SYSTEM AND METHOD FOR CONFIRMING LOCATION USING SUPPLEMENTAL SENSOR AND/OR LOCATION DATA

• US 20140289822A1
• Filed: 12/31/2013
• Published: 09/25/2014
• Est. Priority Date: 03/22/2013
• Status: Active Grant

• Current Assignee: Nok Nok Labs Incorporated
• Original Assignee: Nok Nok Labs Incorporated
• Inventors: Wilson, Brendon J.
• Granted Patent: US 9,367,676 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 : using key encryption key
• CPC Class Codes: H04L 9/0841 : involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/3231 : Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/065 : Continuous authentication

Abstract

A system, apparatus, method, and machine readable medium are described for performing authentication using environmental data. For example, one embodiment of a method comprises: collecting environmental sensor data from one or more sensors of a client device; using a geographical location reported by the device to collect supplemental data for the location; comparing the environmental sensor data with the supplemental data to arrive at a correlation score; and responsively selecting one or more authentication techniques for authenticating a user of the client device based on the correlation score.

Claims

1. A method for user authentication comprising:

collecting environmental sensor data from one or more sensors of a client device;

using a geographical location reported by the device to collect supplemental data for the location;

comparing the environmental sensor data with the supplemental data to arrive at a correlation score; and

responsively selecting one or more authentication techniques for authenticating a user of the client device based on the correlation score based on an authentication policy associated with a relying party.

2. The method as in claim 1 wherein the environmental sensor data comprises a temperature reading, a humidity reading, and/or a pressure reading.

3. The method as in claim 2 wherein the supplemental data comprises a current temperature, humidity, and/or pressure associated with the location.

4. The method as in claim 3 wherein the supplemental data is collected from one or more network servers known to include accurate environmental data for the reported location.

5. The method as in claim 3 wherein the supplemental data is collected from one or more other client devices known to be at the reported location or within a specified distance from the reported location.

6. The method as in claim 3 wherein the supplemental data includes historical data related to the location.

7. The method as in claim 1 wherein comparing comprises determining differences between the supplemental data and the environmental sensor data.

8. The method as in claim 7 wherein for relatively greater differences, relatively lower correlation scores are generated and for relatively smaller differences, relatively higher correlation scores are generated.

9. The method as in claim 1 wherein more rigorous authentication techniques are selected for relatively lower correlation scores and less rigorous authentication techniques are selected for relatively higher correlation scores.

10. The method as in claim 1 wherein for correlation scores below a specified threshold, one or more explicit user authentication techniques are required.

11. The method as in claim 10 wherein the explicit user authentication techniques include manual user PIN entry, fingerprint authentication, voice authentication, facial authentication, and/or retinal scan authentication.

12. The method as in claim 1 wherein for correlation scores above a specified threshold, one or more non-intrusive user authentication techniques are implemented.

13. The method as in claim 12 wherein one of the non-intrusive techniques comprises collecting data from one or more sensors to detect known behavior of the end user.

14. The method as in claim 13 wherein the known behavior of the end user comprises the end user'"'"'s gait.

15. A system for user authentication comprising:

one or more environmental sensors on a client device providing environmental sensor data;

a supplemental data collection module to collect supplemental data using a geographical location reported by the client device;

a supplemental data correlation module comparing the environmental sensor data with the supplemental data to arrive at a correlation score; and

an authentication policy module responsively selecting one or more authentication techniques for authenticating a user of the client device based on the correlation score based on an authentication policy associated with a relying party.

16. The system as in claim 15 wherein the environmental sensors comprise a temperature sensor, a humidity sensor and/or a pressure sensor and wherein the sensor data comprises a temperature reading, a humidity reading, and/or a pressure reading.

17. The system as in claim 16 wherein the supplemental data comprises a current temperature, humidity, and/or pressure associated with the location.

18. The system as in claim 17 wherein the supplemental data is collected from one or more network servers known to include accurate environmental data for the reported location.

19. The system as in claim 17 wherein the supplemental data is collected from one or more other client devices known to be at the reported location or within a specified distance from the reported location.

20. The system as in claim 17 wherein the supplemental data includes historical data related to the location.

21. The system as in claim 15 wherein comparing comprises determining differences between the supplemental data and the environmental sensor data.

22. The system as in claim 21 wherein for relatively greater differences, relatively lower correlation scores are generated and for relatively smaller differences, relatively higher correlation scores are generated.

23. The system as in claim 15 wherein more rigorous authentication techniques are selected for relatively lower correlation scores and less rigorous authentication techniques are selected for relatively higher correlation scores.

24. The system as in claim 15 wherein for correlation scores below a specified threshold, one or more explicit user authentication techniques are required.

25. The system as in claim 24 wherein the explicit user authentication techniques include manual user PIN entry, fingerprint authentication, voice authentication, facial authentication, and/or retinal scan authentication.

26. The system as in claim 15 wherein for correlation scores above a specified threshold, one or more non-intrusive user authentication techniques are implemented.

27. The system as in claim 26 wherein one of the non-intrusive techniques comprises collecting data from one or more sensors to detect known behavior of the end user.

28. The system as in claim 27 wherein the known behavior of the end user comprises the end user'"'"'s gait.