Security device, methods, and systems for continuous authentication
Methods, systems, and computer programs are presented for securing a computing device. One security device includes a processor, memory and a connector. The memory includes a computer program that, when executed by the processor, performs a method. The method includes operations for detecting that the connector is coupled to a second computing device, and for determining a user associated with the security computing device. In addition, the method includes operations for receiving periodic images from an image capture device coupled to the second computing device, and for performing continuous authentication operations to validate an identification of the user based on the periodic images. The user is disabled from using the second computing device after an authentication operation fails.
1. A security computing device comprising:
a processor;
a memory; and
a connector for enabling communication between the security computing device and a second computing device, wherein the second computing device is configured to receive periodically images of a user from an image capture device and images rendered on a display screen associated with the second computing device, the processor of the security computing device is configured to,
authenticate the user for accessing content via the second computing device;
receive the images rendered on the display screen and the periodic images of the user;
provide, after the user is authenticated from the second computing device, user inputs to the second computing device, the user inputs being provided while accessing the content, the images rendered on the display screen, the periodic images of the user and the user inputs used to monitor digital and physical activities of the user and to establish a link between the digital and physical activities of the user;
transmit the user inputs with the received images rendered on the display screen and the periodic images of the user to a security server using an out of band channel to create audit data of the digital and physical activities of the user while accessing the second computing device, wherein the audit data binds the user inputs, the periodic images of the user, and the images rendered on the display screen; and
send a message from the security computing device to the second computing device to disable the user from using the second computing device if said authentication of the user fails during use of the second computer.
2. The security computing device as recited in claim 1 further including:
non-volatile storage for use by the security computing device to store screen captures associated with the periodic images of the user, the images rendered on the display screen and the user inputs prior to transmitting to the security server.
3. The security computing device as recited in claim 1 further including:
a touchscreen display of the security computing device, wherein the processor is defined for receiving a password from the user via the touchscreen display.
4. The security computing device as recited in claim 1 , wherein the connector is one of a Universal Serial Bus (USB) connector, a wireless connection, or a wired connection.
5. The security computing device as recited in claim 1 , wherein the connector is a wireless connector, wherein the connector is coupled to the second computing device when a wireless connection is established, wherein the wireless connection is one of Bluetooth, 802.11 WiFi, or an NFC connection.
6. A method for monitoring security of a computing device via a security computing device, the method comprising:
connecting the security computing device to the computing device in order to allow communication between the security computing device and the computing device, wherein the connecting allows the computing device to receive periodically images of a user from an image capture device and images rendered on a display screen associated with the computing device;
authenticating the user for accessing content via the computing device;
receiving the images rendered on the display screen and the periodic images of the user;
receiving user inputs provided to the computing device, the user inputs being provided while accessing the content via the computing device, the images rendered on the display screen, the periodic images of the user and the user inputs used to monitor digital and physical activities of the user and to establish a link between the digital and physical activities of the user;
transmitting the user inputs with the received images rendered on the display screen, the periodic images of the user to a security server using an out of band channel to create audit data of the digital and physical activities of the user while accessing the computing device wherein the audit data binds the user inputs, the periodic images of the user and the images rendered by the display screen; and
sending a message from the security computing device to the computing device to disable the user from using the computing device if said authentication of the user fails during use of the computer.
7. The method of claim 6 , wherein the security computing device includes non-volatile storage for use by the security computing device to store screen captures associated with the periodic images of the user, the images rendered on the display screen and the user inputs prior to transmitting to the security server.
8. The method of claim 6 , wherein the security computing device includes a touchscreen display, and a password from the user is received via the touchscreen display.
9. The method of claim 6 , wherein the connecting is via one of a Universal Serial Bus (USB) connector, a wireless connection, or a wired connection.
10. The method of claim 6 , wherein the connecting is via a wireless connector, and the connector is coupled to the computing device when a wireless connection is established, wherein the wireless connection is one of Bluetooth, 802.11 WiFi, or an NFC connection.