Systems and methods for detecting unauthorized use of an application
The disclosed computer-implemented method for detecting unauthorized use of an application may include (1) receiving, by the computing device, fingerprint data associated with a fingerprint, where the fingerprint data is received from the touchscreen, when a user interface of the application is displayed on the touchscreen, and in an absence of displaying a request for fingerprint data on the touchscreen, (2) comparing the received fingerprint data to a whitelist of authorized fingerprint data to determine a presence of a match, where the authorized fingerprint data indicates at least one fingerprint of at least one user that is authorized to access the application and (3) performing, when the received fingerprint data does not match the whitelist of authorized fingerprint data, a security action. Various other methods, systems, and computer-readable media are also disclosed.
1. A computer-implemented method for detecting unauthorized use of an application, at least a portion of the method being performed by a computing device comprising a touchscreen and at least one processor, the method comprising:
receiving, by the computing device, fingerprint data associated with a fingerprint, wherein:
the fingerprint data is received from the touchscreen for less than every finger contact of the touchscreen, when a user interface of the application is displayed on the touchscreen, in an absence of displaying a request for the fingerprint data on the touchscreen, and when the application is running following an initial authorization to enable access to the application, and
the fingerprint data is received as a part of a process other than a discrete authorization process;
comparing the received fingerprint data to a whitelist of authorized fingerprint data received from a remote server to determine a presence of a match, wherein:
the authorized fingerprint data indicates at least one fingerprint of at least one user that is authorized to access the application, and
the received fingerprint data is provided to the remote server to generate a whitelist or blacklist for use by at least one additional computing device; and
performing, when the received fingerprint data does not match the whitelist of authorized fingerprint data, a security action, wherein the received fingerprint data that does not match the whitelist of authorized fingerprint data is transmitted to a network device.
2. The computer-implemented method of claim 1 , wherein the received fingerprint data is received for less than every finger contact of the touchscreen in a region of the touchscreen displaying the user interface.
3. The computer-implemented method of claim 1 , wherein comparing the received fingerprint data includes:
determining a percentage of received fingerprint data features that match authorized fingerprint data features; and
determining that the received fingerprint data does not match the whitelist of authorized fingerprint data when the percentage fails to meet a threshold percentage.
4. The computer-implemented method of claim 1 , wherein the security action includes at least one of stopping access to the application, stopping the application, locking the computing device, and displaying a message on the touchscreen indicating that the application is locked.
5. The computer-implemented method of claim 1 , further comprising:
reversing the security action in response to receiving an unlock command indicating an authorized user.
6. The computer-implemented method of claim 1 , further comprising:
storing the received fingerprint data that does not match the whitelist of authorized fingerprint data.
7. The computer-implemented method of claim 1 , further comprising: maintaining the security action after the computing device is power-cycled.
8. A system for detecting unauthorized use of an application, the system comprising:
a receiving module, stored in a memory, that receives fingerprint data associated with a fingerprint, wherein:
the fingerprint data is received from a touchscreen for less than every finger contact of the touchscreen, when a user interface of the application is displayed on the touchscreen, in an absence of displaying a request for the fingerprint data on the touchscreen, and when the application is running following an initial authorization to enable access to the application, and
the fingerprint data is received as a part of a process other than a discrete authorization process;
a comparing module, stored in the memory, that compares the received fingerprint data to a whitelist of authorized fingerprint data received from a remote server to determine a presence of a match, wherein:
the authorized fingerprint data indicates at least one fingerprint of at least one user that is authorized to access the application, and
the received fingerprint data is provided to the remote server to generate a whitelist or blacklist for use by at least one additional computing device;
a performing module, stored in the memory, that performs, when the received fingerprint data does not match the whitelist of authorized fingerprint data, a security action, wherein the received fingerprint data that does not match the whitelist of authorized fingerprint data is transmitted to a network device; and
at least one physical processor that executes the receiving module, the comparing module, and the performing module.
9. The system of claim 8 , wherein the received fingerprint data is received for less than every finger contact of the touchscreen in a region of the touchscreen displaying the user interface.
10. The system of claim 8 , wherein comparing the received fingerprint data includes:
determining a percentage of received fingerprint data features that match authorized fingerprint data features; and
determining that the received fingerprint data does not match the whitelist of authorized fingerprint data when the percentage fails to meet a threshold percentage.
11. The system of claim 8 , wherein the security action includes at least one of stopping access to the application, stopping the application, locking the system, and displaying a message on the touchscreen indicating that the application is locked.
12. The system of claim 8 , further comprising:
a reversing module, stored in the memory, that reverses the security action in response to receiving an unlock command indicating an authorized user.
13. The system of claim 8 , further comprising:
a storing module, stored in the memory, that stores the received fingerprint data that does not match the whitelist of authorized fingerprint data.
14. The system of claim 8 , further comprising:
a maintaining module, stored in the memory, that maintains the security action after the system is power-cycled.
15. A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
receive fingerprint data associated with a fingerprint, wherein:
the fingerprint data is received from a touchscreen for less than every finger contact of the touchscreen, when a user interface of an application is displayed on the touchscreen, in an absence of displaying a request for the fingerprint data on the touchscreen, and when the application is running following an initial authorization to enable access to the application, and
the fingerprint data is received as a part of a process other than a discrete authorization process;
compare the received fingerprint data to a whitelist of authorized fingerprint data received from a remote server to determine a presence of a match, wherein:
the authorized fingerprint data indicates at least one fingerprint of at least one user that is authorized to access the application, and
the received fingerprint data is provided to the remote server to generate a whitelist or blacklist for use by at least one additional computing device; and
perform, when the received fingerprint data does not match the whitelist of authorized fingerprint data, a security action, wherein the received fingerprint data that does not match the whitelist of authorized fingerprint data is transmitted to a network device.
16. The non-transitory computer-readable medium of claim 15 , wherein the received fingerprint data is received for less than every finger contact of the touchscreen in a region of the touchscreen displaying the user interface.
17. The non-transitory computer-readable medium of claim 15 , wherein comparing the received fingerprint data includes:
determining a percentage of received fingerprint data features that match authorized fingerprint data features; and
determining that the received fingerprint data does not match the whitelist of authorized fingerprint data when the percentage fails to meet a threshold percentage.
18. The non-transitory computer-readable medium of claim 15 , wherein the security action includes at least one of stopping access to the application, stopping the application, locking the computing device, and displaying a message on the touchscreen indicating that the application is locked.
19. The non-transitory computer-readable medium of claim 15 , further comprising one or more computer-executable instructions that, when executed by the at least one processor of the computing device, cause the computing device to reverse the security action in response to receiving an unlock command indicating an authorized user.
20. The non-transitory computer-readable medium of claim 15 , further comprising one or more computer-executable instructions that, when executed by the at least one processor of the computing device, cause the computing device to store the received fingerprint data that does not match the whitelist of authorized fingerprint data.