US Patent 10496802 Security audit tracking on access

A login event is detected that is directed to a protected application. A geographical position of a device from which the login event originated is recorded in response to the login event. Also, a camera in communication with the device is activated and an image is take of an operator of the device in response to the login event. The login event, the geographical position, and the image are provided for security auditing to a security system associated with the protected application.