SUBJECT IDENTIFICATION

• US 20090260075A1
• Filed: 03/28/2006
• Published: 10/15/2009
• Est. Priority Date: 03/28/2006
• Status: Abandoned Application

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Gedge, Richard, Turnbull, Rory S.
• Application Number:
  US12/294,254
• Publication Number:
  US 20090260075A1
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

A system for authenticating the identity of a subject comprises: means for receiving information on subject behaviour comprising one or more events, means for allocating confidence levels to the event or events comprised in the received behaviour information and for extracting an overall confidence level on the basis of the allocated confidence level or levels and processing means for deciding on the identity of the subject on the basis of the overall confidence level. The system may include a device for collecting information relating to one or more events forming part of the behaviour of a subject and for providing the information to a separate unit to determine the identity of the subject.

Claims

1. A method for establishing the identity of a subject including the steps of monitoring the behaviour of the subject;

comparing the monitored behaviour with a set of behaviours associated with a known subject; and

assessing the identity of the subject on the basis of the comparison.

2. A method as claimed in claim 1 in which the monitoring step includes monitoring temporal information relating to the monitored behaviour.

3. A system as claimed in claim 1 in which information on subject behaviour comprises spatial information relating to the subject.

4. A method as claimed in claim 1, in which the set of behaviours comprises restricted activities for which the subject has authority.

5. A method as claimed in claim 4, in which the restricted activities comprise access by the subject to a restricted area.

6. A method as claimed in claim 4 in which the restricted activities comprise access by the subject to a restricted resource.

7. A method as claimed in claim 1 in which the behaviour comprises a sequence of behavioural events the method including assessing the identity of the subject based on the sequence of behavioural events.

8. A method as claimed in claim 1 including assessing the identity of the subject based on physical travel constraints.

9. A method as claimed in claim 1, in which assessing the identity of the subject includes establishing a confidence level in the identity of the subject.

10. A method as claimed in an claim 1 including the steps of providing a token to a secure system to inform the secure system of the identity assessed.

11. A method as claimed in claim 10, in which the secure system provides access to the subject to one or more restricted resources in response to receipt of the token.

12. A method as claimed in claim 1 including the step of monitoring the behaviour of the subject over time, analysing the monitored behaviour and establishing a set of typical behaviours for the subject.

13. A method as claimed in claim 1 in which the subject is an object fitted with a tracking device.

14. A method as claimed in claim 1 including the steps of monitoring attempts by the subject to access restricted resources;

detecting a new attempt to access a restricted resource; and

deciding on the basis of previous monitored attempts, whether the new attempt is made by the subject.

15. A method as claimed in claim 1 including the steps of receiving information on a sequence of events comprising records of events making up user behaviour and information on the timing of each event;

assessing the sequence of events to determine if the sequence matches behaviour identifiable with a particular subject.

16. A method as claimed in claim 1, in which the subject behaviour comprises one or more events, the method including the steps of reporting the events to a separate unit for storage and processing.

17. A method as claimed in claim 1 in which the subject behaviour comprises one or more events, the method including the steps of storing information relating to the events on a unit local to the subject and providing the stored information to a separate unit for processing.

18. A method as claimed in claim 1, in which the subject behaviour comprises one or more events, the method including the steps of storing and processing information relating to the events on a unit local to the subject and providing the result of the processing to a separate unit for obtaining access to a restricted resource.

19. A method as claimed in claim 6 in which the or each restricted resource comprises one of a secure geographical location, a secure location within a site or building, a secure communications system, a secure data processing system and a secure data storage system.

20. A method as claimed in claim 19 in which the secure data processing system comprises at least one of a computing device, a computer network, a cash machine and an access system.

38. A computer program or suite of computer programs for use with one or more computers to perform the method steps as set out in claim 1 or to provide any of the apparatus.

39. A carrier medium carrying a computer program or set of computer programs adapted to carry out, when said program or programs is run on a data-processing system, each of the steps of the method of claim 1 or to provide apparatus.

21. A method for validating a request for access to a resource including the steps of monitoring a sequence of behavioural events of a subject;

receiving the request and obtaining the location at which the request is made;

determining the location of the subject; and

assessing the probability that the request was made by the subject.

22. A method as claimed in claim 21 including the steps of comparing the monitored sequence of behavioural events with a set of behaviours associated with a known subject;

assessing the identity of the subject on the basis of the comparison.

23. A method as claimed claim 21 including the step of allocating a confidence level to the result of one or more of the assessing steps.

24. A system for authenticating the identity of a subject comprising:

means for receiving information on subject behaviour;

a store for storing subject behaviour information;

processing means for comparing subject behaviour information received with stored information and for deciding, on the basis of the comparison, on the identity of the subject.

26. A system as claimed in claim 24 in which information on subject behaviour comprises temporal information.

27. A system as claimed in claim 26 in which the temporal information comprises at least one of position in a sequence of events, relative time, time of day, week, month and year.

28. A system as claimed claim 24 in which information on subject behaviour comprises spatial information relating to the subject.

29. A system as claimed in claim 24 in which information on subject behaviour comprises attempts by the subject to access restricted resources.

25. A system for authenticating the identity of a subject, the system comprising:

means for receiving information on subject behaviour comprising one or more events, means for allocating confidence levels to the event or events comprised in the received behaviour information and for extracting an overall confidence level on the basis of the allocated confidence level or levels and processing means for deciding on the identity of the subject on the basis of the overall confidence level.

30. A device for collecting information relating to one or more events forming part of the behaviour of a subject and for providing the information to a separate unit to determine the identity of the subject.

31. A device as claimed in claim 30 comprising a store for storing information relating to sequences of events and means for comparing recently collected information with stored sequence information.

32. A device as claimed in claim 31 comprising means for allocating a confidence level according to the result of the comparison

33. A device as claimed in claim 31 comprising means for providing to the separate unit at least one of the result of the comparison and the confidence level.

34. A device as claimed in claim 30 in which the device is arranged to be transported with the subject.

35. A system for providing access to a restricted resource comprising means for receiving subject behaviour information from a device and for processing the information to determine the identity of the subject and means for deciding whether the identified subject is authorised to access the restricted resource.

36. A system as claimed in claim 35 comprising a store for storing subject behaviour information;

processing means for comparing subject behaviour information received with stored information and for deciding, on the basis of the comparison, on the identity of the subject.

37. A system as claimed in claim 35 in which the device is the device.