Multi-factor and multi-mode biometric physical access control device

• US 10,305,895 B2
• Filed: 04/14/2016
• Issued: 05/28/2019
• Est. Priority Date: 04/14/2015
• Status: Active Grant

• Current Assignee: BluB0X Security, Inc.
• Original Assignee: Blubox Security, Inc.
• Inventors: Barry, Patrick J., Barry, Patrick E., Cusack, Francis J., Haering, Niels Christian, Barrios, Luciano Eloy
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Murphy, J. Brant
• Application Number:
  US15/098,802
• Publication Number:
  US 20160308859A1
• Time in Patent Office: 1,139 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 10/145 Illumination specially adapted for pattern recognition, e.g. using gratings
• CPC Class Codes: G06V 2201/121 using special illumination
• CPC Class Codes: G06V 40/172 Classification, e.g. identification
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 9/00 Individual registration on entry or exit
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Provided are a device, system, and method for multi-factor multi-biometric access control that authenticate a user based on at least one of what the user knows, what the user possesses and what unique physical, biological and physiological or biometric traits the user has, wherein the device includes a single sensor from which multi-biometric data is derived.

Claims

1. A multi-factor multi-biometric access control device, comprising:

at least one hardware processor;

a memory device coupled to the at least one hardware processor;

a sensor in communication with the at least one hardware processor, and that collects multiple and dissimilar-biometric signal data from a user;

a computer readable storage device coupled to the at least one hardware processor, wherein the storage device contains program code executable by the at least one hardware processor via the memory device, wherein the at least one hardware processor further;

extracts from the multiple and dissimilar-biometric signal data at least two dissimilar biometric signals related to a combination of at least two or more of a voice, speech, appearance, size, color, behavior, and physiology of the user;

fuses the dissimilar biometric signals to generate at least one characteristic vector;

compares the generated at least one characteristic vector with at least one stored preexisting model of characteristic vectors to produce a biometric match result for authenticating the user;

analyzes the dissimilar biometric signals to determine a biometric authentication by at least one of locally comparing the biometric signals to those stored on the device or passing biometric signals from the device to a remote host for a remote biometric signal comparison;

in response to the biometric match result having a strength that is greater than a predetermined threshold, authenticates according to the biometric authentication; and

in response to the biometric match result having a strength that is less than a predetermined threshold, authenticates the user and according to a multi-factor authentication that includes a combination of the biometric authentication and at least one other factor selected from a group consisting of a possession authentication, a knowledge authentication, and another form of authentication based on at least one of what the user knows, what the user possesses or what unique physical, biological and physiological traits the user has, the access control device further comprising;

a display; and

a network communication device that exchanges at least one of data, commands or configurations with a remote resource before, during or after authentication.

2. Device of claim 1 wherein the at least one hardware processor is further configured to authenticate the user by who the user is in response to at least one of a remote command and in response to analysis of one or more of the authentication solutions collected and as a result of analysis of other data originating within the access control device.

3. Device of claim 1, further comprising a light source that directs light at the user'"'"'s face that originates with at least one of the display, a dedicated illumination source integral to the device, and a decoupled illumination source.

4. Device of claim 3, wherein an illumination projected by the light source on to the user may make use of at least one of directional and spectral and spatial and frequency control of light.

5. Device of claim 4, wherein the sensor further comprises a camera, wherein the light source works in cooperation with the camera to at least one of derive three dimensional data of the area proximal to the user and produce three dimensional data of the user'"'"'s face for subsequent analysis.

6. Device of claim 3, wherein the illumination source employed is actuated by means of at least one of synchronized to at least one frame rate, and triggered by the sensor, and triggered in response to analysis of the user'"'"'s face image data.

7. Device of claim 6 wherein the light source illuminates the user in a manner designed to at least one of induce a retro-reflection from the user'"'"'s eye and induce a physical involuntary response to the projected illumination.

8. Device of claim 6, further comprising:

a message board that conveys information that includes at least one of health and safety alarm notification and feedback to assist a user through an access process; and

an access control reader to also serve as an alarm node for health and safety.

9. Device of claim 8, wherein the information includes a combination of messages, floor plans, time and weather.

10. Device of claim 8, wherein after authentication the message board conveys messages to the user, wherein a message is tailored to the user after the user'"'"'s identity has been established.

11. Device of claim 8, further conveying messages on display prior to recognition, customized during recognition, and customized as a result of recognition.

12. Device of claim 1 wherein the device includes a video intercom permitting a user proximal to the device and another remote person to at least one of see and hear and exchange at least one of visual and audible information with each other.

13. Device of claim 1, wherein the device accepts enrollment data from a remote device that issues the user with at least one of a unique knowledge based passkey and a unique possession based pass key and user biometric data so that a user may be pre-authorized to use the device for at least one of authentication or video intercom to gain access through a controlled portal or area.

14. Device of claim 1 wherein the device continuously surveils the area proximal to the controlled area by at least one of collecting and analyzing and storing and transferring at least one of images and video and audio data and metadata.

15. Device of claim 1 wherein the device provides authentication for logical access control and other authentication purposes.

16. Device of claim 1, wherein the device produces an image of a face of the user who requests access by means of at least one of reconstructing biometric data to form a recognizable likeness of the user and capturing an image of the user.

17. Device of claim 1, wherein the device includes a physical access control controller, and following user authentication determines user authorization to pass on to a controlled area.

18. Device of claim 1 further comprising:

the multi-factor multi-biometric access control device gathering all available authentication information from all available instances of the device;

using the gathered information to build long-term, multi-device models of authenticated subjects;

using the models to detect and report events including at least one of;

changing of user appearance;

unauthorized access attempts;

or

behavior and physiology of subjects; and

controlling other lighting, actuating, or sensor devices in communication with the multi-factor multi-biometric access control device.

19. A method of automated multi-biometric multi-factor (MBMF) identification from a single device, wherein at least two biometric signals of voice, appearance, size, color, behavioral, and physiological aspects are combined, the method further comprising:

collecting multiple and dissimilar-biometric signal data from a user;

extracting from the multiple and dissimilar-biometric signal data at least two dissimilar biometric signals related to a combination of at least two or more of a voice, speech, appearance, size, color, behavior, and physiology of the user;

fusing the dissimilar biometric signals to generate at least one characteristic vector;

comparing the generated at least one characteristic vector with at least one stored preexisting model of characteristic vectors to produce a biometric match result for authenticating the user;

analyzing the dissimilar biometric signals to determine a biometric authentication by at least one of locally comparing the biometric signals to those stored on the device or passing biometric signals from the device to a remote host for a remote biometric signal comparison;

in response to the biometric match result having a strength that is greater than a predetermined threshold, authenticating according to the biometric authentication; and

in response to the biometric match result having a strength that is less than a predetermined threshold, authenticating the user according to a multi-factor authentication that includes a combination of the biometric authentication and at least one other factor selected from a group consisting of a possession authentication, a knowledge authentication, and another form of authentication based on at least one of what the user knows, what the user possesses or what unique physical, biological and physiological traits the user has.

20. The method of claim 19, further comprising disseminating information about the authentication including, but not limited to, at least one of:

a subject identifier;

a subset of the multiple biometric data and derived characteristic vectors;

a human recognizable likeness of said subject;

a description of the date, time, location, duration, and/or strength of the authentication; and

a mobile device carried by the subject.

21. The method of claim 19, further comprising collecting, analyzing and exploiting data collected from historical access attempts to maintain and improve technical performance.