User Authentication System and Method

• US 20090249478A1
• Filed: 03/31/2008
• Published: 10/01/2009
• Est. Priority Date: 03/31/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Plantronics, Inc. (HP Inc.)
• Inventors: Reuss, Edward L., Rosener, Douglas K., Brown, William O.
• Granted Patent: US 9,286,742 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A user authentication system and method are disclosed. The user authentication system includes an authentication device which can be donned and doffed by the user, a sensor to determine whether the authentication device is donned or doffed by the user, and an authentication server to receive information from the sensor and to authenticate the user based on whether the authentication device is donned by the user.

Claims

1. A user authentication system, comprising:

an authentication device which can be donned and doffed by the user;

a sensor coupled to said authentication device to determine whether said authentication device is donned or doffed by the user; and

an authentication server to receive information from said sensor and to authenticate the user based on whether said authentication device is donned by the user.

2. The user authentication system according to claim 1 wherein said authentication server is constructed and arranged to authenticate the user based on whether said authentication device is donned by the user.

3. The user authentication system according to claim 1 wherein said authentication server comprises a computer processor.

4. The user authentication system according to claim 1 wherein said authentication server is constructed and arranged to revoke the authentication of the user based on factors including whether said authentication device is doffed by the user.

5. The user authentication system according to claim 1 wherein said authentication server is constructed and arranged to revoke the authentication of the user when said authentication device is doffed by the user.

6. The user authentication system according to claim 1 wherein said authentication server is coupled to said authentication device.

7. The user authentication system according to claim 1 wherein said authentication server is not coupled to said authentication device.

8. The user authentication system according to claim 1 wherein said authentication device comprises a headset or headphone.

9. The user authentication system according to claim 1, further comprising a motion sensor coupled to said authentication device to determine motion of said authentication device wherein said authentication server receives information from said sensor which determines whether said authentication device is donned or doffed by the user and said motion sensor, and said authentication server authenticates the user based on whether said authentication device is donned by the user and whether said authentication device has been stationary for greater than a predetermined time.

10. A user authentication system, comprising:

a first authentication device;

a second authentication device;

a sensor coupled to said second authentication device to determine the distance between said first authentication device and said second authentication device; and

an authentication server to receive information from said sensor and to authenticate the user based on whether the distance between said first authentication device and said second authentication device is less than a predetermined value.

11. The user authentication system according to claim 10, further comprising a second sensor coupled to said first authentication device to determine whether said first authentication device is donned or doffed by the user, wherein said authentication server receives information from said sensor and said second sensor and authenticates the user based on whether said authentication device is doffed or donned by said user and whether the distance between said first authentication device and said second authentication device is less than a predetermined value.

12. The user authentication system according to claim 11 wherein said authentication server operates to disallow authentication to occur if both said first authentication device and said second authentication device are not donned or the distance between said first authentication device and said second authentication device is not less than a predetermined value.

13. The user authentication system according to claim 10 wherein said first authentication device comprises a headset.

14. The user authentication system according to claim 10 wherein said second authentication device is constructed and arranged to be worn by the user or carried in a garment worn by the user.

15. A method of authenticating a user with a system including an authentication device which can be donned and doffed by the user, the method comprising:

determining whether said authentication device is donned by the user; and

authenticating the user based on whether said authentication device is donned by the user.

16. The method of authenticating a user according to claim 15, further comprising authenticating the user when the authentication device is in contact with the user.

17. The method of authenticating a user according to claim 15, further comprising revoking the authentication of the user based on whether said authentication device is donned by the user.

18. The method of authenticating a user according to claim 15, further comprising revoking the authentication of the user when said authentication device is not in contact with the user.

19. The method of authenticating a user according to claim 15, further comprising revoking the authentication of the user when said authentication device is not in contact with the user and said authentication device has been stationary for greater than a predetermined time.

20. A method of authenticating a user with a system including a first authentication device and a second authentication device, the method comprising:

determining the distance between said first authentication device and said second authentication device; and

authenticating the user based on whether the distance between said first authentication device and said second authentication device is less than a predetermined value.

21. The method of authenticating a user according to claim 20 wherein said first authentication device can be donned and doffed by the user, and the method further comprises:

determining whether said first authentication device is donned by the user; and

authenticating the user based on whether said first authentication device is donned by the user.

22. The method of authenticating a user according to claim 21, further comprising disallowing authentication to occur if both the first authentication device and the second authentication device are not donned or the distance between said first authentication device and said second authentication device is not less than a predetermined value.

23. The method of authenticating a user according to claim 20, further comprising authenticating the user when the first authentication device is in contact with the user.

24. The method of authenticating a user according to claim 20, further comprising revoking the authentication of the user when said first authentication device is doffed by the user.

25. The method of authenticating a user according to claim 20, further comprising revoking the authentication of the user when the first authentication device is not in contact with the user.