Using personal RF signature for enhanced authentication metric

• US 10,230,706 B2
• Filed: 10/28/2015
• Issued: 03/12/2019
• Est. Priority Date: 10/28/2015
• Status: Active Grant

• Current Assignee: Lenovo Global Technologies International Ltd. (Lenovo Group Ltd.)
• Original Assignee: Lenovo Enterprise Solutions (Singapore) Pte., Ltd. (Lenovo Group Ltd.)
• Inventors: Bond, David E., Diaz, Joel D.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sherkat, Arezoo
• Application Number:
  US14/925,841
• Publication Number:
  US 20170126648A1
• Time in Patent Office: 1,231 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for verifying identity includes associating with a person, one or more ID signals emitted by a personal device. The method includes detecting one or more ID signals, and confirming identity of the person in response to verifying identity of the person based upon identifying credentials from the person and verifying that one or more of the detected ID signals are associated with the person.

Claims

1. A method comprising:

associating with a person, one or more identification (“

ID”

) signals emitted by a personal device, each ID signal of the one or more ID signals comprising a wireless transmission with a unique identifier that differs from other identifiers transmitted wirelessly, wherein the ID signals are associated with a person in a database;

detecting one or more ID signals from the personal device using one or more signal sensors;

receiving identifying credentials from the person at a device that is independent from the personal device;

confirming, at the device independent from the personal device, identity of the person in response to verifying identity of the person based upon the received identifying credentials from the person and verifying that one or more of the detected ID signals are associated with the person; and

generating and sending an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person, the alert generated in response to determining that a percentage of the detected ID signals matching ID signals associated with the person does not satisfy a match threshold, the match threshold determined as a function of the number of ID signals that are detected.

2. The method of claim 1, further comprising, in response to receiving the alert, one or more of:

denying entry of the person when the identifying credentials comprise a request for entry;

declining a financial transaction when the identifying credentials comprise a request to approve a financial transaction; and

maintaining a lock in a locked state when the identifying credentials comprise a request to open the lock.

3. The method of claim 1, wherein the one or more detected ID signals comprise one or more of a radio frequency identification (“

RFID”

) signal, an identification signal transmitted using a near field communication protocol, an identification signal transmitted using a short distance data exchange protocol, and an identifier transmitted over a Wi-Fi network.

4. The method of claim 1, wherein the one or more detected ID signals are transmitted from one or more of:

an ID transmitter in a vehicle of the person;

an ID transmitter in a key fob of the person;

an ID transmitter in an electronic device attached to the person;

an ID transmitter in an access card;

an ID transmitter in a portable electronic device;

an ID transmitter in a portable communication device of the person;

an ID transmitter in a credit card;

an ID transmitter in a debit card; and

an ID transmitter in a card issued by a vendor.

5. The method of claim 1, wherein associating one or more ID signals with a person comprises storing the one or more ID signals in a database entry along with identifying credentials of the person.

6. The method of claim 1, wherein associating one or more ID signals with a person comprises an action by the person to register the ID signals.

7. The method of claim 1, wherein associating one or more ID signals with a person comprises an action by a party without an action by the person.

8. The method of claim 1, wherein associating one or more ID signals with a person further comprises:

detecting one or more ID signals;

determining that the one or more detected ID signals are not currently associated with the person; and

associating the one or more detected ID signals with the person.

9. The method of claim 1, wherein the identifying credentials of the person comprise one of:

an ID signal in addition to the one or more detected ID signals with the person;

a wireless request;

a keypad entry;

a retina scan;

a scan from a fingerprint reader;

a scan from a magnetic stripe reader;

a body scan of the person;

an image of the person; and

insertion of a key in a lock.

10. An apparatus comprising:

an association module that associates, with a person one or more ID signals by a personal device, each ID signal of the one or more ID signals comprising a wireless transmission with a unique identifier that differs from other identifiers transmitted wirelessly, wherein the association module associates the ID signals with the person in a database;

an ID detection module that detects one or more ID signals from the personal device using one or more signal sensors;

a confirmation module that;

receives identifying credentials from the person at a device that is independent from the personal device; and

confirms, at the device independent from the personal device, identity of the person in response to verifying identity of the person based upon the received identifying credentials from the person and the ID detection module verifying that one or more of the detected ID signals are associated with the person; and

an alert module that generates and sends an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person, the alert generated in response to determining that a percentage of the detected ID signals matching ID signals associated with the person does not satisfy a match threshold, the match threshold determined as a function of the number of ID signals that are detected,

wherein said modules comprise one or more of hardware circuits, a programmable hardware device and a processor executing code.

11. The apparatus of claim 10, further comprising a denial module that, in response to receiving the alert, one or more of:

denies entry of the person when the identifying credentials of the person comprise a request for entry;

declines a financial transaction when the identifying credentials of the person comprise a request to approve a financial transaction; and

maintains a lock in a locked state when the identifying credentials of the person comprise a request to open the lock.

12. The apparatus of claim 10, wherein the association module associating one or more ID signals with a person further comprises:

the ID detection module detecting one or more ID signals by a personal device and determining that the one or more detected ID signals are not currently associated with the person; and

the association module associating the one or more detected ID signals with the person.

13. The apparatus of claim 10, wherein the confirmation module confirms identity by verifying identity of the person based upon identifying credentials further comprises:

verifying that an ID signal in addition to the one or more detected ID signals is associated with the person;

processing a wireless request and verifying that an identification signal in the wireless request corresponds to the person;

verifying that a keypad entry matches a stored code;

verifying that a retina scan matches a retina scan of the person;

verifying that a scan from a fingerprint reader matches a fingerprint of the person;

verifying that a scan from a magnetic stripe reader is valid;

verifying that a body scan of the person includes elements that match identifying characteristics of the person;

verifying that an image of the person matches a stored image of the person; and

allowing tumblers in a lock to unlock a lock in response to insertion of a key in a lock and turning the key in the lock.

14. A system comprising:

one or more signal sensors;

an ID receiver;

an association module that associates, with a person one or more ID signals by a personal device, each ID signal of the one or more ID signals comprising a wireless transmission with a unique identifier that differs from other identifiers transmitted wirelessly, wherein the association module associates the ID signals with the person in a database;

an ID detection module that detects, using the one or more signal sensors, one or more ID signals from the personal device using one or more signal sensors;

a confirmation module that;

receives identifying credentials from the person at a device that is independent from the personal device; and

confirms, at the device independent from the personal device, identity of the person in response to verifying identity of the person based upon the received identifying credentials from the person and the ID detection module verifying that one or more of the detected ID signals are associated with the person; and

an alert module that generates and sends an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person, the alert generated in response to determining that a percentage of the detected ID signals matching ID signals associated with the person does not satisfy a match threshold, the match threshold determined as a function of the number of ID signals that are detected,

wherein said modules comprise one or more of hardware circuits, a programmable hardware device and a processor executing code.

15. The system of claim 14, further comprising:

a hardware processor; and

one or more computer readable storage media in communication with the hardware processor, wherein said modules are stored on the one or more computer readable storage media and execute on the hardware processor,

wherein the database comprises identification information for each person and ID signals associated with each person.