USING PERSONAL RF SIGNATURE FOR ENHANCED AUTHENTICATION METRIC

• US 20170126648A1
• Filed: 10/28/2015
• Published: 05/04/2017
• Est. Priority Date: 10/28/2015
• Status: Active Grant

• Current Assignee: Lenovo Global Technologies International Ltd. (Lenovo Group Ltd.)
• Original Assignee: Lenovo Enterprise Solutions (Singapore) Pte., Ltd. (Lenovo Group Ltd.)
• Inventors: BOND, DAVID E., Diaz, Joel D.
• Granted Patent: US 10,230,706 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for verifying identity includes associating with a person, one or more ID signals emitted by a personal device. The method includes detecting one or more ID signals, and confirming identity of the person in response to verifying identity of the person based upon identifying credentials from the person and verifying that one or more of the detected ID signals are associated with the person.

Claims

1. A method comprising:

associating with a person, one or more identification (“

ID”

) signals emitted by a personal device;

detecting one or more ID signals; and

confirming identity of the person in response to verifying identity of the person based upon identifying credentials from the person and verifying that one or more of the detected ID signals are associated with the person.

2. The method of claim 1, further comprising generating and sending an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person.

3. The method of claim 2, further comprising, in response to receiving the alert, one or more of:

denying entry of the person when the identifying credentials comprise a request for entry;

declining a financial transaction when the identifying credentials comprise a request to approve a financial transaction; and

maintaining a lock in a locked state when the identifying credentials comprise a request to open the lock.

4. The method of claim 2, wherein generating the alert in response to one or more of the detected ID signals not matching the ID signals associated with the person further comprises generating the alert in response to one or more of:

one or more of the detected ID signals being associated with a different person; and

determining if a percentage of the detected ID signals matching ID signals associated with the person is above a match threshold.

5. The method of claim 1, wherein an ID signal of the one or more ID signals comprises a wireless transmission with a unique identifier that differs from other identifiers transmitted wirelessly.

6. The method of claim 1, wherein the ID signal comprises one or more of a radio frequency identification (“

RFID”

) signal, an identification signal transmitted using a near field communication protocol, an identification signal transmitted using a short distance data exchange protocol, and an identifier transmitted over a Wi-Fi network.

7. The method of claim 1, wherein the one or more ID signals are transmitted from one or more of:

an ID transmitter in a vehicle of the person;

an ID transmitter in a key fob of the person;

an ID transmitter in an electronic device attached to the person;

an ID transmitter in an access card;

an ID transmitter in a portable electronic device;

an ID transmitter in a portable communication device of the person;

an ID transmitter in a credit card;

an ID transmitter in a debit card; and

an ID transmitter in a card issued by a vendor.

8. The method of claim 1, wherein associating one or more ID signals with a person comprises storing the one or more ID signals in a database entry along with identifying credentials of the person.

9. The method of claim 1, wherein associating one or more ID signals with a person comprises an action by the person to register the ID signals.

10. The method of claim 1, wherein associating one or more ID signals with a person comprises an action by a party without an action by the person.

11. The method of claim 1, wherein associating one or more ID signals with a person further comprises:

detecting one or more ID signals;

determining that the one or more detected ID signals are not currently associated with the person; and

associating the one or more detected ID signals with the person.

12. The method of claim 1, wherein the identifying credentials of the person comprise one of:

an ID signal in addition to the one or more detected ID signals with the person;

a wireless request;

a keypad entry;

a retina scan;

a scan from a fingerprint reader;

a scan from a magnetic stripe reader;

a body scan of the person;

an image of the person; and

insertion of a key in a lock.

13. An apparatus comprising:

an association module that associates, with a person one or more ID signals by a personal device;

an ID detection module that detects one or more ID signals; and

a confirmation module that confirms identify of the person in response to verifying identity of the person based upon identifying credentials from the person and the ID detection module verifying that one or more of the detected ID signals are associated with the person.

14. The apparatus of claim 13, further comprising an alert module that generates and sends an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person.

15. The apparatus of claim 14, further comprising a denial module that, in response to receiving the alert, one or more of:

denies entry of the person when the identifying credentials of the person comprise a request for entry;

declines a financial transaction when the identifying credentials of the person comprise a request to approve a financial transaction; and

maintains a lock in a locked state when the identifying credentials of the person comprise a request to open the lock.

16. The apparatus of claim 14, wherein generating the alert in response to one or more of the detected ID signals not matching the ID signals associated with the person further comprises generating the alert in response to one or more of:

one or more of the detected ID signals being associated with a different person; and

a match threshold module that determines if a percentage of the detected ID signals matching ID signals associated with the person is above a match threshold.

17. The apparatus of claim 13, wherein the association module associating one or more ID signals with a person further comprises:

the ID detection module detecting one or more ID signals by a personal device and determining that the one or more detected ID signals are not currently associated with the person; and

the association module associating the one or more detected ID signals with the person.

18. The apparatus of claim 13, wherein the confirmation module confirms identify by verifying identity of the person based upon identifying credentials further comprises:

verifying that an ID signal in addition to the one or more detected ID signals is associated with the person;

processing a wireless request and verifying that an identification signal in the wireless request corresponds to the person;

verifying that a keypad entry matches a stored code;

verifying that a retina scan matches a retina scan of the person;

verifying that a scan from a fingerprint reader matches a fingerprint of the person;

verifying that a scan from a magnetic stripe reader is valid;

verifying that a body scan of the person includes elements that match identifying characteristics of the person;

verifying that an image of the person matches a stored image of the person; and

allowing tumblers in a lock to unlock a lock in response to insertion of a key in a lock and turning the key in the lock.

19. A system comprising:

one or more signal sensors;

an ID receiver;

an association module that associates, with a person one or more ID signals by a personal device;

an ID detection module that detects, using the one or more signal sensors, one or more ID signals;

a confirmation module that confirms identify of the person in response to verifying identity of the person based upon identifying credentials from the person via the ID receiver and verifying that one or more of the detected ID signals are associated with the person; and

an alert module that generates and sends an alert in response to one or more of the detected ID signals not matching the ID signals associated with the person.

20. The system of claim 19, further comprising:

a hardware processor;

one or more computer readable storage media in communication with the hardware processor, wherein said modules are stored on the one or more computer readable storage media and execute on the hardware processor; and

a database comprising identification information for each person and ID signals associated with each person.