Wearable User Device for Use in a User Authentication System

• US 20160253487A1
• Filed: 02/27/2015
• Published: 09/01/2016
• Est. Priority Date: 02/27/2015
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Plantronics, Inc.
• Inventors: Sarkar, Shantanu, Johnston, Timothy P., Bran, Cary, Burton, Joe
• Granted Patent: US 10,187,364 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

A wearable user device is provided, which can be donned and doffed by a user, and which is configured for use in a user authentication system. To enhance the security of a user authentication, the wearable user device comprises a detector device to detect a donned or doffed condition of said wearable user device; and an alert processing module, connected with said detector device. The alert processing module is configured to determine whether said wearable user device is doffed forcefully, and if said wearable user device is doffed forcefully, to transmit an authentication exception corresponding to a forceful doffed condition to an authentication server.

Claims

1. A wearable user device, which can be donned and doffed by a user, and for use in a user authentication system, comprising:

a detector device to detect a donned or doffed condition of said wearable user device; and

an alert processing module, connected with said detector device, wherein

said alert processing module is configured to determine whether said wearable user device is doffed forcefully, and if said wearable user device is doffed forcefully, to transmit an authentication exception corresponding to a forceful doffed condition to an authentication server.

2. The wearable user device according to claim 1, wherein said alert processing module is configured to

determine a doffed condition of said wearable user device from said detector device;

and

upon determination of said doffed condition, determine whether said wearable user device is doffed forcefully.

3. The wearable user device according to claim 1, wherein said alert processing module is configured to, in case said wearable user device is not doffed forcefully, transmit said authentication exception to said authentication server in case a doffed condition is determined for a time, greater than a predefined grace time.

4. The wearable user device according to claim 3, wherein said alert processing module is configured to, in case a doffed condition is determined and said wearable user device is not doffed forcefully, provide a notification message to a user.

5. The wearable user device according to claim 4, further comprising a user interface, wherein said alert processing module is configured to transmit said notification message to said user interface.

6. The wearable user device according to claim 4, wherein said alert processing module is configured to transmit said notification message to a further user device.

7. The wearable user device according to claim 1, further comprising a second detector device for detecting a forceful doffing of said wearable user device, said second detector device being connected with said alert processing module.

8. The wearable user device according to claim 7, wherein said second detector device comprises an accelerometer sensor and said alert processing module being configured to determine that said wearable user device is doffed forcefully when a detected acceleration value corresponds to a predefined acceleration threshold value.

9. The wearable user device according to claim 7, wherein said second detector device comprises a sensor for providing a force value and said alert processing module being configured to determine that said wearable user device is doffed forcefully when the detected force value corresponds to a predefined force threshold value.

10. The wearable user device according to claim 7, wherein said second detector device comprises a proximity sensor and said alert processing module being configured to determine that said wearable user device is doffed forcefully when a detected device removal speed value corresponds to a predefined removal speed threshold value.

11. The wearable user device according to claim 7, wherein said second detector device comprises a don/doff sensor to detect a donned or doffed condition of said wearable user device, arranged spaced from the detector device, and said alert processing module being configured to determine that said wearable user device is doffed forcefully by comparing the time of detection of the doffed condition of the detector device with the time of detection of the doffed condition of the second detector device.

12. The wearable user device according to claim 7, further comprising a latching device to removably secure said wearable user device to a body part of the user or to apparel, wherein said second detector device comprises a latch sensor to detect an unengaged state and an engaged state of said latching device.

13. The wearable user device according to claim 12, wherein said alert processing module being configured to determine that said wearable user device is doffed forcefully when said doffed condition is determined and said engaged state of said latching device is determined simultaneously.

14. The wearable user device according to claim 7, wherein said second detector device comprises multiple sensors of the group of sensors consisting of:

an accelerometer sensor, a sensor for determining force, a proximity sensor, a don/doff sensor, and a latch sensor; and

said alert processing module is configured to determine whether said wearable user device is doffed forcefully from multiple of said sensors.

15. The wearable user device according to claim 1, further comprising a training module, connected at least with said detector device and being configured to generate user I/O pattern data comprising don and doff characteristics and to transmit said user I/O pattern data to a user behavior database.

16. A user authentication system with at least an authentication server and a wearable user device, which can be donned and doffed by a user, wherein said wearable user device comprises

a detector device to detect a donned or doffed condition of said wearable user device;

and

an alert processing module, connected with said detector device;

wherein said alert processing module is configured to determine whether said wearable user device is doffed forcefully, and if said wearable user device is doffed forcefully, to transmit an authentication exception, corresponding to a forceful doffed condition, to said authentication server; and

said authentication server is configured to authenticate the user based on whether said authentication exception is received.

17. The user authentication system according to claim 16, wherein said authentication server is configured to revoke an authentication of the user when said authentication exception is received.

18. The user authentication system according to claim 16, wherein

said authentication system is a probability-based user authentication system;

said authentication server comprises an authentication probability evaluation module for receiving an authentication request comprising at least user identification data from an authenticator;

said alert processing module is configured to transmit said authentication exception to said authentication probability evaluation module;

said authentication exception additionally comprises exception user identification data; and

said authentication probability evaluation module is configured upon reception of said authentication request to

determine, whether said user identification data of said authentication request corresponds to exception user identification data of a received authentication exception; and

if said user identification data of said authentication request corresponds to said exception user identification data, to reject said authentication request.

19. A method of providing an authentication exception from a wearable user device, which can be donned and doffed by a user, wherein it is determined whether said wearable user device is doffed forcefully, and if said wearable user device is doffed forcefully, an authentication exception corresponding to a forceful doffed condition is transmitted to an authentication server.

20. A computer-readable medium including contents that are configured to cause a wearable user device to conduct the method of claim 19.