FR3118232A1 - Method for securing an electronic device, electronic device, computer program product and corresponding medium. - Google Patents

Abstract

Securing method, electronic device, computer program product and corresponding medium The invention relates to a method implemented in an electronic device and comprising, during access to at least one piece of data adapted to be rendered on at least one first user interface of said device, an implementation of a protective action of said datum taking account of at least one item of information representative of a physical and/or digital context of said device. The invention also relates to the electronic device, the computer program product and the corresponding medium. Figure for the abstract: Fig. 1

Description

Method for securing an electronic device, electronic device, computer program product and corresponding medium. 1. Technical field

This application relates to the field of communication device security. It relates in particular to a method for securing an electronic device, as well as an electronic device, a computer program product and a corresponding medium.

2. State of the art

Electronic terminals have become essential tools in everyone's daily life; both in professional and personal life.

Indeed, a lot of information is now accessible in digital form. A document in digital format allows one or more users to easily access it, from different media (desktop or laptop PC, tablet, smartphone, etc.) and in different places (at the office, at home, on the train, the bus, …). They can also exchange these documents in a simple way or work collaboratively on the same document. This ease of access requires in return great vigilance on the part of a person handling these digital documents.

Indeed, these digital documents can sometimes be sensitive. As a result, the protection of data accessible from an electronic terminal has become a major issue.

The purpose of this application is to propose improvements to at least some of the drawbacks of the state of the art.

3. Disclosure of Invention

The present application aims to improve the situation using a method implemented at least partially in an electronic device and comprising, when accessing at least one piece of data adapted to be rendered on at least one first user interface said device, an implementation of an action for protecting said data taking account of at least one item of information representative of a physical and/or digital context of said device.

By “during an access”, we mean for example just before and/or during access to the data. For example, in the case of a document, just before or during the opening of the document, or while the document is open.

It may be data (for example audio, image, video, text and/or hologram data) stored locally in the device or accessible remotely.

In at least one embodiment, said information representative of said is obtained via a sensor coupled to said device and/or via an activity probe accessible from said device.

In at least one embodiment, said protective action takes into account at least one prior implementation of said method on said device.

In at least one embodiment, said protection action is a function of at least one criterion of confidentiality of said data.

In at least one embodiment, said protect action includes at least one of the following rendering actions:

- generation of an alert message on at least a second user interface of said device,

- obtaining confirmation of an order to render said data;

- an adaptation of said rendering.

According to the embodiments, this may be the same user interface as that for rendering the data or another user interface (for example, if the data is rendered in audio form, the alert may be visual, or vice versa, or it may be two different screens).

In at least one embodiment, the rendering adaptation comprises at least partial blurring of a rendering area of said user interface.

By blurring is meant an alteration of the rendering so as to make the rendering zone at least partially blurred.

In at least one embodiment, the adaptation of the rendering comprises, when said data is textual data, a modification of a size, a font and/or a character color of at least part of said data.

In at least one embodiment, the adaptation of the rendering comprises, when said data is textual data, a modification of a spacing (line spacing) and/or of a color of the text and/or of a background the text of at least part of said data.

The characteristics, presented separately in the present application in connection with certain embodiments of the method of the present application can be combined with each other according to other embodiments of the present method.

According to another aspect, the present application also relates to an electronic device suitable for implementing the method of the present application in any one of its embodiments. For example, the present application thus relates to an electronic device comprising at least one processor configured for an implementation, during access to at least one piece of data adapted to be rendered on at least one first user interface of said device, of a protection action of said data taking into account at least one piece of information representative of a physical and/or digital context of said device.

The present application also relates to a computer program comprising instructions for the implementation of the various embodiments of the above method, when the program is executed by a processor and a recording medium readable by an electronic device and on which the computer program is recorded.

For example, the present application thus relates to a computer program comprising instructions for the implementation, when the program is executed by a processor of an electronic device, of a method comprising, during access to at least a datum adapted to be rendered on at least a first user interface of said device, an implementation of an action for protecting said datum taking account of at least one item of information representative of a physical and/or digital context of said device.

For example, the present application also relates to a recording medium readable by a processor of an electronic device and on which is recorded a computer program comprising instructions for the implementation, when the program is executed by the processor, of a method comprising, during access to at least one datum adapted to be rendered on at least a first user interface of said device, an implementation of an action to protect said datum taking account of at least one information representative of a physical and/or digital context of said device.

The programs mentioned above may use any programming language, and be in the form of source code, object code, or intermediate code between source code and object code, such as in partially compiled form, or in n any other desirable shape.

The information carriers mentioned above can be any entity or device capable of storing the program. For example, a medium may comprise a storage means, such as a ROM, for example a CD ROM or a microelectronic circuit ROM, or even a magnetic recording means.

Such a storage means can for example be a hard disk, a flash memory, etc.

On the other hand, an information medium can be a transmissible medium such as an electrical or optical signal, which can be conveyed via an electrical or optical cable, by radio or by other means. A program according to the invention can in particular be downloaded from an Internet-type network.

Alternatively, an information medium may be an integrated circuit in which a program is incorporated, the circuit being adapted to execute or to be used in the execution of any one of the embodiments of the method which is the subject of the present application for patent.

4. Brief description of drawings

Other characteristics and advantages of the invention will appear more clearly on reading the following description of particular embodiments, given by way of simple illustrative and non-limiting examples, and the appended drawings, among which:

There presents a simplified view of a system, cited by way of example, in which at least certain embodiments of the method of the present application can be implemented,

There presents a simplified view of a device suitable for implementing at least certain embodiments of the method of the present application,

There presents an overview of the security method of the present application, in some of its embodiments

There presents an example of a user interface of an electronic device implementing at least certain embodiments of the method of the present application.

There presents a simplified functional view of a device suitable for implementing at least certain embodiments of the method of the present application,

5. Description of embodiments

The present application aims to help a user to protect at least one digital data which he accesses via at least one electronic device, from simultaneous access by a third party. The digital data may for example be at least part of a digital content, for example multimedia. The method can for example be implemented during a creation, a reading, a writing, and/or a modification of the data for example.

The electronic device can be various according to the embodiments. For example, it may be a computer, such as a fixed or portable personal computer, a smart phone, an electronic tablet, a connected object, an electronic reader, etc. Many users are indeed opting for mobile terminals, due to the many advantages offered by mobility. Thus, it is tempting for a user to use his mobile terminal outside his place of work or his home (for example during daily journeys (home – work), during meetings outside the company, at a friend, or just in a cafe).

The present application aims, in certain embodiments, to protect at least one piece of data restored (rendered) on a so-called “output” user interface of this device. It may be in particular at least one audio data item (rendered for example by a loudspeaker coupled to the device and/or at least one data item (text, image and/or video) rendered visually (on a screen coupled to the device, for example).The data made available by the “output” interfaces are indeed easily accessible to third parties.

This availability vis-à-vis a third party therefore poses a problem of security and/or confidentiality, even vis-à-vis a non-malicious third party. This problem is all the more crucial in the context of confidential data, for example personal data of users (private, medical, etc.) or professional data, linked for example to a business strategy, know-how and /or an innovation.

This application proposes limiting and/or adapting the rendering of data, such as sensitive data, according to a rendering context of said device.

By rendering context, in the present application, we mean a set of information elements representative of a physical and/or digital context of the device and to which we can associate a more or less significant risk of interception of data of released by a third party. By digital context, we mean information relating to the environment of the device, in terms of connectivity to the communication networks of the device, to the equipment or to the devices with which it is coupled (or likely to be coupled), in a wired way. or wireless, and their states, and/or the internal context (software and/or hardware) of the device itself. Such information elements can for example be acquired by physical sensors coupled to the electronic device, such as motion sensors, cameras (such as "Webcams") and/or by logical sensors within the device. These physical and/or logical sensors are also called “probes” in the present application. They can for example make it possible to detect events at the level of the operating system, to know the applications and/or processes active and/or launched on an electronic device. The patent application filed under number FR2009965 by the applicant presents such probes.

The at least one piece of data to be protected can be, for example, part of an electronic document adapted to be returned (for consultation and/or modification) on a graphic interface of the device (via a word processing application, or a spreadsheet by example). Indeed, a person can quickly forget the context (the physical environment in particular) in which he performs manipulations on a document, and involuntarily make confidential data accessible (visually or audibly) to unauthorized persons (malicious or simply curious ) . For example, people may open confidential textual documents on a train, giving other people nearby the ability to view sensitive data at a glance.

We now describe, in connection with the , in more detail this application.

There depicts a telecommunications system 100 in which certain embodiments of the invention may be implemented. The system 100 comprises one or more electronic devices, some at least able to communicate with each other via one or more communication networks 120, possibly interconnected, such as a local network, a local network or LAN (Local Area Network, 1) and/or an extended type network, or WAN (Wide Area Network, 2). For example, the network may include a Bluetooth network, a corporate or domestic LAN and/or an Internet or cellular type WAN network, GSM - Global System for Mobile Communications, UMTS - Universal Mobile Telecommunications System, Wifi - Wireless, etc .

As illustrated in , the system 100 can for example comprise one or more electronic devices, such as a terminal 110 (such as a laptop computer, a smart phone (“Smart Phone”), an electronic tablet, a connected object, an electronic reader, etc. ..), and/or a server 130, for example an application server and/or an Internet server, a storage device 150. The system can also comprise network management and/or interconnection elements (not shown ) These electronic devices can be associated with at least one user 160 (for example through a user account accessible by login), some of the electronic devices can be associated with the same user.

The system can also include sensors 140, 142 optionally coupled to at least one of the devices, permanently or temporarily via the network 120 for example. These can be, for example, audio sensors, motion sensors, webcams, etc. The various elements of the system 100 described above are examples of elements representative of the digital context of a device 110 of the system.

There illustrates a simplified structure of an electronic device 200 of the system 100, for example the device 110 of the , adapted to implement the principles of this application. According to the embodiments, it may be a server, and/or a terminal.

The device 200 notably comprises at least one memory M 210 such as a buffer memory, a volatile memory, for example of the RAM type (for "Random Access Memory" according to the English terminology), and/or a non-volatile memory (for example of the ROM (for "Read Only Memory" according to the English terminology) The device 200 can also comprise a processing unit UT 220, equipped for example with at least one processor P 222, and driven by a computer program PG 212 stored in memory M 210. On initialization, the code instructions of the computer program PG are for example loaded into a RAM memory before being executed by the processor P. Said at least one processor P 222 of the processing unit processing UT 220 can in particular implement, individually or collectively, any of the embodiments of the method of the present application (described in particular in relation to FIGS. 3 to 5), according to the instructions of the computer program PG.

The device can also include, or be coupled to, at least one I/O input/output module 230, such as a communication module and/or a module for interfacing with a user of the device (also called more simply in this application "user interface"). A communication module can allow, for example, the device 200 to communicate with other devices of the system 100, via wired or wireless communication interfaces, (for example to access data stored (remotely) on/via another system device 100) and input/output modules coupled to the device.

By user interface of the device is meant, for example, an interface integrated into the device 200, or part of a third-party device coupled to this device by wired and/or wireless communication means. For example, it may be a secondary screen of the device or at least one loudspeaker connected by wireless technology to the device.

A user interface can in particular be a so-called “output” user interface, suitable for rendering (or controlling a rendering) of an output element of a computer application used by the device 200, for example an application running at least partially on device 200 or an "online" application running at least partially remotely, such as on server 130 of system 100. Examples of device output user interfaces include one or more screens, in particular at least one graphic screen (touchscreen for example), one or more loudspeakers, a connected headset, a connected watch, a hologram.

By rendering, we mean here a restitution (or “output” according to the English terminology) on at least one user interface, in any form, for example comprising textual, audio and/or video components, or a combination of such components.

Furthermore, a user interface can be a so-called “input” user interface, suitable for acquiring a command from a user of the device 200. It can be in particular an action to be performed in connection with an item returned, and/or a command to be transmitted to a computer application used by the device 200, for example an application running at least partially on the device 200 or an "online" application running at least partially remotely, for example on the server 130 of the system 100. Examples of input user interface of the device 200 include a sensor, an audio and/or video acquisition means (microphone, camera (webcam) for example), a keyboard, a mouse.

Said at least one microprocessor of device 200 can in particular be adapted for an implementation, during access to at least one piece of data adapted to be rendered on at least a first user interface of said device, of an action to protect said data taking account of at least one item of information representative of a physical and/or digital context of said device.

Some of the above input-output modules are optional and may therefore be absent from device 200 in some embodiments. In particular, if the present application is sometimes detailed in connection with a device communicating with at least a second device of the system 100, the method can also be implemented locally by a device, by using for example output elements of applications not requiring no exchange between devices (such as an electronic calendar for example).

On the contrary, in some of its embodiments, the method can be implemented in a distributed manner between at least two devices of the system 100, for example two devices of the same user 160.

The term "module" or the term "component" or "element" of the device here means a hardware element, in particular wired, or a software element, or a combination of at least one hardware element and at least one software item. The method according to the invention can therefore be implemented in various ways, in particular in wired form and/or in software form.

There illustrates a functional view of device 200 from the . As illustrated, the device 200 can comprise at least one module 510, 520 for acquiring contextual information (via the input/output and/or communication modules of the For example). As illustrated in , a contextual information acquisition module 510, 520 can enable the acquisition of information relating to the physical and/or digital context of the device. An acquisition module 510, 520 can comprise for example at least one hardware sensor (probe), such as an orientation, position and/or movement sensor, an accelerometer, a microphone, a camera (“webcam” for example ) etc., a sound capacity sensor of a room, capable of detecting an event in the physical environment of the device (for example a new presence in a vicinity of the device 200) and/or reporting on the physical environment of the device and/or of its situation (for example a position and/or an orientation of the device and/or of a screen coupled to the device).

An acquisition module 510 can also comprise activity probes, for example software, capable of detecting the occurrence of events (for example software) within the device or of characterizing the digital context of the device 200. It can by example, it may be an activity probe suitable for detecting the opening of a software application on the device (Word, Excel, Messenger, Facebook, Twitter, Instagram, etc.), and/or the opening and/or rendering of a document, a message and/or a dialog window by this application. It can also be an activity probe suitable for detecting a change in a parameter of a communication module of the device 200 (for example a change in the communication network). It may also be an activity probe suitable for detecting, via a user interface module of the device 200 for example, a mouse movement and/or keyboard input.

In some embodiments, as shown in , a first acquisition module 510 can be in charge of acquiring information local (internal) to the device 200, a second module being in charge of acquisitions external to the device 200, received via a communication module. These may in particular be acquisitions made by probes coupled to the device (for example in the context of use of the device in a room equipped with probes, such as a room in a smart building ("Smart building" according to the terminology English)

The information acquired via the acquisition modules 510 and 520 can for example be transmitted to a processing module 530, comprising for example an Artificial Intelligence brick (module), which can deduce a physical and digital context of the device 200 that uses the method of securing the present application, the information transmitted by the acquisition modules.

A change of state of a sensor, the processing module 530 can for example analyze the impact of this change in order to detect "in real time" if a document (for example sensitive) is being opened or visualization, and if necessary evaluate a risk relating to the rendering of the document in the context of the device and deduce therefrom an action 540 to be implemented.

There illustrates some embodiments of the method 300 of the present application. The method 300 can for example be implemented by the electronic device 200 illustrated in and in .

As illustrated in , the method 300 can comprise a detection 310 of an access to at least one datum from the device 200, which corresponds in this example to the device 110 of the ). The at least one datum can for example comprise a textual, audio and/or video component, and/or internet links, etc. It may thus be a multimedia content, a soundtrack, or part of a textual document adapted to be returned (for consultation and/or modification) on a graphical interface of the device 200 (via a word processing application, or a spreadsheet for example). It can also be a file and/or a message from an electronic messaging application, a dialog in an instant messaging window for example, application data from an online application, accessible from a web portal.

Access can correspond to any manipulation performed on data as part of its restitution, such as its creation, reading, modification, etc.

This access can be detected by the processing module 530 of the thanks to the contextual information transmitted by an acquisition module 510, 520.

In some embodiments, such as the example shown in , the method comprises obtaining 322 that at least one contextual information representative of the physical and/or “digital” context (such as connectivity information, an internal software event in the device 200, etc.) of the device 200. It can in particular it may be information transmitted by an acquisition module 510, 520 and acquired by a local sensor of the device 200 or coupled thereto via a communication module for example, and/or information transmitted by a activity probe, monitoring software tasks running on device 200.

In certain embodiments, the obtaining of this contextual information can be carried out conditionally, in connection with a detection of access to a document. An access detection can thus trigger in certain embodiments an activation of physical probes or activity probes of an acquisition module and/or an interrogation of an acquisition module for example) to obtain at least information representative of the physical and/or digital context of the device). In certain embodiments, the obtaining 322 of at least one contextual piece of information representative of the physical and/or “digital” context can be implemented independently of a detection 310 of access. For example, as shown in , the monitoring 320 of the physical and/or digital environment of a device can be carried out iteratively (for example periodically), or continuously, the occurrence of an event (such as detection of a presence in the field vision of a digital camera (or web cam in English) of the device) triggering the generation of associated contextual information.

As illustrated in , the method comprises an evaluation 330 of a risk of access by a third party to the data accessed. Thus, in certain embodiments, during a change of state of a probe transmitted by an acquisition module, the processing module 530 can analyze the impact of the change of state in order to detect 310 "in time real" the opening and/or the rendering (for example the visualization) of a document and/or in order to obtain 322 information representative of the physical and/or digital context of the device, and to assess 330 a risk accordingly access by a third party to the data in association with the context. The evaluation (determination) 330 can thus comprise an analysis (“in real time”) of the state (and/or the evolution of the state) of one or more probes linked to this access and to the 'environment.

For example, in certain embodiments, the evaluation can make it possible to determine whether the device is in a secure location or, on the contrary, in a more “hostile” location.

The evaluation 330 can take into account the states of several sensors/probes and use modules specific to the processing of states of certain sensors, such as a shape and/or face recognition module.

In certain embodiments, the processing module 530 may have a capacity for learning the uses, habits and/or feedback of the user. Thus, the evaluation 330 can for example take user feedback obtained 350 via a user interface of the device 200 for example. This may be user feedback obtained following, for example, a previous protection action 340 carried out according to the securing method of the present application. For example, user feedback can take the form of a rating of the relevance of an alert, a rating of the inconvenience caused to a user of the device by the protective action (visual and/or auditory inconvenience for the user's access to the data, for example, perceived slowness of the device, etc.) and/or an assessment by a user of the risk of access by a third party to the data, or (in certain embodiments) the sensitivity (confidentiality) of the protected data.

In certain embodiments, the evaluation 330 can also take account of configuration data obtained via a user interface of the device 110 or via a configuration file accessible to the device 110 for example.

For example, in certain embodiments where the method can comprise a rendering of at least one processing rule and/or processing module configuration information and/or information acquired by the processing module, the method can include obtaining user feedback on the rule or the information provided, for example obtaining a request for modification of this rule and/or this information.

In the illustrated embodiment, the method also includes an implementation 340 of at least one data protection action when the evaluation 330 has concluded that a potential risk exists.

For example, an example of a protective action may be the generation of an alert on a user interface coupled to the device. This may be, for example, the user interface where the data to be protected is rendered or another user interface. For example, when rendering data to be protected on a screen of the device, an alert (audible or visual) can be generated discreetly on a connected watch and/or on a mobile phone of at least one user of the device; it can in particular be a user interface, coupled to the device, but linked to another user (so as to supervise for example the use of the device 110).

According to another example (detailed more precisely below), the protection action may comprise a modification of the rendering of the data (for example an alteration of its rendering).

The protective action may also include obtaining confirmation (authorization to render), via a user interface (for example the user interface on which an alert is presented) prior to rendering the data, or prior to an end modification of the rendering of the data. It can be a dialog box for example. An embodiment may for example not provide access to the data to be protected (for example by not opening a document or an audio or textual message), or by altering the rendering of the data of way to make the data at least temporarily inaccessible. It may be for example a blurring of visual or textual data. For example, other than an alert and/or confirmation dialog box, the entire screen of device 110 may be masked and/or blurred in some embodiments. According to another example, it may involve masking and/or partial blurring of the screen, performed only on the part of the screen where the sensitive data is displayed. It may be, according to another example, a superposition of visual or sound elements on a visual or textual data, respectively sound, and/or a only partial rendering of the data until obtaining a confirmation from a user. There illustrates the emission of an alert message on a user interface, informing a user of a potential risk and asking him for a confirmation action before rendering. Such a user interface can for example make it possible to obtain authorization to render a document, or on the contrary cancel a command to render a document. The authorization and/or the rendering cancellation command can for example be transmitted to the processing module 530.

Optionally, as shown in , the protection action can include the provision of additional information on the causes of generation of the protection action (for example a summary of the evaluation carried out by the processing module 530, possibly including the states of certain physical and/or activity probes transmitted by the acquisition modules 510, 520).

As indicated above, the protection action may include a modification of the rendering of the data (for example an alteration of its rendering). Certain embodiments implementing an adaptation of the rendering can for example allow a user to access and/or continue to access at least partially the data to be protected, while helping to protect the data from third parties.

For example, in certain embodiments, the method can comprise an adaptation of certain rendering parameters according to the evaluated risk. This may involve, for example, in a context assessed as risky (or hostile), restricting the dimensions and position of a rendering window of sensitive data in order to make it more difficult to access the content of the window ( and therefore to sensitive data) by a third party. In some embodiments, at least one parameter of at least one character and/or at least one paragraph can be modified to make remote reading more difficult. A modified parameter can for example relate to at least one background color and/or text of a document, and/or to a size and/or to a font and/or to a spacing between document lines. For example, the document's type size may be automatically reduced, or a document's typeface may be changed to a typeface that is not or poorly suited for remote reading, such as a small (thin) typeface. and/or handwritten and/or whimsical with impasto (serif in English), such as Bradley Hand ITC, Gabriola, Juice ITC, Mistral or Vivaldi fonts.

In some embodiments, the determination 330 of a risk and/or the action implemented 340 as a result can take into account a sensitivity (confidentiality) of the restored data.

Also, in such embodiments, as in the example illustrated in , the method comprises obtaining 312 at least one piece of information representative of the sensitive (confidential) nature of the document. Such information can be obtained for example when accessing an already existing document thanks to document metadata, or thanks to information provided by a user of the device 200 (via a user interface of the device for example) during the creation and/or a backup of a document and/or once a document has been opened, for example. In certain embodiments, the presence of keywords (“private”, “personal”, “confidential”) in a content to be protected and/or a similarity of a content to be protected with another content already classified as sensitive.

According to another example, data can be automatically classified as sensitive or non-sensitive, for example thanks to a classification module, such as a module comprising an artificial intelligence brick (such as a support vector machine (or Support Vector Machine ( SVM) according to the English terminology).It can be in particular a classification module based on a supervised learning technique.The method can for example comprise a preliminary step (not illustrated) of training (or learning) of the classification module, using a learning corpus comprising a set of annotated data, i.e. already classified, (manually for example) as 'sensitive' or 'non-sensitive'. This annotated data may in particular correspond to the domain of implementation of the method (for example a technical field of skills or activity of a user of the method of the present application). Thus, during this training step, the number of o occurrences of words present in annotated documents of the domain of implementation of the method can for example be counted. For example, a document can be associated with a vector of words, corresponding to the number of occurrences of each word of a plurality of words (with a value of 0 for example for a word not present in a document). The vectors can for example then be normalized: (for example by weighting techniques such as "Term Frequency - Inverse Term Frequency" (tf-idf)) so as to keep only the most relevant words and/or reduce the size of the vectors..

In some embodiments, the learning step may further comprise a representation (positioning) of the word vectors in a geometric space and a determination, in the geometric space, of a hyperplane separating the vectors of the sensitive documents from the vectors of non-sensitive documents. It may be in particular a hyperplane separating the vectors of sensitive documents from the vectors of non-sensitive documents with the greatest possible margin.

The step of obtaining 312 at least one piece of information representative of the sensitive nature of a document can comprise a calculation of the vector associated with this document and a positioning of the vector in the geometric space, so as to evaluate its proximity to the areas corresponding to sensitive documents, respectively non-sensitive, delimited by the hyperplane. The document can then be classified according to the position of the vector associated with it. Thus, if the vector is closer to the area of 'sensitive' documents than to the area of 'non-sensitive' documents, then the document is considered to be 'sensitive' (and vice versa). A confidence score can optionally be associated with the result of the classification. In such an embodiment, the protection action may optionally vary depending on the classification of the document and the associated confidence score.

The step of obtaining 312 at least one piece of information representative of the sensitive nature of at least one piece of data is optional in certain embodiments, the protection action being able for example to be systematically implemented on all the data present. of an assumed (assessed) risk.

A few cases of use of the security method of the present application are presented below, in one of its embodiments:

• At time t0, a person A is at his desk, alone, and opens a sensitive document on his computer, implementing the security process. No protective action is implemented because A is in a context evaluated as non-risky.
• At time t1, people pass before A. No protective action is implemented because the sensitive document displayed is not in the field of vision of these people. The context is therefore assessed as non-risky.
• At time t2, people pass behind A. The passage of people is detected by a motion sensor and transmitted to the processing module. The presence is detected near the device and the assessment concludes that there is a risky physical context, an alert is generated on A's computer, in a dialog window superimposed on the sensitive document, thus making it invisible to people nearby ).
• At time t3 (t3>t2), people move away. The risk of access decreases. The dialog window superimposed on the sensitive document disappears, thus making the document visible again.
• At time t4, A is sitting in the train and opens the sensitive document.

The connection of A to a communication network different from the network which she accesses at her office is detected by an activity probe and transmitted to the processing module. The processing module also receives from the acquisition module information relating to the modification of the GPS position of the device. The assessment concludes that there is a risky physical context, and an alert is generated on A's computer (as at time t3 for example)

Claims (10)

Method implemented in an electronic device comprising, during access to at least one piece of data adapted to be rendered on at least one first user interface of said device, an implementation of an action to protect said data taking account of at least one item of information representative of a physical and/or digital context of said device. Method according to claim 1 wherein said information representative of said is obtained via a sensor coupled to said device and/or via an activity probe accessible from said device. A method according to claim 1 or 2 wherein said protective action takes into account at least one prior implementation of said method on said device. Method according to any one of Claims 1 to 3, in which the said protective action is a function of at least one criterion of confidentiality of the said data. A method according to any of claims 1 to 4 wherein said protect action includes at least one of the following rendering actions:
- generation of an alert message on at least a second user interface of said device,
- Obtaining confirmation of a command to render said datum;
- an adaptation of said rendering. Method according to claim 5, in which the adaptation of the rendering comprises at least partial blurring of a rendering zone of the said first user interface. Method according to Claim 5 or 6, in which the adaptation of the rendering comprises, when the said data is textual data, a modification of a size, of a font and/or of a character color of at least a of said data. Method according to one of Claims 5 to 7, in which the adaptation of the rendering comprises, when the said data is data adapted to text, a modification of a spacing and/or of a color of the text and/or of a background of the text of at least part of said data. Electronic device comprising at least one processor configured for an implementation, during access to at least one piece of data adapted to be rendered on at least one first user interface of said device, of an action to protect said data taking account of at least one item of information representative of a physical and/or digital context of said device. Computer program product comprising instructions for the implementation, when the program is executed by at least one processor of an electronic device, of a method comprising, when accessing at least one piece of data adapted to be rendered on at least a first user interface of said device, an implementation of an action for protecting said data taking account of at least one item of information representative of a physical and/or digital context of said device.