Identifying a remote identity request via a biometric device

• US 9,846,769 B1
• Filed: 11/23/2011
• Issued: 12/19/2017
• Est. Priority Date: 11/23/2011
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Crimson Corporation
• Inventors: Hosea, Frank, Hillyard, Scott
• Primary Examiner(s): Lynch, Sharon
• Application Number:
  US13/303,894
• Time in Patent Office: 2,218 Days
• Field of Search: 726 7, 726168, 726186, 713186, 713168, 382118
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

A computing device configured for authenticating a remote computing device is described. The computing device includes a processor and executable instructions stored in memory that is in electronic communication with the processor. The computing device detects a biometric device on the remote computing device. The computing device also obtains information regarding the biometric device on the remote computing device. The computing device further sends a utility to the remote computing device. The computer device additionally receives biometric input from the remote computing device. The computing device furthermore validates the biometric input received. The computing device also grants or denies access to the remote computing device based on the validation of the biometric input.

Claims

1. A host computing device configured for authenticating a mobile device, comprising:

a processor of the host computing device;

a memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to cause the processor to;

receive a request for access to personal data from the mobile device, the mobile device being physically distinct from the host computing device and operatively coupled to the host computing device via a network;

scan the mobile device to detect a biometric sensor on the mobile device;

obtain information regarding a type of biometric sensor that is located on the mobile device;

select a utility based on the type of biometric sensor that is located on the mobile device;

cause the utility to be sent to the mobile device, wherein the utility comprises commands on how to perform a biometric authentication on the mobile device;

send stored biometric data to the mobile device for performing the biometric authentication on the mobile device including a comparison of the stored biometric data and biometric data generated at the biometric sensor on the mobile device, wherein the biometric data generated at the biometric sensor is obtained from a user without notifying the user;

receive a return code from the mobile device that indicates a status of the biometric authentication performed on the mobile device;

grant or deny the mobile device access to the personal data based on the biometric authentication performed on the mobile device, wherein the host computing device grants or denies access; and

transmit an indication of the granting or denying of the mobile device access to the personal data to a log or database for tracking access granted to users by a system administrator.

2. The host computing device of claim 1, wherein:

the instructions are further executable to cause the processor to establish a secure connection to the mobile device, and

the sending the stored biometric data and the receiving the return code are performed via the secure connection.

3. The host computing device of claim 1, wherein the utility communicates with an application programming interface (API) of the biometric sensor on the mobile device.

4. The host computing device of claim 1, wherein the utility sent to the mobile device comprises a user interface, and wherein the utility also comprises commands to require another type of challenge such that at least two different types of authentication challenges are performed.

5. The host computing device of claim 1, wherein the biometric authentication performed on the mobile device includes the utility performing a biometric authentication challenge on the mobile device.

6. The host computing device of claim 5, wherein the biometric data is received as a result of the biometric authentication challenge.

7. The host computing device of claim 1, wherein the stored biometric data comprises a biometric profile.

8. The host computing device of claim 1, wherein the instructions are further executable to cause the processor to restrict, using a management application on the host computing device, user authority to access at least one of a client, a database, a service, or a restricted area.

9. A method for authenticating a mobile device, comprising:

receiving, at a host computing device, a request for access to personal data from the mobile device, the mobile device being physically distinct from the host computing device and operatively coupled to the host computing device via a network;

scanning the mobile device to detect a biometric sensor on the mobile device;

obtaining information regarding a type of biometric sensor on the mobile device;

selecting a utility based on the type of biometric sensor that is located on the mobile device;

causing the utility to be sent to the mobile device, wherein the utility comprises commands on how to perform a biometric authentication on the mobile device;

sending stored biometric data to the mobile device for performing the biometric authentication on the mobile device including a comparison of the stored biometric data and biometric data generated at the biometric sensor on the mobile device, wherein the biometric data generated at the biometric sensor is obtained from a user without notifying the user;

receiving a return code from the mobile device that indicates a status of the biometric authentication performed on the mobile device;

granting or denying the mobile device access to the personal data based on the biometric authentication performed on the mobile device, wherein the host computing device grants or denies access; and

transmitting an indication of the granting or denying of the mobile device access to the personal data to a log or database for tracking access granted to users by a system administrator.

10. The method of claim 9, further comprising establishing a secure connection to the mobile device, and wherein the sending and receiving are performed via the secure connection.

11. The method of claim 9, wherein the utility communicates with an application programming interface (API) of the biometric sensor on the mobile device.

12. The method of claim 9, wherein the utility sent to the mobile device comprises a user interface, and wherein the utility also comprises commands to require another type of challenge such that at least two different types of authentication challenges are performed.

13. The method of claim 9, wherein the biometric authentication performed on the mobile device includes the utility performing a biometric authentication challenge on the mobile device.

14. The method of claim 13, wherein the biometric data is received as a result of the biometric authentication challenge.

15. The method of claim 9, wherein the stored biometric data comprises a biometric profile.

16. A non-transitory computer-readable medium for authenticating a mobile device comprising executable instructions for:

receiving, at a host computing device, a request for access to personal data from the mobile device, the mobile device being physically distinct from the host computing device and operatively coupled to the host computing device via a network;

scanning the mobile device to detect a biometric sensor on the mobile device;

obtaining information regarding a type of biometric sensor on the mobile device;

selecting a utility based on the type of biometric sensor that is located on the mobile device;

causing the utility to be sent to the mobile device, wherein the utility comprises commands on how to perform a biometric authentication on the mobile device;

sending stored biometric data to the mobile device for performing the biometric authentication on the mobile device including a comparison of the stored biometric data and biometric data generated at the biometric sensor on the mobile device, wherein the biometric data generated at the biometric sensor is obtained from a user without notifying the user;

receiving a return code from the mobile device that indicates a status of the biometric authentication performed on the mobile device;

granting or denying the mobile device access to the personal data based on the biometric authentication performed on the mobile device, wherein the host computing device grants or denies access; and

transmit an indication of the granting or denying of the mobile device access to the personal data to a log or database for tracking access granted to users by a system administrator.

17. The non-transitory computer-readable medium of claim 16, wherein the utility performs a biometric authentication challenge on the mobile device.