Method and device for managing authentication using an identity avatar

• US 10,032,011 B2
• Filed: 08/12/2014
• Issued: 07/24/2018
• Est. Priority Date: 08/12/2014
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Kao, Frank
• Primary Examiner(s): Dada, Beemnet
• Assistant Examiner(s): GUNDRY, STEPHEN T
• Application Number:
  US14/457,675
• Publication Number:
  US 20160048667A1
• Time in Patent Office: 1,442 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Aspects of the subject disclosure may include, for example, generating a digital certificate responsive to an authentication of a user according to a dynamic biometric process, associating the digital certificate with a transaction record for the transaction, storing information associated with authentication conditions of the dynamic biometric process, receiving an access request associated with the transaction, and providing access to the transaction record, the information associated with the authentication conditions of the dynamic biometric process or a combination thereof responsive to the access request, where granting of the access is according to transmitting an access acknowledgement to equipment of the user, or obtaining another authentication to allow permission to access or a combination thereof. Other embodiments are disclosed.

Claims

1. A method, comprising:

storing, by a system including a processor, an electronic voice print model associated with a user, the electronic voice print model generated based on recording words spoken by the user;

receiving, by the system, a transaction record associated with a first device, the first device associated with a network address;

determining, by the system, that the network address is associated with a biometric authentication;

retrieving, by the system, a cellular telephone number registered for the biometric authentication, the cellular telephone number associated with a second device different from the first device;

sending, by the system, separate biometric authentication requests to the second device associated with the cellular telephone number registered for the biometric authentication, a first biometric authentication request of the separate biometric authentication requests sent for authorizing a purchase transaction specified by the transaction record, and a second biometric authentication request of the separate biometric authentication requests sent for authorizing an access to the transaction record;

receiving, by the system, separate voice recordings from the second device in response to the separate biometric authentication requests;

performing, by the system, the biometric authentication based on comparisons of the separate voice recordings to the electronic voice print model; and

generating, by the system, separate digital certificates responsive to the biometric authentication of the separate biometric authentication requests, a first digital certificate of the separate digital certificates documenting the authorizing of the purchase transaction and a second digital certificate of the separate digital certificates documenting the access to the transaction record.

2. The method of claim 1, further comprising randomly selecting a phrase for the separate biometric authentication requests.

3. The method of claim 2, further comprising specifying the phrase in at least one of the first biometric authentication request sent to the second device and the second biometric authentication request.

4. The method of claim 1, further comprising generating an expiration time associated with the second digital certificate, the expiration time defining a time of the access to the transaction record.

5. The method of claim 1, further comprising determining the transaction record via an Internet protocol.

6. The method of claim 1, further comprising determining the network address via an Internet protocol.

7. The method of claim 1, further comprising including a webpage link for accessing information associated with the transaction record.

8. A memory device storing instructions that, when executed by a server, facilitate performance of operations, the operations comprising:

storing an electronic voice print model associated with a user, the electronic voice print model generated based on a recording of words spoken by the user;

receiving a transaction record associated with a first device, the first device associated with a network address;

determining that the network address is associated with a multi-factor biometric authentication;

retrieving a cellular telephone number registered for the multi-factor biometric authentication, the cellular telephone number associated with a second device different from the first device;

sending a first biometric authentication request to the second device associated with the cellular telephone number registered for the multi-factor biometric authentication;

receiving a first voice recording sent from the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the first voice recording sent in response to the first biometric authentication request;

performing the multi-factor biometric authentication based on a first comparison of the first voice recording to the electronic voice print model;

creating a first digital certificate that authorizes the transaction record, the first digital certificate documenting the multi-factor biometric authentication obtained from the second device;

receiving an access request associated with the transaction record, the access request requesting an access to the transaction record;

sending a second biometric authentication request to the second device associated with the cellular telephone number registered for the multi-factor biometric authentication;

receiving a second voice recording sent from the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the second voice recording sent in response to the second biometric authentication request;

performing the multi-factor biometric authentication based on a second comparison of the second voice recording to the electronic voice print model; and

creating a second digital certificate associated with the access request, the second digital certificate documenting the multi-factor biometric authentication based on the second comparison of the second voice recording to the electronic voice print model, the second digital certificate for accessing the transaction record.

9. The memory device of claim 8, wherein the operations further comprise randomly selecting a phrase for the recording.

10. The memory device of claim 9, wherein the first voice recording comprises a first phrase, wherein the second voice recording comprises a second phrase, and wherein the first phrase and the second phrase are different.

11. The memory device of claim 9, wherein the operations further comprise randomly selecting a phrase specified by the second biometric authentication request.

12. The memory device of claim 8, wherein the operations further comprise associating the first digital certificate with the transaction record.

13. The memory device of claim 8, wherein the operations further comprise including a webpage link for the accessing of the transaction record.

14. The memory device of claim 8, wherein the operations further comprise determining the transaction record via an Internet protocol.

15. A communication device, comprising:

a hardware processor; and

a memory device, the memory device storing instructions, the instructions when executed by the hardware processor facilitate performance of operations, the operations comprising;

storing an electronic voice print model associated with a user, the electronic voice print model generated based on a recording of words spoken by the user;

receiving an Internet transaction record associated with a first device, the first device associated with a network address;

determining that the network address is associated with a multi-factor biometric authentication;

retrieving a cellular telephone number registered for the multi-factor biometric authentication, the cellular telephone number associated with a second device different from the first device;

initiating a first call to the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the first call for a first biometric authentication that authorizes the Internet transaction record associated with the first device;

receiving a first voice recording recorded during the call to the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the first voice recording recorded in response to the first biometric authentication of the Internet transaction record associated with the first device;

performing the multi-factor biometric authentication based on a first comparison of the first voice recording to the electronic voice print model;

creating a first digital certificate associated with the Internet transaction record associated with the first device, the first digital certificate documenting the first biometric authentication that authorizes the Internet transaction record based on the first voice recording recorded during the first call to the second device;

receiving an access request associated with the Internet transaction record, the access request requesting an access to the Internet transaction record;

sending a second biometric authentication request to the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the second biometric authentication request requesting a second biometric authentication that authorizes the access to the Internet transaction record;

receiving a second voice recording sent from the second device associated with the cellular telephone number registered for the multi-factor biometric authentication, the second voice recording sent in response to the second biometric authentication request to authorize the access to the Internet transaction record;

performing the multi-factor biometric authentication based on a second comparison of the second voice recording to the electronic voice print model; and

creating a second digital certificate associated with the access request, the second digital certificate documenting the multi-factor biometric authentication based on the second voice recording sent from the second device.

16. The communication device of claim 15, wherein the operations further comprise determining the Internet transaction record via an Internet protocol.

17. The communication device of claim 15, wherein the operations further comprise randomly selecting a phrase for the first biometric authentication request.

18. The communication device of claim 15, wherein the operations further comprise randomly selecting a phrase for the second biometric authentication request.

19. The communication device of claim 15, wherein the operations further comprise including a link for accessing information associated with the Internet transaction record.

20. The communication device of claim 15, wherein the operations further comprising determining the network address via an Internet protocol.