Digital communication biometric authentication

• US 8,533,485 B1
• Filed: 10/13/2005
• Issued: 09/10/2013
• Est. Priority Date: 10/13/2005
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Bansal, Pradeep K., Begeja, Lee, Creswell, Carroll W., Farah, Jeffrey, Stern, Benjamin J., Wilpon, Jay
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): Salehi, Helai
• Application Number:
  US11/248,211
• Time in Patent Office: 2,889 Days
• Field of Search: 382/115, 726/21, 707/10, 380/243, 380/247, 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A biometric authentication system is disclosed that provides authentication capability using biometric data in connection with a challenge for parties engaging in digital communications such as digital text-oriented, interactive digital communications. End-user systems may be coupled to devices that include biometric data capture devices such as retina scanners, fingerprint recorders, cameras, microphones, ear scanners, DNA profilers, etc., so that biometric data of a communicating party may be captured and used for authentication purposes.

Claims

1. A method for authenticating a digital communication, the method comprising:

responsive to detecting a second end user system receiving a first instant message from a first end user system, transmitting, by an authenticating apparatus, a challenge to the first end user system, wherein the challenge requests a user of the first end user system to speak a phrase including a predetermined portion of a second instant message previously exchanged between the first end user system and the second end user system, the predetermined portion of the second instant message including N integer words of the second instant message;

responsive to receiving a challenge response including response data indicative of the user of the first end user system speaking the phrase, sending the response data to a third party service provider for authentication;

after receiving the challenge response, saving the predetermined portion of the second instant message as an entry in a used phrase database; and

receiving an authentication from the third party service provider that the response data matches a template.

2. The method of claim 1, further comprising preventing use of the phrase in subsequent challenges.

3. The method of claim 1, further comprising:

monitoring a usage of the first end user system, wherein the usage is selected from keyboard usage, word usage, grammar usage, and syntax usage; and

wherein the transmitting of the challenge occurs in response to detecting the usage satisfying predetermined criteria.

4. The method of claim 1, wherein the N words of the second instant message include a last N words of the second instant message.

5. The method of claim 1, wherein the second instant message includes a most recent instant message different from the first instant message exchanged between the first end user system and the second end user system.

6. The method of claim 1, wherein the response data includes voice print data indicative of voice characteristics of the user of the first end user system and wherein the authenticating of the user of the first end user system includes authenticating the voice characteristics of the user of the first end user system.

7. The method of claim 6, wherein the authenticating of the user of the first end user system includes matching the phrase with the predetermined portion of the second instant message.

8. A memory storing program instructions, wherein the program instructions, when executed by a processor, perform operations for authenticating an instant messaging session, the operations comprising:

responsive to detecting a second end user system receiving a first instant message from a first end user system, transmitting, by an authenticating apparatus, a challenge to the first end user system, wherein the challenge requests a user of the first end user system to speak a phrase comprising a predetermined portion of a second instant message previously exchanged between the first end user system and the second end user system, the predetermined portion of the second instant message comprising N integer words of the second instant message;

receiving a challenge response including response data indicative of the user of the first end user system speaking the phrase;

after receiving the challenge response, saving the predetermined portion of the second instant message as an entry in a used phrase database; and

sending the response data to a third party service provider for authentication; and

receiving an authentication from the third party service provider that the response data matches a template.

9. The memory of claim 8, wherein the operations include preventing use of the phrase in a subsequent challenge.

10. The memory of claim 8, wherein the operations include:

monitoring usage data from the first end user system wherein the usage data is indicative of a type of usage selected from keyboard usage, word usage, grammar usage, and syntax usage;

wherein the transmitting of the challenge occurs in response to the detecting the usage data satisfying predetermined criteria.

11. The memory of claim 8, wherein the data indicative of the user of the first end user system speaking the phrase includes voice print data indicative of voice characteristics of the user of the first end user system.

12. A system, comprising:

a processor; and

memory storing instructions that when executed cause the processor to perform operations, the operations comprising;

in response to receiving a first instant message from a communicating party, enabling a biometric authentication system to transmit a challenge to the communicating party, wherein the challenge requests the communicating party to speak a phrase including a predetermined portion of a second instant message previously exchanged between the end user system and the communicating party, the predetermined portion of the second instant message comprising N integer words of the second instant message;

receiving a response from the communicating party, wherein the response includes data indicative of the communicating party speaking the phrase including a predetermined portion of the second instant message;

after receiving the response, saving the predetermined portion of the second instant message as an entry in a used phrase database;

sending the response to a third party service provider for authentication; and

receiving an authentication from the third party service provider that the response data matches a template.

13. The system of claim 12, wherein the data indicative of the communicating party speaking the phrase includes voice print data indicative of voice characteristics of the communicating party and wherein the authenticating the communicating party includes authenticating the voice characteristics of the communicating party.