WO2013144966A1

WO2013144966A1 - System and method for privacy protection for a host user device

Info

Publication number: WO2013144966A1
Application number: PCT/IL2013/050296
Authority: WO
Inventors: Gil LITICHEVER; Ziv LEVI
Original assignee: Arilou Information Security Technologies Ltd.
Priority date: 2012-03-29
Filing date: 2013-03-28
Publication date: 2013-10-03

Abstract

A system for privacy protection for a host user device having at least one sensor that includes a filter associated with a sensor, where the filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation; a detector configured for detecting enablement input signals indicative of an attempt to operate said sensor; a notifier configured to indicate the detected attempt; and a module configured for receiving signals from the detector and for controlling the filter and the notifier. The module enables effective operation of the sensor according to at least one predefined rule upon receiving signals from said detector, by switching the filter to the first state and also enables switching the filter to the second state once the operation of the sensor is terminated.

Description

SYSTEM AND METHOD FOR PRIVACY PROTECTION FOR A HOST USER DEVICE

CROSS-REFERENCE TO RELATED PATENT APPLICATIONS

This application claims priority to US provisional patent application No. 61/617,198 filed on March 29, 2012, which is incorporated herein by reference in its entirety.

FIELD OF THE INVENTION

The present invention generally relates to cyber security and sensor privacy and more particularly to systems and methods for privacy protection by sensor controlling effective operation of sensors of user devices.

BACKGROUND OF THE INVENTION

Many modern cameras are digital. These cameras can be integrated into everyday devices such as laptops and mobile phones. Usually, cameras integrated into everyday devices are not covered and can operate whenever they are powered. Since these everyday objects and the cameras are digital, the camera is operated by digital means (usually software is involved). It is possible to hack into a host user device and then operate its camera without the user's knowledge or consent as seen in http://hellboundbloggers.com/2009/05/26/truth-about-webcam-hacking/. In February 2010 it was discovered that a school which gave its students laptops was actually spying them using the built-in laptops' cameras:

http://en.wikipedia.org/wiki/Robbins v. Lower Merion School District.

Current means to notify the user that the camera is running are usually insufficient. These means include a light that can be disabled programmatically.

Mobile phones (and other devices) have built-in microphones and communication abilities. Unlike traditional phones, these mobile phones have software (or firmware) that can be updated or hacked. Using this modified firmware, the microphone can be activated and the user can be recorded without his/her knowledge or consent as seen in "http://news.cnet.com/FBI-taps-cell- phone-mic-as-eavesdropping-tool/2100- 1029 3-6140191.html". Currently, there are no automatic hardware solutions for the aforementioned microphone eavesdropping problem, the user can either move away from the phone or disconnect the battery.

SMART FILM

Smart film, also called Switchable film, is a liquid crystal display (LCD) product capable of adjusting light between a transparent and an opaque state by applying AC voltage. This product is based upon polymer-dispersed liquid crystals (PDLCs) technology. When no voltage is applied, the film is opaque. Smart glass is an implementation of the same principle of smart film in a glass form.

Smart film is used extensively for privacy as can be seen in http://inhabitat.com/super-smart- privacy-glass/.

PRIVACY SOLUTIONS

Several privacy solutions exist. US2010/0165169 published Jul. 1 2010, discloses a privacy filter mounted in front of a digital camera. The privacy filter is transparent when voltage is applied to it and is opaque otherwise. Error! Reference source not found, illustrates a known privacy mechanism for a camera with smart film privacy filter where 500 is the camera, 501 is the lens and 502 is the smart film. Although this publication describes a privacy filter, it does not address the hacking issue explicitly. As long as the privacy filter and the camera are operated by the same computer, hacking the computer compromises both the privacy filter and the camera. No automatic switching solution is offered.

Some solutions include physical protection as depicted in

http://www.ubergizmo.com/2010/04/gsou-usb-webcam-features-anti-peep-capability/. These solutions implement a physical barrier moved manually by the user.

SUMMARY OF THE INVENTION

According to one aspect of the invention, there is provided a system for privacy protection for a host user device having at least one sensor. The system includes at least one filter associated with at least one sensor, where the filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation; a detector configured for detecting enablement input signals indicative of an attempt to operate the sensor; a notifier configured to indicate said detected attempt; and at least one module configured for receiving signals from the detector and for controlling the filter and the notifier, wherein the module enables effective operation of the sensor according to at least one predefined rule upon receiving signals from said detector, by switching the filter to the first state and also enables switching the filter to the second state once the operation of the sensor is terminated.

Optionally, the at least one rule comprises at least one of: having the indication be operated for a predefined period of time; dentifying active validation of the user of the host user device.

According to some embodiments, the at least one sensor comprises a camera and the filter is configured for optically enable and disable effective operation thereof. In these cases, the detector may be configured to detect an attempt to operate the camera sensor by identifying operat on of a flash light of the camera.

Optionally, the at leas one sensor comprises a camera and the filter is configured for electrically enable and disable effective operation thereof.

According to some embodiments, the host user device comprises a screen and the detector is configured for identifying attempt to operate the sensor by identifying indication thereof over an area in the screen.

According to other embodiments, the at least one sensor comprises a microphone and the filter is configured for enabling and disabling thereof by: connecting and disconnecting of the microphone or by disturbing sound detected thereby. The filter optionally comprises a special plug device configured for plugging in a plug input of the host user device, wherein the plug device filter is configured for enabling and disabling of an internal microphone of the hos device.

Additionally or alternatively, the notifier uses an output device of the host user device for indicating an attempt to operate the sensor.

Additionally or alternatively, the notifier comprises at least one output device for indicating an attempt to operate the sensor.

According to some embodiments, the system is embedded in the host user device. According to other embodiments, the system is a standalone unit, in which case, the system optionally further includes a cover jacket to which the filter, detector, module and notifier connect to the cover jacket is configured for covering a back side the host user device. In these embodiments, in which the system is embedded in a cover jacket, the filter may be positioned over the cover jacket in a manner that allows it to optically enable and disable a camera sensor of the host user device.

Optionally, the filter enables connecting and disconnecting of the sensor from its power supply for enabling and disabling, respectively, the sensor effective operation.

Additionally or alternatively, the notifier is further operated by the module once the sensor is effectively operated.

According to some embodiments, the module can also operate the notifier when the sensor effective operation is disabled.

According to another aspect of the present invention, there is provided a method for privacy protection for a host user device having at least one sensor, using a privacy protection system. The method comprises: detecting an attempt to operate the sensor, wherein the sensor effective operation is disabled by a filter of the system, the filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation; operating at least one notifier for indicating a user of the detected attempt; enabling effective operation of the sensor according to at least one predefined rules; detecting termination of the sensor operation; and disabling sensor operation by switching the filter back to the second state.

Optionally, the at least one mle comprises at least one of: having the indication be operated for a predefined period of time; dentifying active validation of the user of the host user device.

Optionally, the at least one sensor comprises a camera and the filter is configured for optically enable and disable effective operation thereof.

Optionally, the detection of an attempt to operate the camera sensor is carried out by identifying operation of a flash light of the camera.

Optionally, the host user device comprises a screen and the detector is configured for identifying attempt to operate the sensor by identifying indication thereof over an area in the screen.

Optionally, the at least one sensor comprises a microphone and the filter is configured for enabling and disabling thereof by: connecting and disconnecting of the microphone or by disturbing sound detected thereby.

Optionally, the notification is carried out by using at least one output device. Optionally, the filter enables connecting and disconnecting of the sensor from its power supply for enabling and disabling, respectively, the sensor effective operation.

According to yet another aspect of the invention, there is provided a system for privacy protection for a host user device having at least one sensor. The system comprises: at least one filter associated with at least one sensor, the filter is configured to selectively operate in one of two states: a first state, which enables effective sensor operation and a second state which disables effective sensor operation; a detector configured for detecting enablement input signals indicative of an attempt to operate the sensor; a notifier configured to indicate the state of the filter; and at least one module configured for receiving signals from the detector and for controlling the filter and the notifier, wherein the module enables effective operation of the sensor according to at least one predefined rule upon receiving signals from the detector, by switching the filter to the first state and also enables switching the filter to the second state once the operation of the sensor is terminated.

DEFINITIONS, TERMS, ELEMENTS SENSOR

A sensor is any device or part of a device, which is used to intercept signals, e.g. light or sound, for any purpose, e.g. recording these signals, processing and/or sending them and the like.

CAMERA

A camera is a host device which records pictures or videos, usually in a digital format. Possible cameras include webcams and cellular phones cameras. A camera usually includes light sensors that intercept the light coming into its lens and in some implementations a recording device to save these light signals as photos or videos.

MICROPHONE

A microphone is a type of sensor which captures sound. PRIVACY FILTER

A "filter" denotes herein the part of the system that selectively enables or disables the effective operation of the sensor(s). The filter can be switched between two states: a first state in which the filter allows effective operation of the sensor and a "second state", in which the filter prevents or disturbs effective operation of the sensor. In case the sensor is a video and/or stills camera the filter can block its lens, for instance when switched to the second state mode, rendering the camera inoperable. In case of a microphone sensor, the filter can block sound entering the microphone or create acoustic distortion or disturbance to the sound. In some embodiments several filters may be used - one for each sensor (e.g. one for the microphone and one for the camera of the host device) in other embodiments the same filter may be used for one or more sensors.

Effective operation of a sensor (also referred to as operation of a sensor) when enabled by the filter, is typically although not necessarily similar or identical to operation of the sensor if no such filter was associated therewith.

NOTIFIER

A device or module that notifies when the sensor operates effectively (e.g. notifies the user that the camera and/or microphone is (/are) active). The notifier uses at least one output device of the system or of the host user device for outputting an indication that the sensor(s) is operated. Therefore, the notifier includes or uses one or more output devices such as audio and/or visual output devices, for example, an audio speaker, a screen, an indication lamp, flash light lamp and the like. The output device(s) may be part of the host device (e.g. the speaker and screen or flashlight of the mobile phone) or output device(s) of a separated system.

HOST

A "host" (also referred to in this document as "host user device") denoted herein a user device in which one or more sensors are integrated. Possible hosts include standalone digital cameras, mobile phones, computers, tablet devices, etc.

USER

A "user" denotes herein the owner of the host, the operator of the host or the subject captured by the sensor.

OPERATION SIGNAL

Any signal the host or the sensor sends to enable or disable the sensor. These are "sensor enabled" and "sensor disabled" signals. An example for such a signal is the camera activation signal, which is any signal sent to inform that the camera should be turned on or off. These are "camera on" and "camera off signals, for example.

In some embodiments, the operation signal can be originated not from the host, for example the user flipped a switch on the jacket. The "sensor enable", "sensor disable" are signals sent to the logic module indicating the wanted state and not necessarily the actual state of the sensor.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 schematically illustrates a prior art privacy protection mechanism for a camera, having a smart film that changes its translucency level according to applied voltage for disturbing the operation of camera.

Figure 2 schematically illustrates a mobile user device having a system for privacy protection embedded therein, according to some embodiments of the invention.

Figure 3 is a block diagram of a system for privacy protection, according to some embodiments of the invention.

Figure 4 is a block diagram of a system for privacy protection for a standalone camera or a camera of a mobile device, according to some embodiments of the invention.

Figure 5 is a flowchart, schematically illustrating a method for privacy protection of a user device, according to some embodiments of the invention.

Fig. 6 schematically illustrates a standalone system for privacy protection having a jacket cover for attaching to a mobile host device, according to some embodiments of the invention.

DETAILED DESCRIPTION OF SOME EMBODIMENTS OF THE INVENTION

The present invention, in some embodiments thereof, provides a system and a method for privacy protection for a host user device such as a mobile phone or a camera that has one or more sensors for allowing the user of the host to prevent unauthorized users from effectively using the sensor(s) of his/her host. The system is configured to prevent unauthorized users from effectively using the one or more sensors of the host without the knowledge of the authorized user thereof. This means that the sensor is prevented from operating effectively by the system of the present invention, for producing its output data (image, video or sound for example) unless the user has been notified.

According to some embodiments, the system includes: (a) one or more filters associated with one or more sensors of the host. Each filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation; (b) a detector configured for detecting an enablement input signal requesting operation of the sensor; ; (c) a notifier configured to provide an indication to a user of the state of the one or more sensors; and (d) a logic module for receiving signals from the detector and for controlling the filter and the notifier upon receiving the enablement input signal.

The system allows enabling and disabling effective operation of the sensor(s) by controlling of the filter(s) operatively associated therewith. Once the enablement signal is detected, the logic module notifies the user through the notifier allowing indicating that there is an attempt to operate the sensor. The effective operation of the sensor, at this stage is still disabled by the filter and the logic module will only allow effective operation of the sensor (by switching the filter to the first state) according to predefined one or more enablement rules.

For example, the logic module may allow enabling effective operation of the sensor after issuing a predefined notification for a predefined period of time (e.g. a few operations of the flash light of the camera host or the mobile phone host lasting a few seconds). In another example, only after the user of the host actively validates his/her awareness of the notification the sensor's effective operation is enabled. In the latter example, the user may be required to press a button of the system and the like for validating awareness of the notification and for approving enablement of the sensor effective operation.

The logic module may be software and/or hardware based module embedded in the user device, for example it can be standalone hardware such as a digital chip. In other examples, the logic module is a software application that the user can upload to his/her host device, where the module allows automatically communicating with the detector, filter and notifier.

The filter may be a component that requires installation at the host and may include a software module embedded in the host. For example, the filter may include one or more physical optical components for physically disabling the camera sensor, host flash light or lens for disablement thereof as well as software and/or hardware components for disturbing the audio signal of the microphone or for disabling the microphone by cutting off its power supply.

Error! Reference source not found, illustrates a system (6000), in accordance with one embodiment of the invention. The system (6000) includes a detector (601) detecting an enablement signal requesting operation of the sensor and outputting a signal indicative thereof to a logic module (602), which is a software and/or hardware based module that decides when to allow the sensor to operate effectively, controls the effective operation of the sensor by controlling a filter (604) and also activates a notifier (605). The notifier (605) notifies the user that a request/attempt for operating the sensor is detected, indicating it through any one or more of the output means of the user device (or the system) such as visually indicating it through a light source of the user device or aurally indicating through an audio speaker of the device. A power driver (603) of the system (6000) may drive a privacy filter (604) into a first state where it enables effective sensor operation or into a second state where it disables effective sensor operation. For example, if the filter (604) is a camera privacy filter, then when the filter (604) is in the first state the camera privacy filter may be rendered transparent. A power supply (600) supplies voltage to the entire circuit through a power driver (603). The notifier (605) and the privacy filter's (604) first state are always coupled.

Some of the aforementioned modules (e.g. power supply and power driver) might be optional in some implementations. Modules can be removed as long as the system keeps fulfilling its purpose (couple notification with effective sensor operation).

The logic module (602) operatively communicates with output devices (e.g. speaker, screen, flash light and the like) of the user device (e.g. mobile phone, tablet device, smartphone) or of the system (6000) to allow outputting the indication of the sensor(s) state (operated or disabled).

As mentioned above, the logic module (602) controls the filter (604) for only allowing effective operation of the sensor according to predefined enablement rules. Once the rule is fulfilled or carried out (e.g. a notification was outputted for a predefined period) the logic module (602) switches the filter (604) to the first state which enables effective operation of the sensor. CAMERA PRIVACY IMPLEMENTATION

Error! Reference source not found, illustrates a system (4000) in accordance with one embodiment of the invention. The system (4000) comprises a light detector (401) detecting when the camera should be active. The camera implements the flash using a LED light and when the camera should be active (e.g. recording or preparing to record) the flash is also active. The logic module (402) decides when to allow recording. The notifier (405) notifies the user when recording has been allowed. The power driver (403) drives the smart film (404) rendering it transparent. The power supply (400) supplies voltage to the entire circuit. The notifier and the smart film are always enabled simultaneously.

In some embodiments of the currently disclosed subject matter, the light detector may be replaced by any other mean notifying the logic that the camera should be enabled. These means include a digital signal from a computerized device (e.g. USB connection to the computer, dedicated I/O from the board, the data connection between the camera and the host etc.) and an analog signal (e.g. the camera's power supply line).

The logic can comprise any device translating the "enable camera" request to driving the privacy filter and the notifier. Examples for logic include a comparator with a capacitor, and a MCU. In some embodiments the logic implements additional functions designated for additional security and fault tolerance. These functions include debouncing (e.g. the logic enables filming only if the detector is activated continuously for more than a second) and timing (e.g. the logic activates the notifier a second before enabling the privacy filter).

In some embodiments, the privacy filter requires a driver to drive it electrically. This driver may include voltage conversion mechanism such as a charge pump or a switched power supply (e.g. since a smart film may require 70V AC to operate while a mobile phone battery supplies 3.6V a power driver is necessary).

The disclosure does not limit the type or number of privacy filters that can be used. In some embodiments, the privacy filter may include a liquid crystal filter (LCD), electro chromatic material, thermo chromatic material, smart glass, smart film or any other material and/or device operable to switch between optical states. In some of these embodiments, the privacy filter is by default opaque (not enabled), reducing the probability of a malfunction enabling it. However other types of privacy filters are also within the scope of the currently disclosed subject matter.

A notifier informs the user that the filter is currently in a first state, where the filter enables effective sensor operation. A notifier can consist of a LED, a speaker or any device or mean informing the user that the filter is currently in a first state, enabling effective sensor operation. In some embodiments, the "camera on" signal can be received both by the user and by the detector (e.g. LED light in webcams or mobile phones (flash)). If such a "camera on" signal exists and is used by the detector, and if it is clearly perceived by the user, a separate integral notifier is not mandatory, and the existing signal can be used as the notifier.

In some embodiments of the subject matter, an external power supply is used (e.g. the battery of the mobile phone), whereas in some embodiments a standalone power supply is used (e.g.

batteries).

In some embodiments of the subject matter the power is supplied by the "camera on" signal (e.g. small solar panel collects a small percentage of the LED flash light of a cell phone. The voltage is increased using an ultra-low voltage charge pump). Since some possible types of privacy filters such as smart film require only an extremely low amount of energy, and since in some embodiments a notifier and advanced logic are not required, this kind of implementation is possible. This kind of implementation minimizes faults because without a "camera on" signal, the circuit is not powered on.

As mentioned above, the notifier may use or be one of the output devices of the host such as a flash light of the camera, for instance. To indicate the user that the sensor is operated, the module may control the flash light of the host and operate by switching it on for one or several sequential flashes.

INTEGRATION WITH A MOBILE PHONE

Error! Reference source not found.2 illustrates an embodiment of the invention described in Error! Reference source not found.4 for a mobile phone (300). Figure 2 represents the backside of a typical mobile phone. A privacy filter (304) covers a camera (302) of the mobile phone (300). A light detector (303) is placed near the LED flash light (301) of the mobile phone (300). Component (305) represents the driver and logic modules. The power is supplied by the mobile phone's battery.

In these embodiments the system components such as the filter (304), logic module (305), driver (305) and detector (303) are all integrated or embedded in the mobile phone requiring installation thereof in the mobile phone (300). In some cases the manufacturer of the mobile phone or computer host user device may already embed some of these hardware components such as the detector and the filter requiring the user to simply upload or install a designated software of the logic module for carrying out the decision making as to when the mobile phone notifier should be activated for indicating that the sensor has been activated.

In some embodiments of the invention, the flash light (301) is partially covered by the light detector (303). In some embodiments of the currently disclosed subject matter, some of the light from the LED flash light (301) is deflected to the light detector (303) by an optical device (e.g. a small prism placed over the flash Led light). An additional notifier is not necessarily required.

In some embodiments of the invention, the system may be an integral part of the standard battery cover. In some embodiments of the invention, system may be implemented as a part of an external protective jacket. In other embodiments, the system may be integrated inside the mobile phone.

Figure 5 schematically illustrates a standalone system (7000) for privacy protection including a cover jacket (700) configured for covering the back side of a mobile phone host, where the mobile phone includes one or more cameras (e.g. a front and back side cameras) and a flash light, where the back camera and flash light are positioned at a back side of the mobile phone. The system (7000) also includes a hardware logic module (701), an optical filter (703), a detector (702) and an indication lamp (704) serving as the notifier output device.

The cover jacket (700) and location of the filter (703) are such that allow the filter to be positioned in front of the lens/sensor of the camera of the mobile phone when the cover jacket (700) covers the mobile phone. The filter may be a smart film or any other optical means that can be switched from a first state in which it does not interfere with the camera effective operation by letting light pass through it and a second state in which it interferes with light entering the camera lens/sensor. The logic module (701) may be a programmable chip connected to the detector (702), where the detector (702) is configured and positioned to detect an enablement signal (operation signal) for requesting or attempting to operate the camera. For example, the detector may be a light detector sensitive to light of a certain frequency range and/or intensity for sensing whether the flash light of the mobile phone back camera has been operated (either by the authorized user of the host user device or through unauthorized access thereto). Upon detection of such operation the detector (702) transmits a signal to the logic module (701), which in turn operates the indication lamp (704) for notifying the user regarding the effective operation attempt/request and switches the filter to an enabling mode first state, according to the predefined rules.

In these embodiments the camera cannot be operated unless the flash light is operated and switched on. In other embodiments different detectors, devices, circuitry and/or modules can be used for detecting operation of the sensor.

INTEGRATION WITH A COMPUTER

In some embodiments of the currently disclosed subject matter the subject matter is integrated with a computer camera. This computer is a desktop, a laptop, a tablet or any other computer that uses a digital camera. The camera is either integrated into the computer (e.g. laptop with a built in webcam) or is an add-on device.

In some embodiments of the currently disclosed subject matter, where a stand-alone camera is used, the built-in camera LED is the detector's signal. In some embodiments of the currently disclosed subject matter, where a built-in camera is used (e.g. a laptop with a built-in webcam), the detector uses a signal from the computer's display (e.g. a specific pattern is displayed when the camera should be turned on).

MICROPHONE PRIVACY IMPLEMENTATION

Some embodiments of the currently disclosed subject matter, implement a microphone privacy solution. In these embodiments, the system (6000) comprises a detector (601) detecting when the microphone should be active. The logic (602) decides when to allow the microphone to operate effectively and activate the notifier (these actions are always coupled). The notifier (605) notifies the user when the microphone is allowed to operate, signaling it in any way, e.g. visually and/or aurally. The power driver (603) may drive the privacy filter (604) into a first state where it enables effective microphone operation or into a second state where it disables effective microphone operation. The power supply (600) supplies voltage to the entire circuit. The notifier and the privacy filter's first state are always coupled.

Microphone privacy filters methods include, but are not limited to, physically blocking the microphone's electric signal, automatic microphone disconnect by the host user device when an external microphone is detected, physical muffling of sound (sound barrier), scrambling the sound using external noise, or any other method for sound disturbance.

Some host devices allow using an external microphone in addition to the internal microphone of the host, where the external microphone is connectable to the host device by inserting the microphone's plug to an input node of the host. Typically the host device is configured such that once the external microphone is plugged to the host input, the internal microphone is

automatically disabled.

In these cases, according to some embodiments of the invention, the privacy protection system includes a special plug device configured for simulating an external microphone for disabling the internal microphone by plugging in to the host through the same external microphone input. The special plug device can be activated and deactivated for preventing and allowing operation of the internal microphone, respectively, for example, by changing electric resistance thereof.

Figure 6 is a flowchart schematically illustrating a method for privacy protection for host user devices, according to some embodiments of the invention. The method includes: detecting an enablement input signal indicative of an attempt or request for operating of the sensor (51); upon such detection, outputting a notification indicative of the sensed request/attempt (52); and enabling effective operation of the sensor by switching the filter to the first state (54) only if the predefined rule(s) for doing so is(are) fulfilled (e.g. only once the notification was outputted for a predefined period or after the user actively validates his/her awareness of the notification) (53). The system can also identify through the detector, for example, when the sensor operation is terminated (55) and disable effective operation of the sensor by switching the filter back to its default second state (56) upon such identification. In some embodiments, the system then go back to the state of detecting an enablement input signal (51). According to some embodiments, in which the host user device includes a screen (such as in digital cameras, computers and mobile phones), the detector is positioned and configured to detect a portion of the screen of the host (e.g. a small square of pixels at a corner of the screen) to identify there an indication for activation of the camera. This can be done by identifying the unique color of the pixels in this designated area on the screen. Once identifying such activation, the logic module (receiving signals from the detector) activates the camera and initiates a notification through the notifier. In some embodiments, the filter is a circuitry module connected to the logic module and to the sensor itself enabling electrically connecting and disconnecting the sensor upon receiving a signals from the logic module.

Claims

1. A system for privacy protection for a host user device having at least one sensor, said system comprising:

a) at least one filter associated with at least one sensor, said filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation; b) a detector configured for detecting enablement input signals indicative of an

attempt to operate said sensor;

c) a notifier configured to indicate said detected attempt; and

d) at least one module configured for receiving signals from said detector and for controlling said filter and said notifier, wherein said module enables effective operation of the sensor according to at least one predefined rule upon receiving signals from said detector, by switching said filter to said first state and also enables switching said filter to the second state once the operation of the sensor is terminated.

2. The system according to claim. 1, wherein said at least one rule comprises at least one of: having said indication be operated for a predefined period of time; identifying active validation of the user of said host user device.

3. The system according to claim 1, wherein the at least one sensor comprises a camera and said filter is configured for optically enable and disable effective operation thereof.

4. The system according to claim 3, wherein said detector is configured to detect an attempt to operate the camera sensor by identifying operation of a flash light of the camera.

5. The system according to claim 1, wherein the at least one sensor comprises a camera and said filter is configured for electrically enable and disable effective operation thereof.

6. The system according to claim 1, wherein said host user device comprises a screen and said detector is configured for identifying attempt to operate the sensor by identifying indication thereof over an area in said screen.

7. The system according to claim 1, wherein the at least one sensor comprises a microphone and said filter is configured for enabling and disabling thereof by: connecting and disconnecting of the microphone or by disturbing sound detected thereby.

8. The system according to claim 7, wherein said filter comprises a special plug device configured for plugging in a plug input of the host user device, said plug device filter is configured for enabling and disabling of an internal microphone of the host device.

9. The system according to claim 1, wherein said notifier uses an output device of the host user device for indicating an attempt to operate the sensor.

10. The system according to claim 1, wherein said notifier comprises at least one output device for indicating an attempt to operate the sensor.

11. The system according to claim 1, wherein said system is embedded in the host user

device.

12. The system according to claim 1, wherein said system is a standalone unit.

13. The system according to claim 12 further comprising a cover jacket to which said filter, detector, module and notifier connect, said cover jacket is configured for covering a back side the host user device.

14. The system according to claim 13, wherein said filter is positioned over said cover jacket in a manner that allows it to optically enable and disable a camera sensor of said host user device.

15. The system according to claim 1, wherein said filter enables connecting and

disconnecting of the sensor from its power supply for enabling and disabling, respectively, the sensor effective operation.

16. The system according to claim 1, wherein said notifier is further operated by the module once the sensor is effectively operated.

17. The system according to claim 1, wherein said module operates said notifier once the sensor effective operation is disabled.

18. A method for privacy protection for a host user device having at least one sensor, using a privacy protection system, said method comprising:

detecting an attempt to operate said sensor, wherein said sensor effective operation is disabled by a filter of the system, said filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation;

operating at least one notifier for indicating a user of the detected attempt; and enabling effective operation of the sensor according to at least one predefined rules; detecting termination of the sensor operation; and

disabling sensor operation by switching said filter back to the second state.

19. The method according to claim 18, wherein said at least one rule comprises at least one of: having said indication be operated for a predefined period of time; identifying active validation of the user of said host user device.

20. The method according to claim 18, wherein the at least one sensor comprises a camera and said filter is configured for optically enable and disable effective operation thereof.

21. The method according to claim 20, wherein said detection of an attempt to operate the camera sensor is carried out by identifying operation of a flash light of the camera.

22. The method according to claim 18, wherein said host user device comprises a screen and said detector is configured for identifying attempt to operate the sensor by identifying indication thereof over an area in said screen.

23. The method according to claim 18, wherein the at least one sensor comprises a

microphone and said filter is configured for enabling and disabling thereof by: connecting and disconnecting of the microphone or by disturbing sound detected thereby.

24. The method according to claim 18, wherein said notification is carried out by using at least one output device.

25. The method according to claim 18, wherein said filter enables connecting and

26. A system for privacy protection for a host user device having at least one sensor, said system comprising:

a) at least one filter associated with at least one sensor, said filter is configured to selectively operate in one of two states: a first state which enables effective sensor operation and a second state which disables effective sensor operation;

b) a detector configured for detecting enablement input signals indicative of an

attempt to operate said sensor;

c) a notifier configured to indicate the state of said filter; and