Identity recognition

• US 10,169,939 B2
• Filed: 03/16/2016
• Issued: 01/01/2019
• Est. Priority Date: 03/16/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: He, Jun, Wang, ZhiWei, Xu, Li, Zhang, Li
• Primary Examiner(s): Syed, Nabil H
• Application Number:
  US15/071,458
• Publication Number:
  US 20170270723A1
• Time in Patent Office: 1,021 Days
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/00174 Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys mechanical locks with electric permutation E05B49/00; arrangements for sensing or reading record carriers G06K7/00; electronic switching H03K17/00
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards

Abstract

Embodiments of the present invention provide methods, computer program products, and systems to automatically verify a person'"'"'s claimed identity using wireless token passing. Embodiments of the present invention can be used to receive identification data comprising a universally unique identifier (UUID) and a first security token and process the received identification data by matching the UUID to an associated website and verifying the first security token against a second security token. Embodiments of the present invention can be used to notify a first user of the processed identification data by displaying an indication that verification of the identification data was successful or unsuccessful.

Claims

1. A computer-implemented method comprising:

receiving, by a user device of a first user, identification data comprising a universally unique identifier (UUID) that is associated with a security database of a second user and a first security token associated with the second user;

verifying, by the user device, the received identification data by utilizing the UUID to access the security database that purportedly issued the UUID and verifying that the first security token matches a second security token generated by the security database;

responsive to verifying the received identification data, disarming a security system associated with the user device for a specified time period;

detecting the presence or absence of the second user;

confirming whether the second user has completed a task associated with the first security token; and

responsive to detecting the absence of the second user and confirming whether the second user has completed the task, automatically re-arming the security system associated with the user device after the specified time period expires.

2. The computer-implemented method of claim 1, wherein the first security token is used to authenticate access for the second user to premises associated with the first user.

3. The computer-implemented method of claim 2, wherein the first security token comprises:

an alphanumeric sequence, an amount of time that the first security token is valid, an amount of authorized time to be on premises, and a stated purpose for access.

4. The computer-implemented method of claim 1, further comprising:

responsive to detecting that the authorized time to be on premises is expiring, transmitting a first notification to the first user that the authorized time is expiring and a request to either extend the authorized time to be on premises or confirm revocation of authorization at the expiration of the authorized time period.

5. The computer-implemented method of claim 4, further comprising:

responsive to receiving the confirmation to revoke authorization at the expiration of the authorized time period, confirming that the stated purpose has been completed; and

responsive to confirming that the stated purpose has been completed, re-enabling the first user'"'"'s security system.

6. The computer implemented method of claim 5, wherein confirming that the stated purpose has been completed comprises:

receiving an indication that the stated purpose has been completed and an indication that the second user associated with the security token is no longer on premises.

7. The computer-implemented method of claim 4, further comprising:

responsive to receiving the extension of authorized time, extending the authorized time;

transmitting a second notification to the user that the authorized time is expiring and a request to either extend the authorized time to be on premises or confirm revocation of authorization at the expiration of the authorized time period;

responsive to receiving the confirmation to revoke authorization at the expiration of the authorized time period, confirming that the stated purpose has been completed; and

responsive to confirming that the stated purpose has been completed, re-enabling the first user'"'"'s security system.

8. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising;

program instructions to receive, by a user device of a first user, identification data comprising a universally unique identifier (UUID) that is associated with a security database of a second user and a first security token associated with the second user;

program instructions to verify, by the user device, the received identification data by utilizing the UUID to access the security database that purportedly issued the UUID and verifying that the first security token matches a second security token generated by the security database;

responsive to verifying the received identification data, disarming a security system associated with the user device for a specified time period;

program instructions to, responsive to verifying the received identification data, disarm a security system associated with the user device for a specified time period;

program instructions to detect the presence or absence of the second user;

program instructions to confirm whether the second user has completed a task associated with the first security token; and

program instructions to, responsive to detecting the absence of the second user and confirming whether the second user has completed the task, automatically re-arm the security system associated with the user device after the specified time period expires.

9. The computer program product of claim 8, wherein the first security token is used to authenticate access for the second user to premises associated with the first user.

10. The computer program product of claim 9, wherein the first security token comprises:

an alphanumeric sequence, an amount of time that the first security token is valid, an amount of authorized time to be on premises, and a stated purpose for access.

11. The computer program product of claim 8, wherein the program instructions stored on the one or more computer readable storage media further comprise:

program instructions to, responsive to detecting that the authorized time to be on premises is expiring, transmit a first notification to the first user that the authorized time is expiring and a request to either extend the authorized time to be on premises or confirm revocation of authorization at the expiration of the authorized time period.

12. The computer program product of claim 11, wherein the program instructions stored on the one or more computer readable storage media further comprise:

program instructions to, responsive to receiving the confirmation to revoke authorization at the expiration of the authorized time period confirm that the stated purpose has been completed; and

program instructions to, responsive to confirming that the stated purpose has been completed, re-enable the first user'"'"'s security system.

13. The computer program product of claim 12, wherein the program instructions to confirm that the stated purpose has been completed comprise:

program instructions to receive an indication that the stated purpose has been completed and an indication that the second user associated with the security token is no longer on premises.

14. The computer program product of claim 11, wherein the program instructions stored on the one or more computer readable storage media further comprise:

program instructions to responsive to receiving the extension of authorized time, extending the authorized time;

program instructions to transmit a second notification to the user that the authorized time is expiring and a request to either extend the authorized time to be on premises or confirm revocation of authorization at the expiration of the authorized time period;

program instructions to, responsive to receiving the confirmation to revoke authorization at the expiration of the authorized time period, confirm that the stated purpose has been completed; and

program instructions to, responsive to confirming that the stated purpose has been completed, re-enable the first user'"'"'s security system.

15. A computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising;

program instructions to receive, by a user device of a first user, identification data comprising a universally unique identifier (UUID) that is associated with a security database of a second user and a first security token associated with the second user;

program instructions to verify, by the user device, the received identification data by utilizing the UUID to access the security database that purportedly issued the UUID and verifying that the first security token matches a second security token generated by the security database;

responsive to verifying the received identification data, disarming a security system associated with the user device for a specified time period;

program instructions to, responsive to verifying the received identification data, disarm a security system associated with the user device for a specified time period;

program instructions to detect the presence or absence of the second user;

program instructions to confirm whether the second user has completed a task associated with the first security token; and

program instructions to, responsive to detecting the absence of the second user and confirming whether the second user has completed the task, automatically re-arm the security system associated with the user device after the specified time period expires.

16. The computer system of claim 15, wherein the first security token is used to authenticate access for the second user to premises associated with the first user.

17. The computer system of claim 16, wherein the first security token comprises:

an alphanumeric sequence, an amount of time that the first security token is valid, an amount of authorized time to be on premises, and a stated purpose for access.