Apparatus and method of tiered authentication

• US 20070143825A1
• Filed: 12/21/2005
• Published: 06/21/2007
• Est. Priority Date: 12/21/2005
• Status: Abandoned Application

• Current Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Goffin, Glen
• Application Number:
  US11/313,375
• Publication Number:
  US 20070143825A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A system and method of authenticating a user is thereby disclosed, comprising providing a plurality of authentication schemes for authenticating a user on a device, each of the plurality of authentication schemes having a varying level of security associated therewith, providing access to a plurality of services to the user through use of the device, each of the plurality of services having a level of information sensitivity associated therewith, associating each of the plurality of services with one of the plurality of authentication schemes, and permitting access of the user to the service associated once a user has properly been authenticated using the corresponding authentication scheme.

Claims

1. A method of authenticating a user comprising:

providing a plurality of authentication schemes for authenticating a user on a device, each of the plurality of authentication schemes having a varying level of security associated therewith;

providing a plurality of services to the user through use of the device, each of the plurality of services having a level of information sensitivity associated therewith;

associating each of the plurality of services with one or more of the plurality of authentication schemes; and

providing access to the user of the service associated once a user has properly been authenticated using the corresponding authentication scheme.

2. The method of claim 1 wherein the device is a videophone.

3. The method of claim 1 wherein the device is a personal computer.

4. The method of claim 1 wherein services comprise information.

5. The method of claim 1 wherein services comprise contact information, financial information, credit card information, passwords, email access, or network permissions.

6. The method of claim 1 wherein one of the plurality of authentication schemes is biometric.

7. The method of claim 1 wherein one of the plurality of authentication schemes comprises image recognition, fingerprint recognition, voice recognition, or password entry.

9. The method of claim 1 wherein the device is a videophone.

10. The method of claim 1 wherein the device is a personal computer.

11. The method of claim 1 wherein services comprise contact information, financial information, credit card information, passwords, email access, or network permissions.

12. The method of claim 1 wherein one of the plurality of authentication schemes is biometric.

13. The method of claim 1 wherein one of the plurality of authentication schemes comprises image recognition, fingerprint recognition, voice identification, or password entry.

8. A method of tiered authentication comprising:

providing a plurality of services which are accessible by a user on a device, each of the plurality of services having a varying permission level;

providing a plurality of authentication schemes through which the user may be authenticated and providing access to at least one of the plurality of services;

categorizing each of the plurality of services with at least one authentication scheme, the level of security of the authentication scheme corresponding to the permission level of the service.

14. A method of tiered authentication comprising:

providing a plurality of services which are accessible by a user on a device, the plurality of services being further divided into at least two tiers of services, the at least two tiers of services differing in terms of sensitivity of information;

providing a first level of authentication, the first level of authentication utilizing a first method of authentication to provide access to a user of a first tier of services on the device; and

providing a second level of authentication, the second level of authentication utilizing a second method of authentication, the second method of authentication being distinct from the first method of authentication, the second level of authentication used to provide access to a user of a second tier of services.

15. The method of claim 14 wherein the second level of authentication is used only after the first level of authentication has been granted.

16. The method of claim 14 wherein the second tier of services provides access to information more sensitive than the first tier of services.

17. The method of claim 14 wherein the second tier of services includes the first tier of services.

18. The method of claim 14 wherein the device is a video phone.

19. The method of claim 14 wherein the device is a personal computer.

20. The method of claim 14 wherein the first level of authentication comprises image recognition, and the second level of authentication comprises password entry.