Access monitoring of mobile device in possession by unauthorized user

Abstract

A mobile device can detect an idle state and, in response, initiate an access monitoring function to covertly monitor activity involving a human interaction with the mobile device. The covert monitoring is undetectable by a user of the mobile device. The mobile device can then detect a human interaction with the mobile device and, in response, cause the mobile device to covertly capture and log one or more human interactions with the mobile device. An authorized user of the mobile device is enabled to review the log of human interactions with the mobile device.

What is claimed is: 
     
         1 . A method performed by a mobile device, the method comprising:
 detecting that the mobile device is in an idle state;   in response to detecting the idle state, initiating an access monitoring function of the mobile device to covertly monitor activity involving a human interaction with the mobile device,
 wherein the covert monitoring is undetectable by a user of the mobile device; 
   detecting a human interaction with the mobile device,   in response to detecting the human interaction with the mobile device, causing the mobile device to covertly capture and log one or more human interactions with the mobile device; and   enabling an authorized user of the mobile device to review the log of the one or more human interactions with the mobile device.   
     
     
         2 . The method of  claim 1 , wherein causing the mobile device to covertly capture and log one or more human interactions comprises:
 causing a camera of the mobile device to capture one or more images upon detection of the human interaction,
 wherein the authorized user is enabled to review the one or more images. 
   
     
     
         3 . The method of  claim 1 , wherein detecting that the mobile device is in the idle state comprises:
 detecting, based on an accelerometer of the mobile device, a change from a period of activity to a prolonged period of inactivity,
 wherein the prolonged period exceeds a threshold. 
   
     
     
         4 . The method of  claim 1 , wherein detecting that the mobile device is in the idle state comprises:
 detecting that the mobile device has been placed on a surface.   
     
     
         5 . The method of  claim 1 , wherein detecting that the mobile device is in the idle state comprises:
 inferring absence of user activity based on inactivity of one or more user apps on the mobile device.   
     
     
         6 . The method of  claim 1 , wherein detecting that the mobile device is in the idle state comprises:
 detecting a pattern indicating that the mobile device is not being utilized.   
     
     
         7 . The method of  claim 1 , wherein to covertly monitor activity involving the human interaction with the mobile device comprises monitoring any of:
 user inputs to the mobile device,   movement of the mobile device, or   utilization of user apps or services on the mobile device.   
     
     
         8 . The method of  claim 1 , wherein detecting the human interaction with the mobile device comprises:
 detecting, based on output of an accelerometer, a transition from a prolonged period of inactivity that changes with sudden movement indicative of the mobile device being picked up by a person.   
     
     
         9 . The method of  claim 1 , wherein detecting the human interaction with the mobile device comprises:
 detecting a verbal interaction with a virtual assistant of the mobile device.   
     
     
         10 . The method of  claim 1 , wherein causing the mobile device to covertly capture and log one or more human interactions with the mobile device comprises:
 causing the mobile device to covertly record human-device interactions in a log for a specified time period.   
     
     
         11 . The method of  claim 1 , wherein causing the mobile device to covertly capture and log one or more human interactions with the mobile device comprises:
 causing the mobile device to capture one or more images with a camera of the mobile device when subsequent activity commences.   
     
     
         12 . The method of  claim 1 , wherein causing the mobile device to covertly capture and log one or more human interactions with the mobile device comprises causing the mobile device to detect and record:
 user inputs to the mobile device,   communication signals of the mobile device, or   inputs/outputs during a period that commenced when a first activity was detected and terminating at a later point in time.   
     
     
         13 . The method of  claim 1 , wherein enabling the authorized user of the mobile device to review the log of the one or more human interactions with the mobile device comprises:
 presenting the log via an app on the mobile device.   
     
     
         14 . A mobile device comprising:
 at least one hardware processor; and   at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the mobile device to:
 detect that the mobile device is in an idle state; 
 in response to the idle state being detected, cause the mobile device to covertly monitor activity involving a human interaction with the mobile device,
 wherein the covert monitoring is undetectable by a user of the mobile device; 
 
   detect a human interaction with the mobile device by an unauthorized user,   in response to the human interaction with the mobile device being detected, cause the mobile device to covertly capture and log one or more human interactions with the mobile device; and   enabling an authorized user of the mobile device to review the log of the one or more human interactions with the mobile device.   
     
     
         15 . The mobile device of  claim 14  further comprising:
 an accelerometer configured to detect a change from a period of activity to a prolonged period of inactivity,
 wherein the prolonged period of inactivity exceeds a threshold. 
 
 
     
     
         16 . The mobile device of  claim 14  further comprising:
 a camera configured to capture one or more images upon detection of the human interaction. 
 
     
     
         17 . At least one computer-readable storage medium, excluding transitory signals and carrying instructions, which, when executed by at least one data processor of a mobile device, cause the mobile device to:
 detect that the mobile device is in an idle state;   in response to the idle state being detected, initiate an access monitoring function of the mobile device to covertly monitor activity involving a human interaction with the mobile device,
 wherein the covert monitoring is undetectable by a user of the mobile device; 
   detect a human interaction with the mobile device,   in response to the human interaction with the mobile device being detected, cause the mobile device to covertly capture and log one or more human interactions with the mobile device; and   enable a user of the mobile device to review the log of the one or more human interactions with the mobile device.   
     
     
         18 . The computer-readable storage medium of  claim 17 , wherein to covertly capture and log one or more human interactions comprises causing the mobile device to:
 cause a camera of the mobile device to capture one or more images upon detection of the human interaction.   
     
     
         19 . The computer-readable storage medium of  claim 17 , wherein to detect that the mobile device is in the idle state comprises causing the mobile device to:
 detect a transition from a period of activity to a prolonged period of inactivity.   
     
     
         20 . The computer-readable storage medium of  claim 17 , wherein detecting that the mobile device is in the idle state comprises:
 detecting inactivity of one or more user mobile apps on the mobile device.