Method and system for providing recording device privileges through biometric assessment

• US 8,751,816 B2
• Filed: 10/22/2008
• Issued: 06/10/2014
• Est. Priority Date: 10/22/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Simske, Steven J., Blakley, Daniel R.
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Kusyk, Janusz
• Application Number:
  US13/125,782
• Publication Number:
  US 20110209214A1
• Time in Patent Office: 2,057 Days
• Field of Search: None
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G06V 40/15 Biometric patterns based on physiological signals, e.g. heartbeat, blood flow
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method and system for providing recording device privileges through biometric assessment are disclosed herein. An embodiment of the method includes monitoring information associated with a recording device. The information includes a recording device location, dynamic biometric data, knowledge data, and recording device identification data. From the monitored information, an identity of a then-current user of the recording device is determined. An authorization level for the then-current user is determined, and recording device access privileges are dynamically adjusted based on the determined authorization level.

Claims

1. A method for providing recording device privileges through biometric assessment, the method comprising:

monitoring information associated with a recording device, the monitoring being accomplished with a monitoring device operatively connected with the recording device, the information including a location, dynamic biometric data including physiological data that is monitored over time of a then-current user of the recording device, knowledge data, and recording device identification data;

comparing, by the monitoring device, at least the monitored location information and the monitored physiological data with stored security information and stored physiological data for an initial user of the recording device;

determining, by the monitoring device and from the comparison, a confidence level for the then-current user, the confidence level being a statistically based percentage representing how sure the monitoring device is that the then-current user is the initial user or another authorized user of the recording device;

determining, by the monitoring device, an authorization level from a plurality of authorization levels for the then-current user based upon the determined confidence level; and

dynamically adjusting, by the monitoring device, access to one or more recording device access privileges based on the determined authorization level and the determined confidence level;

wherein at least one authorization level from the plurality of authorization levels grants access to a first recording device access privilege and denies access to a second recording device access privilege.

2. The method as defined in claim 1 wherein prior to monitoring, the method further comprises:

collecting physiological data that is monitored over time from the initial user via the recording device;

by a computer system operatively connected to the recording device, merging and time synchronizing the collected physiological data;

by the computer system, digesting the collected physiological data;

by the computer system, packetizing the digested, collected physiological data with security information, the security information being selected from an initial location of the initial user of the recording device, an initial recording device identification, initial user knowledge data, and combinations thereof;

transmitting the packetized data to the monitoring device operatively connected to the recording device;

by the monitoring device, undigesting the collected physiological data;

by the monitoring device, splitting the undigested, collected physiological data and security information into one of the following categories;

location data, biometric data, knowledge data, or recording device identification data; and

storing the collected physiological data and the security information.

3. The method as defined in claim 1 wherein when the confidence level is insufficient to determine that the then-current user is the initial user or another authorized user, the method further comprises transmitting a new patient-identification eliciting workflow from the monitoring device, the new patient-identification eliciting workflow including at least one of a query for knowledge data from the then-current user or a query for a physiological challenge from the then-current user, and wherein a then-current user response to the respective query is utilized to determine the then-current user identity.

12. The method as defined in claim 1 wherein the monitored and stored physiological data are selected from electrocardiogram data, vectorcardiogram data, heart rate data, heart sound data, blood pressure data, aortic ejection velocity, or combinations thereof.

13. The method as defined in claim 1 wherein the dynamically adjusting includes:

granting access to the first recording device access privilege; and

denying access to the second recording device access privilege.

14. The method as defined in claim 1 wherein the granting or denying, by the monitoring device, further comprises:

granting access to secure information and to use of the recording device when the confidence level ranges from 99% to 100%;

denying at least one of the recording device access privileges when the confidence level ranges from about 80% to about 90%;

or

powering down the recording device when the confidence level is less than 80%.

15. The method as defined in claim 1 wherein the access to the secure information is through a virtual private network (VPN), and when the confidence level is below a given threshold, the method further comprises dropping the virtual private network.

4. A method for providing recording device privileges through biometric assessment, the method comprising:

receiving, at a monitoring device, packetized digested physiological data and security information, the security information being selected from a location of a user of a recording device, a recording device identification, recording device user knowledge, and combinations thereof, and the physiological data being physiological data that is monitored over time;

undigesting the physiological data;

splitting the undigested physiological data and security information into one of the following categories;

location data, biometric data, knowledge data, or recording device identification data;

recognizing, via the monitoring device, that the recording device is in use;

monitoring at least a then-current location and then-current biometric data to determine an identity of a then-current user of the recording device, the then-current biometric data being physiological data that is monitored over time;

comparing the then-current location data, the then-current recording device identification, and the then-current user identity with the undigested physiological data and security information;

from the comparison, determining a statistically based confidence value representative of how sure the monitoring device is that the then-current user is an initial user or another authorized user of the recording device;

determining an authorization level from a plurality of authorization levels for the then-current user based at least on a received recording device identification, the then-current location data and the determined confidence value; and

dynamically adjusting access to one or more recording device access privileges based on the determined authorization level;

wherein at least one authorization level from the plurality of authorization levels grants access to a first recording device access privilege and denies access to a second recording device access privilege.

5. The method as defined in claim 4 wherein when the confidence value is insufficient to determine that the then-current user is the initial user or another authorized user, the method further comprises transmitting a new patient-identification eliciting workflow from the monitoring device, the new patient-identification eliciting workflow including at least one of a query for knowledge data from the then-current user or a query for a physiological challenge from the then-current user, and wherein a then-current user response to the respective query is utilized to determine the then-current user identity.

6. The method as defined in claim 4 wherein prior to receiving the packetized digested physiological data and security information, the method further comprises:

collecting physiological data from the initial user via the recording device;

merging and time synchronizing the collected physiological data;

digesting the collected physiological data; and

packetizing the digested, collected physiological data with the security information.

7. The method as defined in claim 6 wherein digesting the collected physiological data includes at least one of filtering the data, transforming the data, encoding the data, encrypting the data, scrambling the data, extracting critical data from the collected physiological data, compressing the data, or combinations thereof.

8. The method as defined in claim 6, further comprising performing tamper detection monitoring of the recording device prior to packetizing the physiological data with the security information.

9. The method as defined in claim 6 wherein the physiological data is selected from electrocardiogram data, vectorcardiogram data, heart rate data, heart sound data, blood pressure data, aortic ejection velocity, or combinations thereof.

10. A system for providing recording device privileges through biometric assessment, the system comprising:

a recording device, including;

means for receiving location data;

means for receiving dynamic biometric data including physiological data that is monitored over time;

means for receiving knowledge data; and

means for extracting recording device identification data; and

a monitoring device operatively connected to the recording device, the monitoring device configured to;

monitor information including the recording device location, the dynamic biometric data including the physiological data, the knowledge data, and the recording device identification data;

compare at least the monitored location information and the monitored physiological data with stored security information and stored physiological data for an initial user of the recording device;

determine, from the comparison, a confidence level for the then-current user, the confidence level being a statistically based percentage representing how sure the monitoring device is that the then-current user is the initial user or another authorized user of the recording device;

determine an authorization level from a plurality of authorization levels for the then-current user based on the confidence level; and

dynamically adjust access to one or more recording device access privileges based on the determined authorization level and the confidence level;

wherein at least one authorization level from the plurality of authorization levels grants access to a first recording device access privilege and denies access to a second recording device access privilege.

11. The system as defined in claim 10, further comprising:

a computer system operatively connected to the recording device, the computer system configured to;

receive physiological data of the initial user from the recording device;

merge and time synchronize the physiological data;

digest the physiological data;

packetize the digested physiological data with security information, the security information being selected from an initial location of the initial user of the recording device, an initial recording device identification, initial user knowledge data, and combinations thereof; and

transmit the packetized data to the monitoring device.