CONTINUOUS AUTHENTICATION WITH A MOBILE DEVICE

• US 20150242605A1
• Filed: 10/24/2014
• Published: 08/27/2015
• Est. Priority Date: 02/23/2014
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Du, Eliza Yingzi, Ganti, Suryaprakash, Sezan, Muhammed Ibrahim, Griffiths, Jonathan Charles, Burns, David William, Gupta, Samir
• Application Number:
  US14/523,689
• Publication Number:
  US 20150242605A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/065 Continuous authentication

Abstract

A mobile device may perform continuous authentication with an authenticating entity. The mobile device may include a set of biometric and non-biometric sensors and a processor. The processor may be configured to receive sensor data from the set of sensors, form authentication information from the received sensor data, and continuously update the authentication information.

Claims

1. A mobile device comprising:

a set of biometric and non-biometric sensors; and

a processor configured to;

receive sensor data from the set of sensors;

form authentication information from the received sensor data; and

continuously update the authentication information.

2. The mobile device of claim 1, wherein the updated authentication information includes at least one of a trust coefficient, trust level, trust score, authentication coefficient, authentication level, authentication score, or authentication strength.

3. The mobile device of claim 1, wherein the updated authentication information incorporates predefined security and privacy preference settings.

4. The mobile device of claim 1, wherein the updated authentication information satisfies predefined security and privacy preference settings.

5. The mobile device of claim 3, wherein the predefined security and privacy preference settings include types of user-approved sensor data, biometric sensor information, user data input, or authentication information.

6. The mobile device of claim 3, wherein the processor implements a negotiation function to negotiate conflicting predefined security and privacy preference settings of the mobile device and an authenticating entity to form fused security and privacy preference settings.

7. The mobile device of claim 1, wherein the processor implements an authentication strength function to determine an authentication strength for the received sensor data.

8. The mobile device of claim 7, wherein the processor implements a trust level function to analyze persistency over time to determine a trust level associated with the authentication information.

9. The mobile device of claim 8, wherein the processor implements a trust coefficient calculation function to determine a trust coefficient based upon the authentication strength and the trust level.

10. The mobile device of claim 1, wherein the processor is further configured to transmit the updated authentication information to an authenticating entity in response to an authentication request from the authenticating entity.

11. A method to perform continuous authentication comprising:

receiving sensor data from a set of biometric and non-biometric sensors;

forming authentication information from the received sensor data; and

continuously updating the authentication information.

12. The method of claim 11, wherein the updated authentication information includes at least one of a trust coefficient, trust level, trust score, authentication coefficient, authentication level, authentication score, or authentication strength.

13. The method of claim 11, wherein the updated authentication information incorporates predefined security and privacy preference settings.

14. The method of claim 11, wherein the updated authentication information satisfies predefined security and privacy preference settings.

15. The method of claim 13, wherein the predefined security and privacy preference settings include types of user-approved sensor data, biometric sensor information, user data input, or authentication information.

16. The method of claim 13, further comprising negotiating conflicting predefined security and privacy preference settings of the mobile device and an authenticating entity to form fused security and privacy preference settings.

17. The method of claim 11, further comprising determining an authentication strength for the received sensor data.

18. The method of claim 17, further comprising analyzing persistency over time to determine a trust level associated with the authentication information.

19. The method of claim 18, further comprising determining a trust coefficient based upon the authentication strength and the trust level.

20. The method of claim 11, further comprising transmitting the updated authentication information to an authenticating entity in response to an authentication request from the authenticating entity.

21. A non-transitory computer-readable medium including code that, when executed by a processor, causes the processor to:

receive sensor data from a set of biometric and non-biometric sensors;

form authentication information from the received sensor data; and

continuously update the authentication information.

22. The computer-readable medium of claim 21, wherein the updated authentication information includes at least one of a trust coefficient, trust level, trust score, authentication coefficient, authentication level, authentication score, or authentication strength.

23. The computer-readable medium of claim 21, wherein the updated authentication information incorporates predefined security and privacy preference settings.

24. The computer-readable medium of claim 21, wherein the updated authentication information satisfies predefined security and privacy preference settings.

25. The computer-readable medium of claim 23, wherein the predefined security and privacy preference settings include types of user-approved sensor data, biometric sensor information, user data input, or authentication information.

26. The computer-readable medium of claim 23, further comprising code to negotiate conflicting predefined security and privacy preference settings of the mobile device and an authenticating entity to form fused security and privacy preference settings.

27. The computer-readable medium of claim 21, further comprising code to determine an authentication strength for the received sensor data.

28. The computer-readable medium of claim 27, further comprising code to analyze persistency over time to determine a trust level associated with the authentication information.

29. The computer-readable medium of claim 28, further comprising code to determine a trust coefficient based upon the authentication strength and the trust level.

30. A mobile device comprising:

means for receiving sensor data from a set of biometric and non-biometric sensors;

means for forming authentication information from the received sensor data; and

means for continuously updating the authentication information.