Proximity-based system for automatic application initialization

• US 8,918,854 B1
• Filed: 07/14/2011
• Issued: 12/23/2014
• Est. Priority Date: 07/15/2010
• Status: Active Grant

• Current Assignee: Proxense, LLC
• Original Assignee: Proxense, LLC
• Inventors: Giobbi, John J.
• Primary Examiner(s): POWERS, WILLIAM S
• Application Number:
  US13/183,354
• Time in Patent Office: 1,258 Days
• Field of Search: 726/2, 726/9, 726/26, 726/28, 713/182, 713/185, 713/186
• US Class Current: 726/9
• CPC Class Codes: G02B 6/0028 Light guide, e.g. taper
• CPC Class Codes: G02B 6/0038 Linear indentations or grooves, e.g. arc-shaped grooves or meandering grooves, extending over the full length or width of the light guide
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06K 7/10366 the interrogation device being adapted for miscellaneous applications
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/33 for indoor environments, e.g. buildings
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method provide automatic access to applications or data. A portable physical device, referred to herein as a Personal Digital Key or “PDK”, stores one or more profiles in memory. In one embodiment, a biometric profile is acquired in a secure trusted process and uniquely associated with a user that is authorized to use and associated with the PDK. The PDK wirelessly transmits identification information including a unique PDK identification number, and optionally the biometric profile and a profile over a secure wireless channel to a reader. A computing device is coupled to the reader. An auto login server is coupled to the reader and the computing device and launches one or more applications associated with a user name identified by the received profile.

Claims

1. A system with automatic access to information, comprising:

a first personal digital key (PDK) including a first profile uniquely associated with a user having a first user priority;

a reader configured to wirelessly communicate with the first PDK, the reader receiving profile information from the first PDK;

a computing device coupled to the reader, the computing device configured to display data on a display device responsive to receiving the profile information from the reader;

an auto login server coupled to the reader and to the computing device, the auto login server configured to receive the profile information from the reader and to automatically initiate a login of the user identified by the profile information;

an application server coupled to the computing device, the application server configured to cooperate with the computing device to automatically launch one or more applications on the computing device responsive to the login of the user associated with the profile information received from the reader; and

a second PDK including a second profile associated with another user having a second user priority, wherein one more of a session of the user and the computing device are taken over by the another user based on the second user priority relative to the first user priority, the reader configured to wirelessly communicate with the second PDK.

2. The system of claim 1, wherein automatically initiating a login of the user includes displaying at least one username of a user.

3. The system of claim 2, wherein the one or more applications automatically launched by the application server in cooperation with the computing device are determined by the user.

4. The system of claim 1, wherein the one or more applications automatically launched by the application server are customized by the user or an administrator of the user to launch by default responsive to the login of the user, and the application server or the auto login server is further configured to automatically identify that the one or more applications should be automatically launched by.

5. The system of claim 1, wherein the reader comprises:

a biometric reader configured to obtain physical or behavioral characteristics identifying the user from the user.

6. The system of claim 5, wherein the biometric reader is at least one of a fingerprint scanner, a retinal scanner, an iris scanner, a face scanner, a palm scanner, a DNA analyzer, a signature analyzer or a voice analyzer.

7. The system of claim 1, wherein the auto login server further comprises an access module for comparing the received data with data stored in a credentials database.

8. The system of claim 1, wherein the reader is further adapted to detect a PDK in response to the PDK entering a proximity zone of the reader, and request the PDK to transmit the profile information.

9. The system of claim 8, wherein the proximity zone of the reader is asymmetrical in a first direction.

10. The system of claim 1, wherein the profile information includes a group associated with the user, the group determining alone or in combination the one or more applications automatically launched by the application server in cooperation with the computing device, one or more application-specific preferences, and the user'"'"'s ability to access the computing device or application.

11. The system of claim 1, wherein the profile information includes one or more application-specific preferences determined by the user, and the application server is configured to receive the application-specific preferences and apply the application-specific preferences when cooperating with the computing device to automatically launch the one or more applications.

12. The system of claim 1, wherein the computing device is configured to lock the display device responsive to receiving a signal from the reader that one or more of the first and second PDKs are outside of a proximity zone of the reader.

13. The system of claim 12, wherein locking the display includes terminating the one or more applications and logging out the user.

14. The system of claim 12, wherein locking the display includes saving the session associated with the one or more applications and hiding the session.

15. The system of claim 12, wherein the computing device waits a predetermined amount of time after receiving the signal from the reader before locking the display, or the reader waits a predetermined amount of time after the PDK leaves the proximity zone before sending the signal.

16. The system of claim 12, wherein the computing device receives one or more advertisements from a third party site and displays the advertisements using the display device when the display device is locked.

17. The system of claim 16, wherein the third party site identifies the one or more advertisements based on data received from the computing device.

18. A method for automatic access to information, the method comprising:

receiving, using a reader, an identifier from a first personal digital key (PDK), the identifier uniquely associated with the first PDK;

authenticating the identifier;

responsive to authenticating the identifier, receiving profile information from the first PDK, the profile information uniquely associated with a user, the user having a first user priority;

authenticating the profile information from the first PDK;

responsive to authenticating the profile information, automatically initializing a login of the user;

receiving application data via a computer network on a computing device proximate the user, the application data being uniquely associated with the user and describing one or more applications that are accessible by the user;

automatically launching, on the computing device, the one or more applications using the application data responsive to the login of the user associated with the profile information received from the first PDK; and

taking over one or more of a session of the user and the computing device on behalf of a second user based on a second user priority relative to the first user priority, the second PDK associated with another user having the second user priority.

19. The method of claim 18, further comprising:

automatically logging in the user associated with a user name associated with the profile information received from the first PDK.

20. The method of claim 19, wherein the one or more applications are automatically launched by an application server in cooperation with the computing device and are determined by the user.

21. The method of claim 19, the method further comprising:

the user manually closing a first application automatically launched;

locking the user'"'"'s session or logging out the user responsive to the user leaving a proximity zone of a reader; and

unlocking the user'"'"'s session or logging in the user, responsive to the user entering the proximity zone of a reader, wherein the first application automatically launched remains closed unless all the applications associated with the user to automatically launch are closed in which case all applications set to automatically launch are automatically re-launched.

22. The method of claim 18, the method further comprising:

enabling one or more of the user and an administrator to specify that the one or more applications be automatically launched by default responsive to the login of the user, wherein the application data indicates that the one or more applications should be automatically launched by default.

23. The method of claim 22, further comprising:

responsive to the PDK leaving a proximity zone of a reader, locking a display device'"'"'s display.

24. The method of claim 23, wherein locking the display includes terminating one or more applications of the user and logging out the user.

25. The method of claim 23, wherein locking the display includes saving a session associated with the one or more applications and hiding the session.

26. The method of claim 23, the method further comprising:

waiting a predetermined amount of time after the PDK leaves the proximity zone before locking the display.

27. The method of claim 23, the method further comprising:

receiving one or more advertisements from a third party site; and

displaying the advertisements using the display device when the display device is locked.

28. The method of claim 27, wherein the third party site identifies the one or more advertisements based on data received from the display device.

29. The method of claim 18, wherein automatically initializing a login of the user includes displaying at least one username associated with the user.

30. The method of claim 18, wherein receiving, using the reader, the identifier from the PDK comprises:

determining whether the first PDK is within a proximity zone of the reader;

responsive to the first PDK being within the proximity zone of the reader, receiving the identifier from the first PDK.

31. The method of claim 18, wherein authenticating the profile information comprises:

performing biometric authentication based on the received profile information from the first PDK.

32. The method of claim 31, wherein once the profile information is biometrically authenticated, detection of the first PDK is sufficient to enable subsequent authentication and subsequent login for a predetermined period without biometric re-authentication.

33. The method of claim 32, wherein the predetermined period is one of a set number of detections or login cycles or a predetermined period of time.

34. The method of claim 32, wherein the predetermined period can be set or adjusted by an administrator.

35. The method of claim 18, wherein the profile information includes a group associated with the user, the group determining alone or in combination the one or more applications automatically launched by an application server in cooperation with the computing device, one or more application-specific preferences, and the user'"'"'s ability to access the computing device or application.

36. The method of claim 18, further comprising:

applying, using the application server, one or more application-specific preferences to the one or more applications that are automatically launched to customize the one or more applications to the user, wherein the profile information includes the one or more application-specific preferences and the one or more application-specific preferences are determined by the user.

37. The method of claim 18, the method further comprising:

receiving a second identifier from the second PDK;

receiving profile information from the second PDK, the profile information associated with the another user;

authenticating the profile information from the second PDK;

responsive to authenticating the profile information from the second PDK, identifying a second user name associated with the second profile information received from the second PDK; and

after authenticating the profile information from the first PDK and the profile information from the second PDK, receiving a selection of one of a user name associated with the profile information from the first PDK and the second user name, wherein the one or more applications that are automatically launched are associated with the one of the selected user and the selected user name.

38. The method of claim 37, wherein in addition to receiving a selection of the user name or the second user name, one or more additional applications are manually selected to launch;

and the one or more additional applications are launched along with the one or more applications associated with the selected user or with the selected user name.

39. A method for securing access to information, comprising:

detecting a plurality of first personal digital keys (PDKs) respectively associated with a plurality of users in a proximity zone of a reader;

authenticating each of the first PDKs to provide the plurality of users access to a shared computing device associated with the reader, the plurality of users having a first user priority;

detecting a second personal digital key (PDK) associated with a second user in the proximity zone that was non-present during the detecting of the first PDKs, the second user having a second user priority;

authenticating the second PDK to provide the second user access to one or more of the computing device in use by one of the users associated with one of the first PDKs and a session of one of the users associated with one of the first PDKs based on the second user priority relative to the first user priority;

detecting the second PDK associated with the second user leaving a proximity zone of the reader; and

responsive to detecting the second PDK leaving the proximity zone, one of logging out and saving and hiding a session of the second user.