Method and apparatus for inferring realworld identities

• US 9,934,541 B1
• Filed: 09/30/2013
• Issued: 04/03/2018
• Est. Priority Date: 09/30/2013
• Status: Active Grant

• Current Assignee: Gen Digital Inc.
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Spertus, Michael
• Primary Examiner(s): Mehedi, Morshed
• Assistant Examiner(s): Naghdali, Khalil
• Application Number:
  US14/042,353
• Time in Patent Office: 1,646 Days
• Field of Search: 726 4
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety

Abstract

A method for inferring real world identities is provided. The method includes receiving an authenticated copy of a document, the document having identification information and the document subject to a security check. The method includes providing evidence that an owner of the authenticated copy of the document passed the security check validating the identification information contained in the document. The method includes asserting that a device is associated with a real-world identity corresponding to the identification information listed in the authenticated copy of the document, in response to a determination that the owner of the authenticated document entered the secured area. At least one method operation is executed through a processor.

Claims

1. A method for inferring real-world identities in a computing environment, performed by a processor-based computerized system, comprising:

receiving, from a mobile communication device, an electronic mobile boarding pass listing identification information of a passenger;

receiving, from the mobile communication device, first global positioning system (GPS) coordinates of the mobile communication device captured at a first point in time;

verifying that the first GPS coordinates correspond to a first security zone of a first facility that only allows entry of the passenger into the first security zone after a first security personnel verifies that the electronic mobile boarding pass, a government-issued ID, and a first in-person appearance of the passenger all match;

in response to the verifying that the first GPS coordinates correspond to the first security zone, determining that the first security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the first in-person appearance of the passenger all match;

receiving, over a network, a first request to authenticate that the mobile communication device is associated with a real-world identity of the passenger corresponding to the identification information listed in the electronic mobile boarding pass in order to authorize a first transaction initiated on the mobile communication device, the first transaction unrelated to travel associated with the electronic mobile boarding pass;

in response to the first request and to the determining that the first security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the first in-person appearance of the passenger all match, responding to the first request with a first confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger;

verifying that the first point in time of the first GPS coordinates are within a specified time span preceding a departure of a flight corresponding to the electronic mobile boarding pass; and

receiving, over the network, a second request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a second transaction initiated on the mobile communication device, the second transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the second request and to the verifying that the first point in time of the first GPS coordinates are within the specified time span preceding the departure of the flight corresponding to the electronic mobile boarding pass, responding to the second request with a second confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger, the second confidence level being higher than the first confidence level.

2. The method of claim 1, further comprising:

accessing flight information;

verifying that the flight information shows that the real-world identity is listed as a passenger on an airline flight that is consistent with the electronic mobile boarding pass; and

receiving, over the network, a third request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a third transaction initiated on the mobile communication device, the third transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the third request and to the verifying that the flight information shows that the real-world identity is listed as a passenger on the airline flight that is consistent with the electronic mobile boarding pass, responding to the third request with a third confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger, the third confidence level being higher than the second confidence level.

3. The method of claim 1, further comprising:

receiving, from the mobile communication device, second GPS coordinates of the mobile communication device captured at a second point in time that is subsequent to the first point in time;

verifying that the second GPS coordinates correspond to a second security zone of a second facility that only allows entry of the passenger into the second security zone after a second security personnel verifies that the electronic mobile boarding pass, the government-issued ID, and a second in-person appearance of the passenger all match;

in response to verifying that the second GPS coordinates correspond to the second security zone, determining that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match;

receiving, over the network, a third request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a third transaction initiated on the mobile communication device, the third transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the third request and to determining that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match, responding to the third request with a third confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger, the third confidence level being higher than the first second confidence level.

4. The method of claim 3, wherein each of the first facility and the second facility is one or more of an airport, a bus station, a ship port, and a train station.

5. The method of claim 4, further comprising:

in response to the response with the third confidence level of authentication, performing the third transaction.

6. One or more tangible, non-transient, computer-readable media having instructions thereupon which, when executed by one or more processors, cause the one or more processors to perform a method for inferring real-world identities in a computing environment, the method comprising:

acquiring, from a mobile communication device, an electronic mobile boarding pass for a passenger on an airline flight from a first airport to a second airport, the electronic mobile boarding pass listing identification information of the passenger;

acquiring, from the mobile communication device, first global positioning system (GPS) coordinates of the mobile communication device captured at a first point in time;

verifying that the first GPS coordinates correspond to a first security zone of the first airport, the second airport, or a stopover airport of the airline flight, the first security zone only allowing entry of the passenger into the first security zone after a first security personnel verifies that the electronic mobile boarding pass, a government-issued ID, and a first in-person appearance of the passenger all match;

in response to the verifying that the first GPS coordinates correspond to the first security zone, determining that the first security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the first in-person appearance of the passenger all match;

receiving, over a network, a first request to authenticate that the mobile communication device is associated with a real-world identity of the passenger corresponding to the identification information listed in the electronic mobile boarding pass in order to authorize a first transaction initiated on the mobile communication device, the first transaction unrelated to travel associated with the electronic mobile boarding pass;

in response to the first request and to the determining that the first security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the first in-person appearance of the passenger all match, responding to the first request with a first confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger;

acquiring, from the mobile communication device, second GPS coordinates of the mobile communication device captured at a second point in time that is subsequent to the first point in time;

verifying that the second GPS coordinates correspond to a second security zone of the first airport, the second airport, or the stopover airport of the airline flight, the second security zone only allowing entry of the passenger into the second security zone after a second security personnel verifies that the electronic mobile boarding pass, the government-issued ID, and a second in-person appearance of the passenger all match;

in response to verifying that the second GPS coordinates correspond to the second security zone, determining that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match;

receiving, over the network, a second request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a second transaction initiated on the mobile communication device, the second transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the second request and to the determining that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match, responding to the second request with a second confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger, the second confidence level being higher than the first confidence level.

7. The one or more computer-readable media of claim 6, wherein the first security zone is a boarding zone of the first airport, the second airport, or the stopover airport of the airline flight.

8. The one or more computer-readable media of claim 6, wherein the processor is physically remote from the mobile communication device and communicates with the mobile communication device via the network.

9. The one or more computer-readable media of claim 6, wherein the first GPS coordinates are acquired by the processor pulling the first GPS coordinates from the mobile communication device.

10. The one or more computer-readable media of claim 6, wherein the first GPS coordinates are acquired via an application pushing the first GPS coordinates from the mobile communication device.

11. The one or more computer-readable media of claim 6, wherein the first GPS coordinates are stored in the mobile communication device for retroactive validation.

12. The one or more computer-readable media of claim 6, wherein the method further comprises:

correlating the real-world identity of the passenger and the airline flight, as obtained from the electronic mobile boarding pass, with flight information obtained from a further source;

receiving, over the network, a second request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a second transaction initiated on the mobile communication device, the second transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the second request and to the correlating, authenticating with a second confidence level that the mobile communication device is associated with the real-world identity of the passenger, the second confidence level being higher than the first confidence level.

13. The one or more computer-readable media of claim 6, further comprising:

in response to the response with the first confidence level of authentication, delaying performance of the first transaction due to the first confidence level being below a threshold; and

in response to the response with the second confidence level of authentication, performing the second transaction due to the second confidence level being above the threshold.

14. An identity inferring system for inferring real-world identities in a computing environment, comprising:

a memory;

a processor, coupled to the memory, the processor and the memory operable to;

communicate with a mobile communication device;

load an electronic mobile boarding pass from the mobile communication device to the memory, wherein information obtainable from the electronic mobile boarding pass includes identification information of a passenger and flight information having an originating airport, a destination airport, and a stopover airport;

load first global positioning system (GPS) coordinates captured at a first point in time from the mobile communication device to the memory;

verify that the first GPS coordinates correspond to a first security zone of the originating airport, the destination airport, or the stopover airport, the first security zone only allowing entry of the passenger into the first security zone after a first security personnel verifies that the electronic mobile boarding pass, a government-issued ID, and a first in-person appearance of the passenger all match;

in response to the verifying that the first GPS coordinates correspond to the first security zone, determine that the first security personnel verified the electronic mobile boarding pass and the government-issued ID with the first in-person appearance of the passenger;

receive, over a network, a first request to authenticate that the mobile communication device is associated with a real-world identity of the passenger corresponding to the identification information listed in the electronic mobile boarding pass in order to authorize a first transaction initiated on the mobile communication device, the first transaction unrelated to travel associated with the electronic mobile boarding pass;

in response to the first request and to the determining that the first security personnel verified the electronic mobile boarding pass and the government-issued ID with the first in-person appearance of the passenger, responding to the first request with a first confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger;

access flight information from one from a group consisting of;

an airline database, a personal membership airline account, a personal membership travel account, an airport database, and a security database;

verify that the electronic mobile boarding pass matches the flight information; and

receive, over the network, a second request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a second transaction initiated on the mobile communication device, the second transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the second request and to the verifying that the electronic mobile boarding pass matches the flight information, respond to the second request with a second confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger.

15. The identity inferring system of claim 14, wherein the first transaction includes a credit card transaction that is unrelated to the travel associated with the electronic mobile boarding pass.

16. The identity inferring system of claim 14, wherein the first transaction includes a transaction to gain access to records that are privileged to the passenger and that are unrelated to the travel associated with the electronic mobile boarding pass.

17. The identity inferring system of claim 14, wherein the first transaction requires confirmation of an in-person identity of a holder of the mobile communication device and is unrelated to the travel associated with the electronic mobile boarding pass.

18. The identity inferring system of claim 14, wherein the processor and the memory are further operable to:

load second GPS coordinates captured at a second point in time from the mobile communication device to the memory;

verify that the second GPS coordinates correspond to a second security zone of the originating airport, the destination airport, or the stopover airport, the second security zone only allowing entry of the passenger into the second security zone after a second security personnel verifies that the electronic mobile boarding pass, the government-issued ID, and a second in-person appearance of the passenger all match;

in response to verifying that the second GPS coordinates correspond to the second security zone, determine that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match;

receive, over the network, a third request to authenticate that the mobile communication device is associated with the real-world identity of the passenger in order to authorize a third transaction initiated on the mobile communication device, the third transaction unrelated to travel associated with the electronic mobile boarding pass; and

in response to the third request and to the determining that the second security personnel verified that the electronic mobile boarding pass, the government-issued ID, and the second in-person appearance of the passenger all match, respond to the third request with a third confidence level of authentication that the mobile communication device is associated with the real-world identity of the passenger, the third confidence level being higher than the second confidence level.