METHOD AND DEVICE FOR MANAGING AUTHENTICATION USING AN IDENTITY AVATAR

• US 20160048667A1
• Filed: 08/12/2014
• Published: 02/18/2016
• Est. Priority Date: 08/12/2014
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Kao, Frank
• Granted Patent: US 10,032,011 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Aspects of the subject disclosure may include, for example, generating a digital certificate responsive to an authentication of a user according to a dynamic biometric process, associating the digital certificate with a transaction record for the transaction, storing information associated with authentication conditions of the dynamic biometric process, receiving an access request associated with the transaction, and providing access to the transaction record, the information associated with the authentication conditions of the dynamic biometric process or a combination thereof responsive to the access request, where granting of the access is according to transmitting an access acknowledgement to equipment of the user, or obtaining another authentication to allow permission to access or a combination thereof. Other embodiments are disclosed.

Claims

1. A method, comprising:

storing, by a system including a processor, a voice print model for a user, the voice print model generated based on recording a first set of words spoken by the user;

receiving, by the system, a designation of a communication device of the user;

providing, by the system, a request for the user to speak a second set of words via the communication device responsive to detecting a transaction associated with the user;

receiving, by the system, user input representative of the second set of words via the communication device;

performing, by the system, a voice analysis by comparing the user input with the voice print model for authentication of the user;

generating, by the system, a digital certificate responsive to the authentication;

associating, by the system, the digital certificate with a transaction record for the transaction;

storing, by the system, information associated with authentication conditions; and

providing, by the system, access to the information associated with the authentication conditions via the digital certificate,

wherein the access is according to transmitting an access or permission acknowledgement to equipment of the user, obtaining another authentication or a combination thereof.

2. The method of claim 1, wherein the information associated with the authentication conditions includes time information associated with the receiving of the user input, identification information associated with a second communication device of the user being utilized for the transaction, and location information associated with the communication device when the user input was received.

3. The method of claim 2, wherein the first set of words forms a first set of sentences, wherein the second set of words forms a second set of sentences, wherein the first and second set of sentences are different, and wherein a non-static biometric data verification technique is used to embed the digital certificate with the transaction record.

4. The method of claim 1, comprising:

providing an expiration timer with the digital certificate, wherein access to the transaction record is limited to a time period associated with the expiration timer.

5. The method of claim 1, wherein the other authentication comprises a dynamic biometric authentication, and further comprising storing an access methodology for the transaction record, wherein an access record is generated according to selective access provided via the digital certificate.

6. The method of claim 1, comprising:

providing a request for the user to speak the first set of words, wherein the transaction associated with the user is performed using a communication session established with a second communication device of the user.

7. The method of claim 1, wherein the transaction is a purchase of a product or service, and wherein the digital certificate includes a link for accessing the information associated with the transaction and the authentication conditions, wherein the link causes a call to equipment of the user to acknowledge the accessing or to gain permission to at least some of the information.

8. A machine-readable storage medium, comprising executable instructions that, when executed by a server, facilitate performance of operations, comprising:

generating a digital certificate responsive to an authentication of a user according to a dynamic biometric process;

associating the digital certificate with a transaction record for the transaction;

storing information associated with authentication conditions of the dynamic biometric process;

receiving an access request associated with the transaction; and

providing access to the transaction record, the information associated with the authentication conditions of the dynamic biometric process or a combination thereof responsive to the access request,

wherein granting of the access is according to transmitting an access acknowledgement to equipment of the user, or obtaining another authentication to allow permission to access or a combination thereof.

9. The machine-readable storage medium of claim 8, wherein the dynamic biometric process comprises:

providing a request for first user input to enable generating a biometric model for the user;

storing the biometric model;

obtaining a designation of a communication device of the user;

detecting a transaction associated with the user;

providing a request for the user to provide second user input via the communication device responsive to the detecting of the transaction;

receiving the second user input via the communication device;

performing a biometric analysis by comparing the second user input with the biometric model for the authentication of the user;

wherein the first user input comprises a first set of words spoken by the user, wherein the second user input comprises a second set of words spoken by the user, wherein the biometric model comprises a voice print model, and wherein the biometric analysis comprises a voice analysis.

10. The machine-readable storage medium of claim 9, wherein the first user input comprises a first sentence, wherein the second user input comprises a second sentence, and wherein the first and second sentences are different.

11. The machine-readable storage medium of claim 9, wherein the information associated with the authentication conditions of the dynamic biometric process includes time information associated with the receiving of the second user input, identification information associated with a second communication device of the user being utilized for the transaction, location information associated with the communication device when the second user input was received and document access requirements.

12. The machine-readable storage medium of claim 8, wherein the associating of the digital certificate with the transaction record comprises combining the digital certificate with the transaction record.

13. The machine-readable storage medium of claim 8, wherein the transaction is a purchase of a product or service, and wherein the digital certificate includes a link for accessing the information associated with the authentication conditions of the dynamic biometric process.

14. The machine-readable storage medium of claim 8, comprising:

providing an expiration timer with the digital certificate, wherein access to the transaction record is limited to a time period associated with the expiration timer.

15. A communication device, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

receiving, from a server, a prompt for first user input to enable the server to generate and store a voice print model for a user, wherein the prompt is for a first set of words to be spoken by the user;

receiving the first user input;

providing the first user input to the server;

engaging in a communication session for a transaction associated with the user, wherein the engaging in the communication session causes the server to provide a request for the user to provide second user input via a second communication device, wherein the second user input comprises a second set of words spoken by the user, and wherein the engaging in the communication session causes the server to perform a voice analysis by comparing the second user input with the voice print model for authentication of the user; and

receiving access to a transaction record for the transaction, wherein the transaction record includes a digital certificate generated by the server responsive to the authentication, and wherein the digital certificate enables selective access to the transaction record, information associated with authentication conditions for the transaction record or a combination thereof, wherein the selective access is according to transmitting an access acknowledgement to equipment of the user, obtaining another authentication or a combination thereof.

16. The communication device of claim 15, wherein the operations further comprise providing, to the server, a designation of the second communication device of the user for use with authentication of transactions of the user.

17. The communication device of claim 15, wherein the information associated with the authentication conditions for the transaction record include time information for when the server received the second user input, identification information associated with the communication device, and location information associated with the second communication device when the second user input was received.

18. The communication device of claim 15, wherein the digital certificate includes a timer, and wherein access to the transaction record is limited to a time period associated with the timer.

19. The communication device of claim 15, wherein the transaction is a purchase of a product or service, and wherein the digital certificate includes a link for accessing the information associated with the authentication conditions for the transaction record.

20. The communication device of claim 15, wherein the first set of words comprises a first sentence, wherein the second set of words comprises a second sentence, wherein the first and second sentences are different, and wherein the second communication device is a mobile phone of the user.