System and method for facilitating user access to vehicles based on biometric information

• US 10,131,322 B2
• Filed: 09/14/2017
• Issued: 11/20/2018
• Est. Priority Date: 06/11/2014
• Status: Active Grant

• Current Assignee: Veridium IP Limited (Harvard Investments LP)
• Original Assignee: Veridium IP Limited (Harvard Investments LP)
• Inventors: Hoyos, Hector, Braverman, Jason, Xiao, Geoffrey, Mather, Jonathan Francis, Streit, Scott
• Primary Examiner(s): File, Erin M
• Application Number:
  US15/704,778
• Publication Number:
  US 20180009417A1
• Time in Patent Office: 432 Days
• CPC Class Codes: B60R 2325/106 Internet
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/241 whereby access privileges are related to the identifiers
• CPC Class Codes: B60R 25/25 using biometry
• CPC Class Codes: G07C 9/00563 using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/027 using movement velocity, acceleration information
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/44 for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]

Abstract

Systems and methods are provided for authorizing a user to access an access-controlled environment. The system includes a system server platform that communicates with mobile devices (e.g., smartphones) and on-board vehicle computing devices accessed by users. The embodiments enable a series of operations whereby a user accessing a vehicle is prompted to biometrically authenticate using the user'"'"'s smartphone or on-board vehicle computer. In addition, the system can further authorize the user and electronically facilitate access to the vehicle as well as perform other authorized operations relating to the use of the vehicle. In addition the vehicle access system integrates with various computing devices and computer-based services accessible to the user. The systems and methods also facilitate active monitoring of the vehicle occupants and environmental conditions using optical sensors and the like so as to enhance security, convenience and safety of the occupants during use of the vehicle.

Claims

1. A method for authorizing a user to access a vehicle, the method comprising:

accessing, by a remote server computing device, a non-transitory computer readable storage medium, and wherein information stored in the storage medium includes;

a plurality of user profiles, wherein each user profile is associated with a respective user and a respective mobile device,

a plurality of vehicle profiles, wherein each vehicle profile is associated with a respective vehicle having a respective on-board computer, and

permissions associated with respective user profiles in relation to respective vehicle profiles, wherein the permissions govern access by the respective users to the respective vehicles;

receiving, by the computing device over a network from one or more of the user'"'"'s personal mobile device and the vehicle'"'"'s onboard computer, an authorization request comprising;

identification information associated with the user, access information identifying the vehicle and a current biometric identifier generated by one or more of the mobile device and the on-board computer based on biometric information captured from the user;

authorizing, by the computing device based on the received authorization request, the user access to the vehicle, wherein the authorizing step comprises;

determining, by the computing device, that the received identification information corresponds to a user profile among the plurality of user profiles stored in the storage,

determining, by the computing device, that the identified vehicle corresponds to a vehicle profile among the plurality of vehicle profiles stored in the storage, and

biometrically authenticating the user by comparing the received biometric identifier to a previously generated biometric identifier stored in association with the user profile;

identifying, by the computing device based on the identification information and the access information, one or more permissions, among the permissions, that is associated with the user and the vehicle, and

verifying, by the computing device based on the one or more permissions, that the user is authorized to access the vehicle;

transmitting, based on the authorization, by the computing device over a communications network to a remote computing device associated with the vehicle, an authorization notification that facilitates the user access to the vehicle.

2. The method of claim 1, further comprising:

creating, by the computing device in the storage, an access record concerning the authorized access;

receiving, by the computing device from the on-board computer, usage information relating to the user'"'"'s authorized access to the vehicle; and

updating the access record based on the usage information.

3. The method of claim 2, wherein the usage information includes one or more of:

a number of occupants of the vehicle during the authorized access;

location of the vehicle during the authorized access;

vital sign measurements of the user; and

pupil dilation of the user.

4. The method of claim 3, further comprising:

receiving, by the computing device from the on-board computer, a notification that an accident involving the vehicle occurred during the authorized access;

transmitting, by the computing device to a remote computing device associated with an emergency response agency, at least a portion of the record including the number of occupants of the vehicle.

5. The method of claim 1, further comprising:

receiving, by the computing device from the on-board computer during the authorized access, a subsequent authorization request comprising identification information associated with the user and the on-board computer, a biometric authentication status, and information identifying the vehicle;

repeating the authorizing step based on the subsequent authorization request and the usage information, wherein the step of verifying comprises analyzing the usage information based on the one or more permissions; and

transmitting to the remote computing device, based on the re-authorization, an updated authorization notification.

6. The method of claim 1, wherein the mobile device and the on-board computer are the same device.

7. The method of claim 1, wherein the remote computing device and the on-board computer are the same device.

8. The method of claim 1, further comprising:

wherein the authorization request specifies an operation to be performed using the on-board computer, wherein the operation is one or more of starting the vehicle, and unlocking a door of the vehicle; and

verifying, based on the one or more permissions, that the user is authorized to perform the operation.

9. The method of claim 8, wherein the authorization notification instructs the on-board computer to provide the user access by performing the operation.

10. The method of claim 1, wherein the identification information is a key that is unique to the user and the mobile device, and wherein determining that the received identification information corresponds to the user profile comprises matching the received key to a previously stored key that is associated with the user profile.

11. The method of claim 1, further comprising:

receiving, by the computing device from the on-board computer during the authorized access, a transaction request, the transaction request comprising identification information associated with the user and the on-board computer, a biometric authentication status, and transaction details concerning a transaction to be conducted using the on-board computer;

authorizing, by the computing device based on the received transaction request, the user to conduct the transaction, wherein the authorizing step comprises;

determining, by the computing device, that the received identification information corresponds to a user profile stored in the storage;

identifying, by the computing device, based on the user profile, a transaction account associated with the user profile; and

determining, by the computing device, based on the received biometric authentication status, that the user has been biometrically authenticated by the on-board computer, and

verifying, by the computing device based on the identified transaction account and the transaction details, that the user is authorized to conduct the transaction;

transmitting, by the computing device to the on-board computer based on the authorization, a second authorization notification that advances the transaction via the on-board computer.

12. The method of claim 1, further comprising:

wherein the authorization request includes settings identifying a second user and defining permissions governing access by the second user to the vehicle;

identifying, by the computing device, a second user profile among the user profiles based on the identification of the second user; and

updating, by the computing device, the permissions based on the received settings.

13. The method of claim 12, further comprising:

generating, a vehicle access key;

storing, by the computing device in the memory, at least a portion of the vehicle access key in the memory in association with a second user profile and a vehicle profile associated with the vehicle;

transmitting the vehicle access key to the second user mobile device.

14. The method of claim 13, further comprising:

receiving, by the computing device over the network from the second user mobile device, a second authorization request comprising;

identification information associated with the second user and the second user mobile device, a biometric authentication status, the second user key, and access information identifying the vehicle;

authorizing, by the computing device based on the second authorization request, the second user to access the vehicle, wherein the authorizing step comprises;

determining, by the computing device, that the identification information included in the second authorization request corresponds to the second user profile,

determining, by the computing device, that the second user key included in the second authorization request matches the corresponding key associated with the second user profile and the vehicle profile,

determining, by the computing device, based on the biometric authentication status included in the second authorization request, that the second user has been biometrically authenticated by the mobile device,

identifying, by the computing device, one or more permissions that are associated with the second user profile and the vehicle profile, and

verifying, by the computing device based on the one or more permissions, that the second user is authorized to access the vehicle; and

transmitting, based on the authorization, by the computing device over the communications network to the on-board computer, an authorization notification that grants the second user access to the vehicle.

15. A system for authorizing a user to access a vehicle, comprising:

a remote server computing device, comprising;

a network communication interface, a computer-readable storage medium, and a processor configured to interact with the network communication interface and the computer-readable storage medium, wherein the software modules include;

a database module that when executed configures the one or more processors to access the storage medium, and wherein information stored in the storage medium includes;

a plurality of user profiles, wherein each user profile is associated with a respective user and a respective mobile device,

a plurality of vehicle profiles, wherein each vehicle profile is associated with a respective vehicle having a respective on-board computer, and

permissions associated with respective user profiles in relation to respective vehicle profiles, wherein the permissions govern access by the respective users to the respective vehicles;

a communication module that when executed configures the processor to receive, over a network from one or more of the user'"'"'s personal mobile device and the vehicle'"'"'s on-board computer, an authorization request comprising;

identification information associated with the user, a current biometric identifier generated by one or more of the mobile device and the on-board computer based on biometric information captured from the user, and access information identifying the vehicle;

an authorization module that when executed configures the processor to, based on the received authorization request, authorize the user access to the vehicle by;

determine that the received identification information corresponds to a user profile among the plurality of user profiles stored in the storage;

determine that the identified vehicle corresponds to a vehicle profile among the plurality of vehicle profiles stored in the storage;

biometrically authenticate the user by comparing the received biometric identifier to a previously generated biometric identifier stored in association with the user profile,

identify one or more permissions, among the permissions, that is associated with the user profile and the vehicle profile, and

verify, based on the one or more permissions, that the user is authorized to access the vehicle; and

wherein the communication module further configures the one or more processors to transmit, over a communications network to a remote computing device associated with the vehicle, an authorization notification that facilitates the user access to the vehicle.