User authentication system and method

• US 9,286,742 B2
• Filed: 03/31/2008
• Issued: 03/15/2016
• Est. Priority Date: 03/31/2008
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Plantronics, Inc.
• Inventors: Rosener, Douglas K, Brown, William O, Reuss, Edward L
• Primary Examiner(s): Kyle, Tamara T
• Application Number:
  US12/060,031
• Publication Number:
  US 20090249478A1
• Time in Patent Office: 2,906 Days
• Field of Search: 726/18, 726/20, 713172-174
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A user authentication system and method are disclosed. The user authentication system includes an authentication device which can be donned and doffed by the user, a sensor to determine whether the authentication device is donned or doffed by the user, and an authentication server to receive information from the sensor and to authenticate the user based on whether the authentication device is donned by the user.

Claims

1. A user authentication system, comprising:

an authentication device which can be donned and doffed by a user;

a sensor coupled to said authentication device to determine whether said authentication device is donned or doffed by the user;

an authentication server to receive information from said sensor; and

a motion sensor coupled to said authentication device to determine motion of said authentication device, wherein

said authentication server receives information from said sensors;

said authentication server maintains authentication of the user while the device is donned by the user and

said authentication server revokes authentication of the user when

said authentication device is doffed and

said authentication device after being doffed has been stationary for greater than a predetermined time.

2. The user authentication system according to claim 1, wherein said authentication server authenticates the user when said authentication device is donned by the user.

3. The user authentication system according to claim 1, wherein said authentication device comprises a headset or a headphone.

4. The user authentication system according to claim 1 wherein said authentication server is coupled to said authentication device.

5. The user authentication system according to claim l wherein said authentication server is not coupled to said authentication device.

6. A method of authenticating a user with a system including an authentication device which can be donned and doffed by the user, the method comprising:

determining whether said authentication device is donned by the user; and

authenticating the user based on whether said authentication device is donned or doffed by the user; and

revoking the authentication of the user when said authentication device is doffed by the user and after being doffed has been stationary for greater than a predetermined time.

7. The method of authenticating a user according to claim 6, further comprising authenticating the user when the authentication device is donned by the user.

8. A method of authenticating a user with a system including an authentication device which can be donned and doffed by a user and a further device, the method comprising:

determining a near state or a far state based on the distance between said authentication device and said further device;

determining whether said authentication device is donned or doffed by the user;

authenticating the user if said authentication device is donned and said near state is determined; and

revoking authentication if id authentication device is doffed or said far state is determined.

9. The method of authenticating a user according to claim 8, wherein said further device comprises a second authentication device that can be donned and doffed by the user. and the method further comprises:

determining whether said second authentication device is donned or doffed by the user; and

authenticating the user if both of said authentication devices are donned and said near state is determined; and

revoking authentication if both of said authentication devices are doffed or said far state is determined.

10. A user authentication system, comprising:

an authentication device;

a further device;

a sensor coupled to said authentication device to determine whether said authentication device is donned or doffed by a user, and

an authentication server, wherein

at least one of said authentication device and said further device is adapted to determine a near state and a far state based on the distance between said authentication device and said further device, wherein

said authentication server is configured to receive information from at least one of said authentication device and said further device, to authenticate the user if said authentication device is donned and said near state is determined, and to revoke authentication if said authentication device is doffed or said far state is determined.

11. The user authentication system according to claim 10, wherein said further device comprises a cell phone.

12. The user authentication system according to claim 10, wherein said further device comprises a second authentication device.

13. The user authentication system according to claim 12, wherein said second authentication device comprises a second sensor coupled to said second authentication device to determine whether said second authentication device is donned or doffed by a user, and wherein said authentication server is configured to authenticate the user if both of said authentication devices are donned and said near state is determined, and to revoke authentication if both of said authentication devices are doffed or at least said far state is determined.

14. The user authentication system according to claim 12, wherein said second authentication device is constructed and arranged to be worn by the user or carried in a garment worn by the user.

15. The user authentication system according to claim 10, wherein said authentication device is constructed and arranged to be worn by the user or carried in a garment worn by the user.

16. The user authentication system according to claim 10, wherein said authentication device comprises a headset or a headphone.

17. The user authentication system according to claim 10, further comprising a proximity sensor coupled to at least one of said authentication device and said further device to determine a distance between said authentication device and said further device.

18. The user authentication system according to claim 17, wherein said near state is determined if the distance between said authentication device and said further device is less than or equal to a predefined distance, and said far state is determined if the distance between said authentication device and said further device is greater than said predefined distance.

19. The user authentication system according to claim 10, wherein said authentication device and said further device are configured to communicate with each other over at least one of a body area network and a personal area network, and wherein said near state is determined if network connectivity is given between said authentication device and said further device.

20. The user authentication system according to claim 19, wherein a far state is determined if no network connectivity is given between said authentication device and said further device.

21. The user authentication system according to claim 10, wherein said authentication server is coupled to said authentication device.

22. The user authentication system according to claim 10, wherein said authentication server is not coupled to said authentication device.

23. The user authentication system according to claim 10, wherein said authentication device further comprises a motion sensor coupled to said authentication device to determine motion of said authentication device, wherein

said authentication server is configured to revoke authentication if said authentication device is doffed and has been stationary for greater than a predetermined time or at least said far state is determined.