Systems, methods and apparatus for multivariate authentication

• US 8,949,619 B2
• Filed: 06/10/2014
• Issued: 02/03/2015
• Est. Priority Date: 04/09/2012
• Status: Expired due to Fees

• Current Assignee: VNS Portfolio LLC
• Original Assignee: Brivas, LLC
• Inventors: Parry, Beau Robertson, Boddeti, Yasodekshna, Parupati, Srikanth
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/300,609
• Publication Number:
  US 20140289534A1
• Time in Patent Office: 238 Days
• Field of Search: 713/186
• US Class Current: 713/186
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04N 7/183 for receiving images from a single remote source
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Systems, methods, and apparatus are disclosed for electronically sharing data using authentication variables, such as biometrics and contextual data. Example contextual data includes machine identifications (IDs) and data collected from sensors of computing devices.

Claims

1. A non-transitory computer readable medium having instructions stored thereon which when executed by a processor of an authentication computing device cause the processor to:

receive, by the authentication computing device and from an input user device via a first network communication, a network packet comprising an electronic data file and recipient biometrics of an identified recipient, wherein the electronic data file is for selective transmission to a target user device associated with the identified recipient, and wherein the input user device is different from the authentication computing device and the target user device;

receive, by the authentication computing device and from the target user device via a second network communication, biometric data obtained from a user of the target user device, wherein the target user device is different from the authentication computing device;

determine by the authentication computing device whether the user of the target user device is the identified recipient of the electronic data file based on a determination whether the recipient biometrics received from the input user device satisfactorily matches the biometric data received from the target user device; and

transmit, by the authentication computing device in response to a determination that the user of the target user device is the identified recipient of the electronic data file, the electronic data file to the target user device.

2. The non-transitory computer readable medium of claim 1, wherein the recipient biometrics is based on a facial image of a recipient.

3. The non-transitory computer readable medium of claim 2, wherein the biometric data obtained from the user of the target user device is based on an image of a face of the user of the target user device.

4. The non-transitory computer readable medium of claim 1, wherein the electronic data file is encrypted based on biometrics of the user of the target user device and contextual data associated with the target user device.

5. The non-transitory computer readable medium of claim 4, wherein the contextual data is a machine identification (ID) of the target user device.

6. The non-transitory computer readable medium of claim 4, wherein the contextual data is data collected from a sensor of the target user device.

7. The non-transitory computer readable medium of claim 4, wherein the instructions further cause the processor of the authentication computing device to decrypt the electronic data file in response to the determination that the user of the target user device is the identified recipient of the electronic data file;

and

wherein to transmit the electronic data file to the target user device comprises to transmit the decrypted electronic data file to the target user device.

8. The non-transitory computer readable medium of claim 1, wherein the recipient biometrics comprises recipient biometrics from each of a plurality of recipients, and wherein the biometric data received from the target user device comprises biometric data obtained from each of a plurality of users of the target user device.

9. The non-transitory computer readable medium of claim 8, wherein the instructions further cause the processor of the authentication computing device to permit the electronic data file to be accessed on the target user device when the biometric data obtained from each of the plurality of users of the target user device satisfactorily matches the recipient biometrics received from the input user device.

10. The non-transitory computer readable medium of claim 9, wherein the plurality of recipients comprises N recipients, where N is an integer, and wherein the plurality of users of the target user device comprises k recipients.

11. The non-transitory computer readable medium of claim 10, wherein k<

N.

12. The non-transitory computer readable medium of claim 1, wherein the recipient biometrics is based on a facial image of a recipient obtained from at least one of a target biometrics database of the input user device, a digital photo album of the input user device, or a social networking website.

13. The non-transitory computer readable medium of claim 1, wherein the electronic data file comprises biometrics.

14. A method of electronically sharing data, the method comprising:

receiving, by an authentication computing device and from an input user device via a first network communication, a network packet comprising an electronic data file and recipient biometrics of an identified recipient, wherein the electronic data file is for selective transmission to a target user device associated with the identified recipient, and wherein the input user device is different from the authentication computing device and the target user device;

receiving, by the authentication computing device and from the target user device via a second network communication, biometric data obtained from a user of the target user device, wherein the target user device is different from the authentication computing device;

determining, by the authentication computing device, whether the user of the target user device is the identified recipient of the electronic data file based on a determination whether the recipient biometrics received from the input user device satisfactorily matches the biometric data received from the target user device; and

transmitting, by the authentication computing device and in response to a determination that the user of the target user device is the identified recipient of the electronic data file, the electronic data file to the target user device.

15. The method of claim 14, wherein the recipient biometrics is based on a facial image of a recipient.

16. The method of claim 15, wherein the biometric data obtained from the user of the target user device is based on an image of a face of the user of the target user device.

17. The method of claim 14, wherein the electronic data file is encrypted based on biometrics of the user of the target user device and contextual data associated with the target user device.

18. The method of claim 17, wherein the contextual data is a machine identification (ID) of the target user device.

19. The method of claim 17, wherein the contextual data is data collected from a sensor of the target user device.

20. The method of claim 17, further comprising:

decrypting the electronic data file in response to the determination that the user of the target user device is the identified recipient of the electronic data file; and

wherein transmitting the electronic data file to the target user device comprises transmitting the decrypted electronic data file to the target user device.

21. The method of claim 14, wherein the recipient biometrics comprises recipient biometrics from each of a plurality of recipients, and wherein the biometric data received from the target user device comprises biometric data obtained from each of a plurality of users of the target user device.

22. The method of claim 21, further comprising permitting, by the authentication computing device, the electronic data file to be accessed on the target user device when the biometric data obtained from each of the plurality of users of the target user device satisfactorily matches the recipient biometrics received from the input user device.

23. The method of claim 22, wherein the plurality of recipients comprises N recipients, where N is an integer, and wherein the plurality of users of the target user device comprises k recipients.

24. The method of claim 23, wherein k<

N.

25. The method of claim 14, wherein the recipient biometrics is based on a facial image of a recipient obtained from at least one of a target biometrics database of the input user device, a digital photo album of the input user device, or a social networking website.

26. The method of claim 14, wherein the electronic data file comprises biometrics.