Root level controls to enable privacy mode for device cameras

1. A method, implemented by an information handling system comprising a processor, a memory accessible by the processor, a digital camera accessible by the processor, and a network interface connecting the information handling system to a computer network, the method comprising:

detecting that a digital camera has been set to a privacy mode that limits access to an image capture function of the digital camera;

receiving a request to access the digital camera from an application;

determining whether the requesting application is allowed access to the digital camera while the digital camera is in the privacy mode;

allowing access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is allowed access to the digital camera; and

inhibiting access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is disallowed access to the digital camera.

2. The method of claim 1 wherein the detection that the digital camera has been set to the privacy mode further comprises:

detecting a physical control on the digital camera has been placed in a privacy mode position.

3. The method of claim 2 wherein a set of positions on the digital camera include an ON mode position that allows general access to the digital camera from a plurality of applications, an OFF mode position that inhibits access to the digital camera from any application, and the privacy mode position.

4. The method of claim 1 wherein, in response to allowing access by the requesting application, the method further comprises:

identifying a security action based on the application accessing the digital camera while the digital camera is in the privacy mode; and

performing the identified security action.

5. The method of claim 4 wherein the security action is selected from the group consisting of entry of a code by a user, entry of biometric data from the user, and a confirmation from a user, and wherein the method further comprises:

authenticating the security action, wherein the allowing of access by the requesting application is inhibited in response to an unsuccessful authentication of the security action.

6. The method of claim 1 further comprising:

prior to receiving the request:

receiving a user selection of one or more applications that are allowed to use the digital camera while the camera is in the privacy mode; and

storing an application identifier corresponding to each of the one or more applications in a nonvolatile memory area; and

wherein the determining further comprises:

receiving a requesting application identifier corresponding to the requesting application; and

searching the nonvolatile memory area for the requesting application identifier, wherein the allowing is performed in response to the searching identifying the requesting application identifier in the nonvolatile memory area, and wherein the inhibiting is performed in response to an absence of the requesting application identifier in the nonvolatile memory area.

7. The method of claim 6 further comprising:

prior to receiving the request:

receiving a selection of a security action corresponding to a selected one of the one or more applications, wherein the security action is performed when the selected application requests access to the digital camera while the digital camera is the privacy mode.

8. An information handling system comprising:

one or more processors;

a memory coupled to at least one of the processors;

a digital camera accessible by at least one of the processors;

a network interface that connects the information handling system to a computer network; and

a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:

detecting that a digital camera has been set to a privacy mode that limits access to an image capture function of the digital camera;

receiving a request to access the digital camera from an application;

determining whether the requesting application is allowed access to the digital camera while the digital camera is in the privacy mode;

allowing access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is allowed access to the digital camera; and

inhibiting access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is disallowed access to the digital camera.

9. The information handling system of claim 8 wherein the detection that the digital camera has been set to the privacy mode further comprises:

detecting a physical control on the digital camera has been placed in a privacy mode position.

10. The information handling system of claim 9 wherein a set of positions on the digital camera include an ON mode position that allows general access to the digital camera from a plurality of applications, an OFF mode position that inhibits access to the digital camera from any application, and the privacy mode position.

11. The information handling system of claim 8 wherein, in response to allowing access by the requesting application, wherein the actions further comprise:

identifying a security action based on the application accessing the digital camera while the digital camera is in the privacy mode; and

performing the identified security action.

12. The information handling system of claim 11 wherein the security action is selected from the group consisting of entry of a code by a user, entry of biometric data from the user, and a confirmation from a user, and wherein the actions further comprise:

authenticating the security action, wherein the allowing of access by the requesting application is inhibited in response to an unsuccessful authentication of the security action.

13. The information handling system of claim 8 wherein the actions further comprise:

prior to receiving the request:

receiving a user selection of one or more applications that are allowed to use the digital camera while the camera is in the privacy mode; and

storing an application identifier corresponding to each of the one or more applications in a nonvolatile memory area; and

wherein the determining further comprises:

receiving a requesting application identifier corresponding to the requesting application; and

searching the nonvolatile memory area for the requesting application identifier, wherein the allowing is performed in response to the searching identifying the requesting application identifier in the nonvolatile memory area, and wherein the inhibiting is performed in response to an absence of the requesting application identifier in the nonvolatile memory area.

14. The information handling system of claim 13 wherein the actions further comprise:

prior to receiving the request:

receiving a selection of a security action corresponding to a selected one of the one or more applications, wherein the security action is performed when the selected application requests access to the digital camera while the digital camera is the privacy mode.

15. A computer program product comprising:

a computer readable storage medium, comprising computer program code that, when executed by an information handling system, executes actions comprising:

detecting that a digital camera has been set to a privacy mode that limits access to an image capture function of the digital camera;

receiving a request to access the digital camera from an application;

determining whether the requesting application is allowed access to the digital camera while the digital camera is in the privacy mode;

allowing access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is allowed access to the digital camera; and

inhibiting access by the requesting application to the image capture function of the digital camera in response to the determination being that the requesting application is disallowed access to the digital camera.

16. The computer program product of claim 15 wherein the detection that the digital camera has been set to the privacy mode further comprises:

detecting a physical control on the digital camera has been placed in a privacy mode position.

17. The computer program product of claim 16 wherein a set of positions on the digital camera include an ON mode position that allows general access to the digital camera from a plurality of applications, an OFF mode position that inhibits access to the digital camera from any application, and the privacy mode position.

18. The computer program product of claim 15 wherein, in response to allowing access by the requesting application, wherein the actions further comprise:

identifying a security action based on the application accessing the digital camera while the digital camera is in the privacy mode; and

performing the identified security action.

19. The computer program product of claim 18 wherein the security action is selected from the group consisting of entry of a code by a user, entry of biometric data from the user, and a confirmation from a user, and wherein the actions further comprise:

authenticating the security action, wherein the allowing of access by the requesting application is inhibited in response to an unsuccessful authentication of the security action.

20. The computer program product of claim 15 wherein the actions further comprise:

prior to receiving the request:

receiving a user selection of one or more applications that are allowed to use the digital camera while the camera is in the privacy mode; and

storing an application identifier corresponding to each of the one or more applications in a nonvolatile memory area; and

wherein the determining further comprises:

receiving a requesting application identifier corresponding to the requesting application; and

searching the nonvolatile memory area for the requesting application identifier, wherein the allowing is performed in response to the searching identifying the requesting application identifier in the nonvolatile memory area, and wherein the inhibiting is performed in response to an absence of the requesting application identifier in the nonvolatile memory area.