Method and system for multi-factor biometric authentication based on different device capture modalities

• US 9,100,825 B2
• Filed: 05/31/2013
• Issued: 08/04/2015
• Est. Priority Date: 02/28/2012
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Schultz, Paul T., Sartini, Robert A.
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US13/907,389
• Publication Number:
  US 20130267204A1
• Time in Patent Office: 795 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data

Abstract

An approach for enabling multi-factor biometric authentication of a user based on different data capture modalities of a mobile device is described. A biometric enabler receives a request for authentication of a user via a network at a mobile device of the user. The biometric authentication further initiates a capture of media associated with the user at the mobile device based on the request, wherein the capture is based on a capture condition. The biometric enabler also determines, in response to the request, whether the media is associated with different types of biometric information of the user as maintained in association with a resource that requires authentication of the user.

Claims

1. A method comprising:

receiving a request for authentication of a user via a network at a mobile device of the user;

determining a capture condition of the mobile device, based on profile data of the user, sensors of the device, a preference of the user specified in the profile, or a combination thereof;

initiating a capture of media associated with the user at the mobile device based on the request and the capture condition;

adapting a trust level to be associated with the media based on the capture modality,

wherein different biometric information has different trust level, and

determining, in response to the request, whether the media is associated with different types of biometric information of the user as maintained in association with a resource that requires authentication of the user, wherein the determination of whether the media is associated with different types of biometric information is based on the trust level.

2. A method of-claim 1, further comprising:

initiating a capture of context information associated with the mobile device, the user, or a combination thereof,

wherein the capture condition is based on the context information, and the capture condition includes a light intensity, a sound intensity, a usage level of the mobile device, a usage level of the resource, or a combination thereof.

3. A method of claim 2, wherein the context information includes location information, a mobile device identifier, a resource identifier, time information, network information, light information, sound information, usage information, or a combination thereof.

4. A method of claim 2, wherein the result of the determination of whether the media is associated with different types of biometric information is based on the context information.

5. A method of claim 1, wherein the capture modality includes limiting the presentment of captured video data to a predetermined portion of the face of the user, preventing the capture of video data related to the user, presenting an alternative view of the face of the user, presenting an augmented view of the surroundings of the user, or a combination thereof.

6. A method of claim 1, wherein the media includes voice data, and the capture modality includes cancelling noise associated with the voice data, preventing the capture of voice data related to the user, rendering one or more other sounds based on the alternative view of the user or the surroundings of the user, or a combination thereof.

7. A method of claim 1, further comprising:

selectively authenticating the user based on the determining, in response to the request; and

logging the access, use, entry, execution or allocation of the resource to the user, the mobile device, or a combination thereof based on the authentication of the user.

8. A method of claim 1, wherein the resource is another mobile device, a wireless node, a security system, a controller, a service, or a combination thereof.

9. A method of claim 1, further comprising:

capturing non-biometric media associated with the user at the mobile device based on the request and the capture condition,

wherein the determining, in response to the request, includes determining whether the non-biometric media and media are associated with different types of non-biometric and biometric information of the user as maintained in association with a resource that requires authentication of the user.

10. A method of claim 9, wherein the non-biometric media includes noise, ambient noise, lighting, or a combination thereof.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

receive a request for authentication of a user via a network at a mobile device of the user;

determine a capture condition of the mobile device, based on profile data of the user, sensors of the device, a preference of the user specified in the profile, or a combination thereof;

initiate a capture of media associated with the user at the mobile device based on the request and the capture condition;

wherein different biometric information has different trust level, and

determine, in response to the request, whether the media is associated with different types of biometric information of the user as maintained in association with a resource that requires authentication of the user, wherein the determination of whether the media is associated with different types of biometric information is based on the trust level.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

initiate a capture of context information associated with the mobile device, the user, or a combination thereof,

wherein the capture condition is based on the context information, and the capture condition includes a light intensity, a sound intensity, a usage level of the mobile device, a usage level of the resource, or a combination thereof.

13. An apparatus of claim 12, wherein the context information includes location information, a mobile device identifier, a resource identifier, time information, network information, light information, sound information, usage information, or a combination thereof.

14. An apparatus of claim 12, wherein the result of the determination of whether the media is associated with different types of biometric information is based on the context information.

15. An apparatus of claim 11, wherein the capture modality includes limiting the presentment of captured video data to a predetermined portion of the face of the user, preventing the capture of video data related to the user, presenting an alternative view of the face of the user, presenting an augmented view of the surroundings of the user, or a combination thereof.

16. An apparatus of claim 11, wherein the media includes voice data, and the capture modality includes cancelling noise associated with the voice data, preventing the capture of voice data related to the user, rendering one or more other sounds based on the alternative view of the user or the surroundings of the user, or a combination thereof.

17. An apparatus of claim 11, wherein the apparatus is further caused to:

selectively authenticate the user based on the determining, in response to the request; and

log the access, use, entry, execution or allocation of the resource to the user, the mobile device, or a combination thereof based on the authentication of the user.

18. An apparatus of claim 11, wherein the resource is another mobile device, a wireless node, a security system, a controller, a service, or a combination thereof.