System and method for controlling access to network services using biometric authentication

• US 9,118,488 B2
• Filed: 05/17/2011
• Issued: 08/25/2015
• Est. Priority Date: 06/17/2010
• Status: Expired due to Fees

• Current Assignee: JB IP Acquisitions LLC
• Original Assignee: AliphCom, Inc. (AliphCom Corp.)
• Inventors: Donaldson, Thomas A.
• Primary Examiner(s): Mehrmanesh, Amir
• Application Number:
  US13/109,839
• Publication Number:
  US 20110314530A1
• Time in Patent Office: 1,561 Days
• Field of Search: 726 1- 7, 726 16- 19, 726/21, 726/35, 726 26- 29, 713182-186, 709227-229, 382115-119
• US Class Current: 1/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system, apparatus, or method for controlling access to a network and to the associated network resources or services. The invention may be used to provide a user authentication or authorization process for a computer network, a telecommunications network, or other suitable system, apparatus, device, process, operation, etc. In some embodiments, the present invention uses a combination of device identification data (such as a device identifier or other form of token) and user-specific biometric data (such as a physical characteristic associated with the user or data generated as a result of a signal being altered by a physical characteristic of a user) to identify a user and permit the user to access the network or network resources or services.

Claims

1. An apparatus for providing a user with access to an access-controlled element, comprising:

an electronic processor programmed to execute a set of instructions; and

a data storage device coupled to the processor and having the set of instructions stored therein, wherein when the set of instructions are executed by the processor, the apparatus provides the user with access by

transmitting a request from an access management element for a device identifier via a polling operation to detect a proximity of the user;

receiving data identifying a device in the possession of the user;

based on the received data, verifying that the device is authorized to access the access-controlled element; and

initiating a biometric authentication process to authenticate the user based on a biometric characteristic of a user-dependent frequency response of a pinna of an ear of the user, wherein the biometric authentication process further comprises

providing over a secure encrypted channel of a wireless communication link transmitted by a wireless communication element included in an access management element, an audio recording of low amplitude colored noise based on randomly-generated filter coefficients as input data for the biometric authentication process;

changing the audio recording from one authentication attempt to another authentication attempt;

receiving over the secure encrypted channel of the wireless communication link transmitted by another wireless communication element included in the device, output data for a biometric transducer in response to the input data, wherein the biometric transducer comprises a microphone facing the pinna and the microphone is included in the device;

comparing the output data to a set of expected output data, the output data including data representing an echo signal derived from echo cancellation; and

providing the user with access if the output data differs from the set of expected output data by less than a threshold amount.

2. The apparatus of claim 1, wherein the device is a headset.

3. The apparatus of claim 1, wherein the biometric transducer further comprises a speaker included in the device.

4. The apparatus of claim 1, wherein the access-controlled element is a network or an element connected to a network.

5. The apparatus of claim 1, wherein the biometric authentication process is passive and requires no additional action by the user.

6. The apparatus of claim 1, wherein the data identifying the device is an address of the device.

7. The apparatus of claim 1, wherein the input data further comprises a sequence to be spoken by the user.

8. A method of providing a user with access to an access-controlled element, comprising:

transmitting a request from an access management element for a device identifier via a polling operation to detect a proximity of the user;

receiving data representing the device identifier identifying a device in the possession of the user responsive to transmitting the request;

based on the received data, verifying that the device is authorized to access the access-controlled element; and

initiating a biometric authentication process to authenticate the user based on a biometric characteristic of a user-dependent frequency response of a pinna of an ear of the user, wherein the biometric authentication process further comprises

providing over a secure encrypted channel of a wireless communication link transmitted by a wireless communication element included in an access management element, an audio recording of low amplitude colored noise based on randomly-generated filter coefficients as input data for the biometric authentication process;

changing the audio recording from one authentication attempt to another authentication attempt;

receiving over the secure encrypted channel of the wireless communication link transmitted by another wireless communication element included in the device, output data from a biometric transducer in response to the input data, wherein the biometric transducer comprises a microphone facing the pinna and the microphone is included in the device;

comparing the output data to a set of expected output data, the output data including data representing an echo signal derived from echo cancellation; and

providing the user with access if the output data differs from the set of expected output data by less than a threshold amount.

9. The method of claim 8, wherein the device is a headset.

10. The method of claim 8, wherein the biometric transducer further comprises a speaker included in the device.

11. The method of claim 8, wherein the access-controlled element is a network or an element connected to a network.

12. The method of claim 8, wherein the biometric authentication process is passive and requires no additional action by the user.

13. The method of claim 8, wherein the input data further comprises a sequence to be spoken by the user.