Credential quality assessment engine systems and methods

• US 9,589,399 B2
• Filed: 07/01/2013
• Issued: 03/07/2017
• Est. Priority Date: 07/02/2012
• Status: Active Grant

• Current Assignee: Synaptics Incorporated
• Original Assignee: Synaptics Incorporated
• Inventors: Taveau, Sebastien Ludovic Jean, Hattery, Larry E., Schwab, Frank
• Primary Examiner(s): Feild, Joseph
• Assistant Examiner(s): Mahase, Pameshanand
• Application Number:
  US13/932,129
• Publication Number:
  US 20140002238A1
• Time in Patent Office: 1,345 Days
• US Class Current: 1/1
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

An authentication risk management system and method are disclose which may comprise a biometric identification unit configured to sense biometric data from a user and produce an image of the sensed biometric data with a stored template associated with the user; and a biometric identification unit natural identification evaluation engine configured to provide a natural identification authentication score. The system and method may further comprise a credentials quality assessment engine (“CQAE”) configured to receive the natural identification authentication score and to provide a CQAE authentication score based one of the natural ID score and a combination of the natural ID score and a received computed authentication score. The CQAE may comprise at least a part of a user authentication profile engine.

Claims

1. An authentication risk management system, comprising:

a biometric identification unit configured to sense biometric data from a user and produce an image of the sensed biometric data to be compared with a stored template associated with the user;

a biometric identification unit natural identification evaluation engine configured to provide a natural identification (ID) score based on a hardware marking, a quality of the image of the sensed biometric data and a matching granularity between the image of the sensed biometric data and the stored template;

a computed authentication engine configured to provide a computed authentication score based on at least one of a PIN, a password and a token; and

a credentials quality assessment engine (CQAE) configured to receive the natural ID score and the computed authentication score and to provide a CQAE authentication score based on a combination of the natural ID score and the computed authentication score.

2. The authentication risk management system of claim 1 wherein the CQAE comprises at least a part of a user authentication profile engine.

3. The authentication risk management system of claim 2 further comprising:

a risk profile engine configured to provide a risk profile score based on one of the natural ID score and a combination of one or more of the computed authentication score and a received device profile score.

4. The authentication risk management system of claim 3 wherein the risk profile engine is in communication with an on-network portion of the authentication management system.

5. The authentication risk management system of claim 4 wherein the on-network portion of the authentication management control system includes a risk management engine.

6. The authentication risk management system of claim 1 further comprising:

a risk profile engine configured to provide a risk profile score based on one of the natural ID score and a combination of one or more of the computed authentication score and a received device profile score.

7. The authentication risk management system of claim 6 wherein the risk profile engine is in communication with an on-network portion of the authentication management system.

8. The authentication risk management system of claim 7 wherein the risk profile engine is in communication with an on-network portion of the authentication management system.

9. The authentication risk management system of claim 8 wherein the on-network portion of the authentication management control system includes a risk management engine.

10. A method of authentication risk management, comprising:

producing biometric data from a user by sensing a biometric input with a biometric identification unit, and producing an image of the biometric input from the biometric data, and matching the image to a stored template associated with the user;

providing an authentication risk management natural identification authentication score using a biometric identification unit natural identification evaluation engine, wherein the natural identification authentication score is based on a hardware marking, a quality of the image of the biometric input and a matching granularity between the image of the biometric input and the stored template;

generating a computed authentication score based on at least one of a PIN, a password and a token; and

receiving the natural identification authentication score and the computed authentication score and providing a credentials quality assessment engine (CQAE) authentication score based on a combination of the natural identification authentication score and the computed authentication score.

11. The method of claim 10 wherein the received computed authentication score is based on at least one of a PIN, a password and a token.

12. The method of claim 10 wherein the CQAE comprises at least a part of a user authentication profile engine.

13. The method of claim 12 further comprising providing a risk profile score, using a risk profile engine, based on one of the natural identification authentication score and a combination of one or more of the computed authentication score and a received device profile score.

14. The method of claim 13 further comprising:

communicating through the risk profile engine with an on-network third party risk assessment engine.

15. The method of claim 10 further comprising providing a risk profile score, using a risk profile engine, based on one of the natural identification authentication score and a combination of one or more of the computed authentication score and a received device profile score.

16. The method of claim 15 further comprising:

communicating through the risk profile engine with an on-network third party risk assessment engine.

17. A tangible machine readable medium storing instructions that, when executed by a computing device, cause the computing device to perform a method, the method comprising:

producing biometric data from a user by sensing a biometric with a biometric identification unit, and producing an image of the biometric from the biometric data, and matching the image to a stored template associated with the user;

providing an authentication risk management natural identification authentication score using a biometric identification unit natural identification evaluation engine, wherein the natural identification authentication score is based on a hardware marking, a quality of the image of the biometric and a matching granularity between the image of the biometric and the stored template;

generating a computed authentication score based on at least one of a PIN, a password and a token; and

receiving the natural identification authentication score and the computed authentication score and providing a credentials quality assessment engine (CQAE) authentication score based on a combination of the natural identification authentication score and the computed authentication score.

18. The machine readable medium of claim 17 wherein the received computed authentication score is based on at least one of a PIN, a password and a token.

19. The machine readable medium of claim 17 wherein the CQAE comprises at least a part of a user authentication profile engine.