User authentication apparatus and method thereof

• US 8,832,791 B2
• Filed: 02/19/2013
• Issued: 09/09/2014
• Est. Priority Date: 07/04/2008
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Yang, Pil-seung
• Primary Examiner(s): Yalew, Fikremariam A
• Application Number:
  US13/770,402
• Publication Number:
  US 20130160078A1
• Time in Patent Office: 567 Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

A user authentication apparatus includes an information collection unit which collects user information from a plurality of personal devices of a user within a predetermined distance, and a control unit which identifies the user as a user corresponding to the collected information based on the amount of user information collected. Accordingly, user authentication can be easily performed using devices of a user, resulting in increased user convenience.

Claims

1. A user authentication apparatus, comprising:

an information collection unit which collects authentication information from a plurality of devices associated with a user, the collected authentication information including user information and device identification information; and

a control unit which verifies whether each of the plurality of devices, based on the collected authentication information, is registered for the user, and determines whether an amount of information collected from the plurality of devices verified by the control unit is larger than a predetermined amount of information and whether the plurality of devices include a device predetermined to be indispensible for user authentication,

wherein the control unit authenticates the user if it is determined that the amount of information collected from the plurality of devices verified by the control unit is larger than the predetermined amount of information and the plurality of devices include the device predetermined to be indispensible for user authentication.

2. The user authentication apparatus of claim 1, wherein the amount of information collected from the plurality of devices comprises a number of devices.

3. The user authentication apparatus according to claim 1,

wherein the information collection unit collects the information using at least one of radio frequency identification (RFID), Bluetooth, and Zigbee.

4. The user authentication apparatus according to claim 1,

wherein the user authentication information includes the same information on the user which the plurality of devices share in common, or information on the user which the plurality of devices have individually.

5. The user authentication apparatus according to claim 1,

wherein the information collection unit automatically collects the information from the plurality of devices within a detectable coverage area of the user authentication apparatus.

6. The user authentication apparatus according to claim 1,

wherein the control unit applies a weight to the amount of corresponding information according to characteristics of a device from which the information is collected.

7. The user authentication apparatus according to claim 1, further

comprising a user interface unit which requests additional information if the amount of information collected is not larger than the predetermined amount of information.

8. The user authentication apparatus according to claim 1, further comprising a storage unit which stores user authentication information representing whether or not there are authentications for each user,

wherein the control unit performs user authentication by identifying the user authentication information corresponding to the identified user.

9. The user authentication apparatus according to claim 1, wherein the plurality of devices include at least one of a cell phone, an RFID card, an Portable Media Player, a laptop computer and accessory.

10. The user authentication apparatus according to claim 1, wherein the control unit authenticates the user as a user corresponding to the collected information if the number of indispensible information is plural.

11. The user authentication apparatus according to claim 1, wherein the control unit authenticates the user based on a number of the predetermined devices verified by the control unit.

12. A user authentication method, comprising:

collecting authentication information from a plurality of devices associated with a user, the collected authentication information including user information and device identification information;

verifying whether each of the plurality of devices, based on the collected authentication information, is registered for the user, and determining whether an amount of information collected from the plurality of devices is larger than a predetermined amount of information and whether the plurality of devices include a device predetermined to be indispensible for user authentication; and

authenticating the user if it is determined that the amount of information collected from the plurality of devices verified is larger than the predetermined amount of information, and the plurality of devices include the device predetermined to be indispensible for user authentication.

13. The user authentication method according to claim 12, wherein the amount of information collected from the plurality of devices comprises a number of devices.

14. The user authentication method according to claim 12, wherein the user authentication information is collected using at least one of radio frequency identification (RFID), Bluetooth, and Zigbee.

15. The user authentication method according to claim 12, wherein the user authentication information is the same information on the user which the plurality of devices share in common, or information on the user which the plurality of devices have individually.

16. The user authentication method according to claim 12, wherein the user authentication information is automatically collected from the plurality of devices within a detectable coverage area of the user authentication apparatus.

17. The user authentication method according to claim 12, wherein in identifying the user, a weight is applied to the amount of corresponding information according to characteristics of a device from which the information is collected.

18. The user authentication method according to claim 12, further comprising requesting additional information if the amount of information collected is not larger than the predetermined amount of information.

19. The user authentication method according to claim 12, further comprising performing user authentication by identifying user authentication information, representing whether or not there are authentications, corresponding to the identified user.

20. A non-transitory computer-readable recording medium comprising an execution program for executing a user authentication method, wherein the user authentication method comprises:

collecting authentication information from a plurality of devices associated with a user, the collected authentication information including user information and device identification information;

verifying whether each of the plurality of devices, based on the collected authentication information, is registered for the user, and determining whether an amount of information collected from the plurality of devices is larger than a predetermined amount of information and whether the plurality of devices include a device predetermined to be indispensible for user authentication; and

authenticating the user if it is determined that the amount of information collected from the plurality of devices verified is larger than the predetermined amount of information, and the plurality of devices include the device predetermined to be indispensible for user authentication.

21. The non-transitory computer-readable recording medium according to claim 20, wherein in identifying the user, a weight is applied to an amount of corresponding information according to characteristics of a device from which the information is collected.

22. The non-transitory computer-readable recording medium according to claim 20, wherein the user authentication method further comprises performing user authentication by identifying user authentication information, representing whether or not there is permissions, corresponding to the identified user.

23. The non-transitory computer-readable recording medium according to claim 20, wherein the user authentication method further comprises requesting additional information if the amount of information collected is not larger than the predetermined amount of information.