User authentication based on telematics information

• US 10,623,401 B1
• Filed: 01/06/2017
• Issued: 04/14/2020
• Est. Priority Date: 01/06/2017
• Status: Active Grant

• Current Assignee: Allstate Insurance Company (Allstate Corporation)
• Original Assignee: Allstate Insurance Company (Allstate Corporation)
• Inventors: Yager, Floyd
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US15/400,104
• Time in Patent Office: 1,194 Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Aspects of the present disclosure are directed to systems and methods for authenticating a user requesting access to a computing resource based on telematics data. A system may include a telematics device associated with a vehicle having one or more sensors arranged therein, a mobile device, and a server computer. The server computer may receive telematics data of a user associated with the vehicle from the telematics device, store the telematics data in memory, receive a request to authenticate the user, generate one or more questions for authenticating the user based on the telematics data, transmit the one or more questions for presentation to the user, receive one or more answers to the one or more questions from the mobile device, and transmit, to the mobile device, an indication of whether the user is authenticated based on the one or more answers.

Claims

1. A system comprising:

a telematics device associated with a vehicle having one or more sensors arranged therein;

a mobile device of a user associated with the vehicle; and

a server computer, comprising hardware including a processor and memory, the server computer configured to;

receive, from the one or more sensors and via the telematics device, telematics data of the user associated with the vehicle, wherein the telematics data is collected over a first period of time;

store the telematics data of the user associated with the vehicle in the memory of the server computer;

receive, from the mobile device, a request to authenticate the user to access an application on the mobile device of the user;

generate one or more questions for authenticating the user based on the telematics data of the user;

receive, from the one or more sensors and via the telematics device, updated telematics data of the user collected over a second period of time, wherein the second period of time is after the first period of time; and

modify the one or more questions for authenticating the user based on the updated telematics data of the user;

transmit, to the mobile device, the modified one or more questions for presentation to the user;

receive, from the mobile device, one or more answers to the modified one or more questions; and

transmit, to the mobile device, an indication of whether the user is authenticated and permitted to access the application based on the one or more answers.

2. The system of claim 1, wherein the one or more sensors comprise at least one of an accelerometer, speedometer, gyroscope, and GPS, wherein the telematics data comprises real-time data that is collected by the one or more sensors while the user is driving the vehicle.

3. The system of claim 2, wherein the real-time data comprises at least one of a driving speed, an acceleration measurement, a braking measurement, a steering measurement, a number of miles driven for a trip, a road condition rating, a trip time, or a trip duration, and wherein the real-time data is collected over a predetermined period of time.

4. The system of claim 1, wherein the server computer is further configured to:

parse the telematics data to identify location-related data, time-related data, and route-related data;

determine one or more anomalies in at least one of the location-related data, time-related data, and route-related data; and

generate the one or more questions for authenticating the user further based on the one or more anomalies.

5. The system of claim 1, wherein the server computer is further configured to:

generate the one or more questions for authenticating the user further based on insurance information of the user or vehicle information of the vehicle, wherein the user is an insurance policy holder, and wherein the vehicle is insured by an insurance company.

6. The system of claim 1, wherein the one or more questions for authenticating the user comprise one or more multiple-choice questions, and wherein the server computer is further configured to:

generate a plurality of answer choices for each multiple-choice question based on analyzing the telematics data of the user associated with the vehicle.

7. The system of claim 1, wherein the server computer is further configured to:

grant access to the application to the user responsive to determining that the user is authenticated.

8. An apparatus comprising:

at least one processor;

a network interface configured to communicate, via a network, with a telematics device and a first computing device; and

a memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to;

receive, from the telematics device, telematics data of a user associated with a vehicle;

store the telematics data of the user associated with the vehicle in the memory;

receive, from the first computing device, a request to authenticate the user to access an application on the first computing device;

parse the telematics data to identify location-related data, time-related data, and route-related data;

determine one or more anomalies in at least one of the location-related data, time-related data, and route-related data;

generate one or more questions for authenticating the user based on the telematics data of the user and further based on the one or more anomalies;

transmit, to the first computing device, the one or more questions for presentation to the user;

receive, from the first computing device, one or more answers to the one or more questions; and

transmit, to the first computing device, an indication of whether the user is authenticated and permitted to access the application based on the one or more answers.

9. The apparatus of claim 8, wherein the first computing device comprises a mobile device of the user, and wherein the user is an insurance policy holder.

10. The apparatus of claim 8, wherein the telematics data comprises real-time data that is collected by one or more sensors arranged in the vehicle while the user is driving the vehicle, and wherein the real-time data comprises at least one of a driving speed, an acceleration measurement, a braking measurement, a steering measurement, a number of miles driven for a trip, a road condition rating, a trip time, or a trip duration, and wherein the real-time data is collected over a predetermined period of time.

11. The apparatus of claim 10, wherein the instructions, when executed by the at least one processor, further cause the apparatus to:

receive, from the one or more sensors and via the telematics device, updated telematics data of the user collected over a second predetermined period of time, wherein the second predetermined period of time is after the predetermined period of time; and

modify the one or more questions for authenticating the user based on the updated telematics data of the user.

12. The apparatus of claim 8, wherein the instructions, when executed by the at least one processor, further cause the apparatus to:

generate the one or more questions for authenticating the user further based on insurance information of the user or vehicle information of the vehicle, wherein the vehicle is insured by an insurance company.

13. The apparatus of claim 8, wherein the one or more questions for authenticating the user comprise one or more multiple-choice questions, and wherein the instructions, when executed by the at least one processor, further cause the apparatus to:

generate a plurality of answer choices for each multiple-choice question based on analyzing the telematics data of the user associated with the vehicle.

14. The apparatus of claim 8, wherein the instructions, when executed by the at least one processor, further cause the apparatus to:

grant access to the application responsive to determining that the user is authenticated.

15. A method comprising:

receiving, at a computing device and from a telematics device associated with a vehicle having one or more sensors arranged therein, telematics data of a user associated with the vehicle;

storing, at a data store of the computing device, the telematics data of the user associated with the vehicle;

receiving, at the computing device and from a mobile device of the user, a request to authenticate the user to access an application on the mobile device of the user;

parsing, by the at least one processor of the computing device, the telematics data to identify location-related data, time-related data, and route-related data;

determining, by the at least one processor of the computing device, one or more anomalies in at least one of the location-related data, time-related data, and route-related data;

generating, by at least one processor of the computing device, one or more questions for authenticating the user based on the telematics data of the user and further based on the one or more anomalies;

transmitting, to the mobile device, the one or more questions for presentation to the user;

receiving, from the mobile device, one or more answers to the one or more questions; and

transmitting, to the mobile device, an indication of whether the user is authenticated and permitted to access the application based on the one or more answers.

16. The method of claim 15, further comprising:

generating, by the at least one processor of the computing device, the one or more questions for authenticating the user further based on insurance information of the user or vehicle information of the vehicle, wherein the user is an insurance policy holder, and wherein the vehicle is insured by an insurance company.

17. The method of claim 15, further comprising:

granting access to the application residing at the mobile device responsive to determining that the user is authenticated.