable a device such as a mobile phone or server to perform various functions); and

[0178] (c) Hardware circuits and / or processors, such as a microprocessor or portion of a microprocessor, that require software (e.g., firmware) to operate, but may not be present when the software is not required for operation.

[0179] This definition of "circuitry" applies to all uses of this term in this application, including in any claims. As another example, as used in this application, the term "circuitry" also covers portions of a hardware-only circuit or processor and its accompanying software and / or firmware implementation. The term "circuitry" also covers (for example and if applicable to the specifically claimed element) a baseband integrated circuit for use in a mobile device or server, a cellular network device, or other computing or networking device.

[0180] The blocks shown in the figures may represent steps in the method and / or part of the code in the computer program 208. The description of a particular order of blocks does not mean that there is a required or preferred order for the blocks, and the order and arrangement of the blocks may vary. In addition, some blocks may be omitted.

[0181] Where a structural feature has been described, it may be replaced by a component for performing one or more of the functions of the structural feature, whether or not that function or functions are explicitly or implicitly described.

[0182] Systems, devices, methods and computer programs can use machine learning that may include statistical learning. Machine learning is a field of computer science that gives computers the ability to learn without being explicitly programmed. If a computer improves its performance in task T (measured by P) with experience E, the computer learns from experience E about a certain class of tasks T and performance metric P. Computers can usually learn from previous training data to predict future data. Machine learning includes all or part of supervised learning and all or part of unsupervised learning. It can achieve discrete output (e.g., categories, clustering) and continuous output (e.g., regression). Machine learning can be achieved, for example, using different methods such as cost function minimization, artificial neural networks, support vector machines and Bayesian networks. Cost function minimization can be used for linear and polynomial regression and K-means clustering, for example. Artificial neural networks (e.g., with one or more hidden layers) model the complex relationship between input vectors and output vectors. Support vector machines can be used for supervised learning. Bayesian networks are directed acyclic graphs representing the conditional independence of multiple random variables.

[0183] The algorithm described above may be applied to achieve the following technical effects: access control (for user 300 to at least one resource 250 ) and system resource 270 allocation (for at least one resource 250 ).

[0184] The example described above is presented as an application that implements the following components:

[0185] Automotive systems; telecommunication systems; electronic systems including consumer electronics; distributed computing systems; media systems for generating or presenting media content including audio content, visual content and audiovisual content, and mixed reality, mediated reality, virtual reality and / or augmented reality; personal systems including personal health systems or personal fitness systems; navigation systems; user interfaces also known as human-machine interfaces; networks including cellular networks, non-cellular networks, and optical networks; ad hoc networks; the Internet; the Internet of Things; virtual networks; and related software and services.

[0186] The term "comprising" as used herein has an inclusive rather than exclusive meaning. That is, any expression "X comprises Y" means that X may comprise only one Y or may comprise more than one Y. If the exclusive meaning of "comprising" is intended, it will be made clear in the context by mentioning "comprising only one..." or using "consisting of...".

[0187] Reference has been made to various examples in this description. The description of features or functions for an example indicates that these features or functions are present in the example. Whether explicitly stated or not, the use of the term "example" or "for example" or "may" or "can" in the text indicates that such features or functions are present in at least the example described, whether or not described as an example, and such features or functions may, but not necessarily, be present in some or all other examples. Therefore, "example", "for example" or "may" or "can" refers to a specific instance in a class of examples. The properties of an instance may be only the properties of the instance or the properties of the class of instances or the properties of a subclass of the class of instances including some but not all of the class of instances. Therefore, features that are implicitly disclosed for one example but not described for another example may be used for other examples as part of a working combination, but are not necessarily used for other examples.

[0188] Although the examples have been described in the preceding paragraphs with reference to various examples, it should be appreciated that modifications to the examples given can be made without departing from the scope of the claims.

[0189] Features described in the preceding description may be used in combinations other than the combinations explicitly described above.

[0190] Although functions have been described with reference to certain features, those functions may be performable by other features whether described or not.

[0191] Although features have been described with reference to certain examples, those features may also be present in other examples whether described or not.

[0192] As used herein, the terms "a", "an", or "the" have an inclusive, rather than exclusive, meaning. That is, any reference to "X includes one / the Y" indicates "X may include only one Y" or "X may include more than one Y", unless the context clearly indicates otherwise. If the exclusive meaning of "a", "an", or "the" is intended, it will be clearly stated in the context. In some circumstances, "at least one" or "one or more" may be used to emphasize the inclusive meaning, but the absence of these terms should not be construed as implying a non-exclusive meaning.

[0193] The presence of a feature (or combination of features) in a claim is a reference to the feature (or combination of features) itself, and is also a reference to features that achieve substantially the same technical effect (equivalent features). Equivalent features include, for example, features that are variants and achieve substantially the same result in substantially the same way. Equivalent features include, for example, features that perform substantially the same function in substantially the same way to achieve substantially the same result.

[0194] Reference has been made in this specification to various examples using adjectives or adjective phrases to describe characteristics of the examples. Such description of characteristics with respect to the examples means that the characteristics are identical to the described characteristics in some examples and substantially the same as the described characteristics in other examples.

[0195] While an attempt has been made in the foregoing description to point out those features regarded as important, it should be understood that the applicant may seek protection via the claims for any patentable feature or combination of features previously referenced herein and / or shown in the drawings, whether emphasized or not.

Claims

1. A device comprising: at least one processor; as well as at least one memory including computer program code, The at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to at least perform: At the first time: Based on the obtained user response to the first access task, controlling whether the user is granted access to at least one resource; and setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the first access task; In the second time: controlling whether the user is granted access to the at least one resource based on the obtained response of the user to a second access role different from the first access role; as well as setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the second access task; as well as Initiate a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from an obtained response of the user to the first access task and is dependent in cause on a change occurring between the first time and the second time in one or more values ​​of one or more monitored parameters that vary with the user's actions.

2. The device according to claim 1, wherein: Setting one or more constraints on granted access includes controlling one or more permissions of the at least one resource to at least one system resource via which the user can interact with the at least one resource.

3. The device according to claim 1, wherein: Setting one or more constraints on granted access includes granting the user access to at least one resource of a plurality of resources and denying the user access to at least another resource of the plurality of resources.

4. The device according to claim 1, wherein: Setting one or more constraints on the granted access to the at least one resource includes setting a time limit on the granted access.

5. The device according to claim 1, wherein: Setting one or more constraints on the granted access to the at least one resource includes controlling settings of at least one system resource via which the user can interact with the at least one resource.

6. The device according to claim 1, wherein: The first access task and the second access task include presenting one or more target elements to the user for identification by the user.

7. The device according to claim 6, wherein: The first access task differs from the second access task in one or more distractor elements presented to the user.

8. The device according to claim 7, wherein: The changing from the first access task to the second access task includes changing one or more of: a ratio; a proximity; a similarity; or a relative motion of the one or more distractor elements to the one or more target elements.

9. The device according to claim 6, wherein: The at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform at least: obtaining gaze tracking data of the user; and determining when a fixed position of the user's gaze matches a rendered position of the one or more target elements, The obtained user response to the first access task and / or the second access task is based on the duration and / or frequency of the fixed position of the user's gaze matching the rendering position of the one or more target elements.

10. The device according to claim 1, wherein: The at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform at least: if the determined response of the user is within a first category of responses, preventing access to the at least one resource; if the determined response of the user is within the second category of responses, setting one or more first constraints on granted access to the at least one resource; as well as If the measured response of the user is within a third category of responses, one or more second constraints different from the first constraints are set regarding granted access to the at least one resource.

11. The device according to claim 1, wherein: The at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform at least: Classifying the obtained responses of the user to the first access task and / or the second access task; controlling whether a user is granted access to the at least one resource based on the determined classification of the user's response; as well as Based on the determined classification of the user's response, one or more constraints are set regarding granted access to the at least one resource.

12. The device according to claim 1, wherein: The at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform at least: obtaining, based on the one or more values ​​of the one or more monitored parameters, an expected usage of the at least one resource at the first time and the second time; as well as If the expected usage at the second time is different from the expected usage at the first time, the change from the first access role to the second access role is initiated.

13. The apparatus according to any one of the preceding claims, configured as a device and comprising: the at least one resource; means for presenting the access task to the user; and a component for obtaining a response of the user to the first access task and / or the second access task.

14. A method comprising: At the first time: Based on the obtained user response to the first access task, controlling whether the user is granted access to at least one resource; as well as setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the first access task; In the second time: controlling whether the user is granted access to the at least one resource based on the obtained response of the user to a second access role different from the first access role; as well as setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the second access task; and Automatically initiate a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from an obtained response of the user to the first access task and is dependent in cause on a change occurring between the first time and the second time in one or more values ​​of one or more monitored parameters that vary with the user's actions.

15. The method according to claim 14, wherein: Setting one or more constraints on granted access includes controlling one or more permissions of the at least one resource to at least one system resource via which the user can interact with the at least one resource.

16. The method according to claim 14, further comprising: obtaining, based on the one or more values ​​of the one or more monitored parameters, an expected usage of the at least one resource at the first time and the second time; as well as If the expected usage at the second time is different from the expected usage at the first time, the change from the first access role to the second access role is initiated.

17. A non-transitory computer readable medium comprising program instructions stored thereon for performing at least the following operations: At the first time: Based on the obtained user response to the first access task, controlling whether the user is granted access to at least one resource; and setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the first access task; In the second time: controlling whether the user is granted access to the at least one resource based on the obtained response of the user to a second access role different from the first access role; as well as setting one or more constraints on granted access to the at least one resource based on the obtained response of the user to the second access task; as well as Initiate a change from the first access task to the second access task, wherein the initiation of the change is independent in cause from an obtained response of the user to the first access task and is dependent in cause on a change occurring between the first time and the second time in one or more values ​​of one or more monitored parameters that vary with the user's actions.

18. The non-transitory computer readable medium of claim 17, further comprising program instructions stored thereon for performing at least the following operations: obtaining an expected usage of the at least one resource at the first time and the second time based on the one or more values ​​of the one or more monitored parameters; and If the expected usage at the second time is different from the expected usage at the first time, the change from the first access role to the second access role is initiated.

Images