METHOD AND SYSTEM FOR MULTI-FACTOR BIOMETRIC AUTHENTICATION

• US 20130227651A1
• Filed: 02/28/2012
• Published: 08/29/2013
• Est. Priority Date: 02/28/2012
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Schultz, Paul T., Sartini, Robert A.
• Granted Patent: US 9,323,912 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An approach for enabling multi-factor biometric authentication of a user of a mobile device is described. A biometric authenticator captures, via a mobile device, first and second biometric data for a user. The biometric authentication further associates the first biometric data and the second biometric data. The biometric authenticator then initiates a multi-factor authentication procedure that utilizes the first biometric data and the second biometric data to authenticate the user based on the association.

Claims

1. A method comprising:

capturing, via a mobile device, a first biometric data for a user;

further capturing, via the mobile device, a second biometric data for the user;

associating the first biometric data and the second biometric data;

initiating a multi-factor authentication procedure that utilizes the first biometric data and the second biometric data to authenticate the user based on the association; and

determining a correlation between the first biometric data and the second biometric data.

2. A method of claim 1, further comprising:

generating a request for the user to respond to a command, a question, or a combination thereof,

wherein the first biometric data and the second biometric data are based on the response.

3. A method of claim 2, wherein the first biometric data and the second biometric data includes voice data, face data, fingerprint data, iris data, retinal data, vein data or a combination thereof.

4. A method of claim 2, wherein the response is a password, a user identifier, an answer to a challenge question, a phrase, a facial expression, a bodily feature, a sequence of movements of the mobile device, a sequence of movements by the user, or a combination thereof.

5. A method of claim 1,

wherein the correlation is based on voice recognition, facial recognition, fingerprint recognition, iris analysis, retinal analysis, vein analysis, or a combination thereof, and wherein the first biometric data and the second biometric data are acquired concurrently as part of the multi-factor authentication procedure.

6. A method of claim 5, wherein the voice recognition, the facial recognition, the fingerprint recognition, the iris analysis, the retinal analysis, the vein analysis, or a combination thereof is performed by the mobile device, a network service, or a combination thereof.

7. A method of claim 1, further comprising:

determining rights of the user based on the association,

wherein the rights correspond to a level of access, use, entry, or allocation of a resource associated with the multi-factor authentication procedure.

8. A method of claim 7, wherein the resource is another mobile device, a wireless node, a security system, a service, or a combination thereof.

9. A method of claim 1, further comprising:

determining context information related to the mobile device; and

determining whether the context information matches one or more criteria associated with the multi-factor authentication procedure.

10. A method of claim 9, wherein the context information includes location information, a mobile device identifier, a resource identifier, time information, network information, motion information, log data, or a combination thereof.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

capturing, via a mobile device, a first biometric data for a user;

further capturing, via the mobile device, a second biometric data for the user;

associating the first biometric data and the second biometric data;

initiating a multi-factor authentication procedure that utilizes the first biometric data and the second biometric data to authenticate the user based on the association; and

determining a correlation between the first biometric data and the second biometric data.

12. An apparatus of claim 11, further comprising:

generating a message, at the mobile device, for requesting the user to respond to a command, a question, or a combination thereof,

wherein the first biometric data and the second biometric data are based on the response

13. An apparatus of claim 12, wherein the first biometric data and the second biometric data includes voice data, face data, fingerprint data, iris data, retinal data, vein data, or a combination thereof.

14. An apparatus of claim 12, wherein the response is a password, a user identifier, an answer to a challenge question, a phrase, a facial expression, a bodily feature, a sequence of movements of the mobile device, or a combination thereof.

15. An apparatus of claim 11,

wherein the correlation is based on voice recognition, facial recognition, fingerprint recognition, iris analysis, retinal analysis, vein analysis, or a combination thereof,

wherein the first biometric data and the second biometric data are acquired concurrently as part of the multi-factor authentication procedure.

16. An apparatus of claim 15, wherein the voice recognition, the facial recognition, the fingerprint recognition, the iris analysis, the retinal analysis, the vein analysis, or a combination thereof is performed by the mobile device, a network service, or a combination thereof.

17. An apparatus of claim 11, further comprising:

determining rights of the user based on the association,

wherein the rights correspond to a level of access, use, entry, or allocation of a resource associated with the multi-factor authentication procedure.

18. An apparatus of claim 17, wherein the resource is another mobile device, a wireless node, a security system, a service, or a combination thereof.

19. An apparatus of claim 11, further comprising:

determining context information related to the mobile device; and

determining whether the context information matches one or more criteria associated with the multi-factor authentication procedure.

20. An apparatus of claim 19, wherein the context information includes location information, a mobile device identifier, a resource identifier, time information, network information, or a combination thereof.