ADAPTIVE METHOD FOR BIOMETRICALLY CERTIFIED COMMUNICATION

• US 20150046711A1
• Filed: 12/17/2013
• Published: 02/12/2015
• Est. Priority Date: 08/08/2013
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola Mobility LLC (Lenovo Group Ltd.)
• Inventors: Slaby, Jiri, Ady, Roger W.
• Granted Patent: US 9,553,859 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A communication device and method for authentication of a message being transmitted from the communication device. The method includes receiving, by a messaging utility, content of a message provided for transmission from the communication device. Based on a determination that the message requires user authentication before the message is transmitted to a recipient, the method further includes selecting, based on contextual data, one or more biometric capturing components of the communication device; triggering at least one selected biometric capturing component to capture a corresponding biometric input from a user of the communication device; and transmitting the message when the biometric input as belonging to an authorized user of the communication device. In one embodiment, a clearinghouse service authenticates a biometric input from a user of the communication device in order to certify the user and/or the message.

Claims

1. A method for user authentication of a message being transmitted from a communication device, the method comprising:

receiving, by a messaging utility, content of a message provided for transmission from the communication device;

based on a determination that the message requires user authentication before the message is transmitted to a recipient;

selecting, based on contextual data, one or more biometric capturing components of the communication device;

triggering at least one selected biometric capturing component to capture a corresponding biometric input from a user of the communication device; and

transmitting the message when the biometric input is authenticated as belonging to an authorized user of the communication device.

2. The method of claim 1, further comprising:

identifying a credibility compromising factor associated with at least one of (a) the content of the message and (b) a context associated with the communication device;

determining that the message requires user authentication based on the identified credibility compromising factor; and

determining that the message requires biometric user authentication based on a value of the credibility compromising factor being at least a threshold value.

3. The method of claim 2, wherein the credibility compromising factor comprises at least one of (i) a monetary value included within the content of the message exceeding a pre-set threshold;

(ii) a location that is pre-established as unexpected;

(iii) a location that is unexpected based upon historical data for the pre-established authorized user; and

(iv) a location that is unexpected based upon scheduling data for the pre-established authorized user.

4. The method of claim 1, wherein selecting the biometric capturing component based on the contextual data comprises determining that at least one ambient condition indicates that a particular biometrical capturing device is ineffective, wherein the at least one ambient condition comprises at least one of (i) moisture;

(ii) an ambient illumination;

(iii) an obstructed sensor;

(iv) an activity associated with motion of the communication device;

(v) a barometric pressure; and

(vi) ambient noise.

5. The method of claim 1, further comprising determining that the message requires user authentication based on at least one of (i) the content of the message, (ii) a context associated with the communication device, (iii) historical data corresponding to a user associated with the communication device, and (iv) information associated with a recipient of the message.

6. The method of claim 5, wherein:

the content of the message comprises keywords identifying at least one of;

a location from which the message is being transmitted;

a weather condition at the location from which the message is being transmitted;

a physical activity performed by a user who inputs the message; and

a monetary value of significance that is settable by a user of the device;

the context of the communication device comprises at least one of;

a location of the communication device;

a route taken by the communication device;

an ambient environment of the communication device;

a motion detected by the communication device;

the historical data corresponding to a user associated with the communication device comprises at least one of;

a voice that conveyed the message;

an image of a unique physical attribute of a user taken by the communication device;

a motion detected by the communication device;

a pre-set password;

a pre-set security biographical response;

a pre-established biometric image pattern;

a biographical attribute of the user;

a pre-established biometric audio pattern;

a pre-established biometric electrical pattern; and

pattern information of the user;

typical routes, patterns and times; and

the information associated with the recipient of the message comprises at least one of a contact contained in a contact data structure accessible by the communication device;

a linked party in a social network; and

a past recipient of a previous message having similar content transmitted from the communication device.

7. The method of claim 6, wherein triggering the selected biometric capturing component comprises cross-verifying keywords for at least one of the location, the weather condition, monetary value, and the physical activity.

8. The method of claim 1, wherein selecting the specific biometric capturing component based on contextual data comprises:

determining, from at least one of historical data and recipient data, which biometric input is verifiable by a recipient of the message;

selecting a corresponding biometric capturing component based on the determining of the biometric input that is verifiable by the recipient;

including a biometric input that is verifiable by the recipient within a message packet generated for the message; and

transmitting the message with the biometric input included therein for verification at a recipient device, wherein the message is transmitted as a biometrically certified message.

9. The method of claim 1, further comprising:

generating and issuing a prompt requesting the biometric input at the selected biometric capturing component;

establishing a response time for receipt of the biometric input; and

timing out a message sending function in response to not receiving an authenticated biometric input within the established response time.

10. The method of claim 1, further comprising:

in response to the selected biometric capturing component being a camera of the communication device;

capturing an image of a user of the communication device;

performing facial recognition of a captured image; and

authenticating the user in response to the facial recognition identifying a match with a pre-identified image of the user.

11. The method of claim 1, further comprising:

assigning a specific message security level to each biometric capturing component;

determining a message security level of the message associated with at least one of (a) the content of the message and (b) a context associated with the communication device;

comparing the message security level determined for the message with the specific message security level assigned respectively to each biometric capturing component; and

selecting at least one biometric capturing component based upon the message security level and a current context of the communication device.

12. The method of claim 11, wherein:

assigning a specific message security level to each biometric capturing component comprises establishing a high message security level threshold that triggers authentication via a combination of at least two biometric capturing components; and

in response to the message security level exceeding the high message security level threshold;

selecting the combination of at least two biometric capturing components based upon the message security level;

generating and issuing a first prompt requesting a first biometric input at a first selected biometric capturing component of the combination of at least two biometric capturing components; and

in response to receiving and authenticating the first biometric input, generating and issuing a second prompt requesting a second biometric input at another selected biometric capturing component of the combination of at least two biometric capturing components; and

approving transmission of the message in response to the second biometric input also being received and authenticated.

13. The method of claim 1, wherein transmitting the message comprises:

forwarding the biometric input to a clearinghouse service that performs an association of the received biometric input to authoritative information associated with the user and provides an authentication in response to the association being successful;

receiving authentication of the user from the clearinghouse service; and

transmitting the message in response to receiving the authentication.

14. The method of claim 1, further comprising:

selecting a scanner of the one or more biometric capturing components of the communication device;

triggering the scanner to capture the corresponding biometric input comprising a pattern from the user'"'"'s body; and

receiving an authentication confirmation code from one of the communication device and the scanner that is based on the pattern;

forwarding the biometric input comprising the authentication confirmation code to a clearinghouse service that performs an association of the received biometric input to authoritative information associated with the user and provides an authentication in response to the association being successful;

receiving authentication of the user from the clearinghouse service; and

transmitting the message in response to receiving the authentication.

15. A communication device, comprising:

a communication mechanism that enables communicating with a network;

at least one biometric capturing component;

at least one processor that is communicatively coupled to the communication mechanism and to the at least one biometric capturing component;

a messaging utility that executes on the at least one processor and configures the communication device to receive content of a message provided for transmission from the communication device; and

a message certification utility that executes on the at least one processor and configures the communication device to;

based on a determination that the message requires user authentication before the message is transmitted to a recipient;

select, based on contextual data, one or more biometric capturing components of the communication device;

trigger at least one selected biometric capturing component to capture a corresponding biometric input from a user of the communication device; and

transmit the message when the biometric input is authenticated as belonging to an authorized user of the communication device.

16. The communication device of claim 15, wherein the message certification utility further configures the communication device to:

identify a credibility compromising factor associated with at least one of (a) the content of the message and (b) a context associated with the communication device;

determine that the message requires user authentication based on the identified credibility compromising factor; and

determine that the message requires biometric user authentication based on a value of the credibility compromising factor being at least a threshold value.

17. The communication device of claim 16, wherein the credibility compromising factor comprises at least one of:

(i) a monetary value included within the content of the message exceeding a pre-set threshold;

(ii) a location that is pre-established as unexpected;

(iii) a location that is unexpected based upon historical data for the pre-established authorized user; and

(iv) a location that is unexpected based upon scheduling data for the pre-established authorized user.

18. The communication device of claim 15, wherein the message certification utility configuring the communication device to select the biometric capturing component based on the contextual data includes the message certification utility further configuring the communication device to determine that at least one ambient condition indicates that a particular biometrical capturing device is ineffective, wherein the at least one ambient condition comprises at least one of:

(i) moisture;

(ii) an ambient illumination;

(iii) an obstructed sensor;

(iv) an activity associated with motion of the communication device;

(v) a barometric pressure; and

(vi) ambient noise.

19. The communication device of claim 15, wherein the message certification utility further configures the communication device to determine that the message requires user authentication based on at least one of:

(i) the content of the message, (ii) a context associated with the communication device, (iii) historical data corresponding to a user associated with the communication device, and (iv) information associated with a recipient of the message.

20. The communication device of claim 19, wherein:

the content of the message comprises keywords identifying at least one of;

a location from which the message is being transmitted;

a weather condition at the location from which the message is being transmitted;

a physical activity performed by a user who inputs the message; and

a monetary value of significance that is settable by a user of the device;

the context of the communication device comprises at least one of;

a location of the communication device;

a route taken by the communication device;

an ambient environment of the communication device;

a motion detected by the communication device;

the historical data corresponding to a user associated with the communication device comprises at least one of;

a voice that conveyed the message;

an image of a unique physical attribute of a user taken by the communication device;

a motion detected by the communication device;

a pre-set password;

a pre-set security biographical response;

a pre-established biometric image pattern;

a biographical attribute of the user;

a pre-established biometric audio pattern;

a pre-established biometric electrical pattern; and

pattern information of the user; and

the information associated with the recipient of the message comprises at least one of a contact contained in a contact data structure accessible by the communication device;

a linked party in a social network; and

a past recipient of a previous message having similar content transmitted from the communication device.

21. The communication device of claim 20, wherein the message certification utility configuring the communication device to trigger the selected biometric capturing component includes the message certification utility further configuring the communication device to cross-verify keywords for at least one of the location, the weather condition, and the physical activity.

22. The communication device of claim 15, wherein the message certification utility configuring the communication device to select the specific biometric capturing component based on contextual data includes the message certification utility further configuring the communication device to:

determine, from at least one of historical data and recipient data, which biometric input is verifiable by a recipient of the message;

select a corresponding biometric capturing component based on the determining of the biometric input that is verifiable by the recipient;

include a biometric input that is verifiable by the recipient within a message packet generated for the message; and

transmit the message with the biometric input included therein for verification at a recipient device, wherein the message is transmitted as a biometrically certified message.

23. The communication device of claim 15, wherein the message certification utility further configures the communication device to:

generate and issue a prompt requesting the biometric input at the selected biometric capturing component;

establish a response time for receipt of the biometric input; and

time out a message sending function in response to not receiving an authenticated biometric input within the established response time.

24. The communication device of claim 15, wherein the message certification utility further configures the communication device to:

in response to the selected biometric capturing component being a camera of the communication device;

capture an image of a user of the communication device;

perform facial recognition of a captured image; and

authenticate the user in response to the facial recognition identifying a match with a pre-identified image of the user.

25. The communication device of claim 15, wherein:

the at least one biometric capturing component comprises at least two biometric capturing components; and

the message certification utility further configures the communication device to;

assign a specific message security level to each biometric capturing component;

determine a message security level of the message associated with at least one of (a) the content of the message and (b) a context associated with the communication device;

compare the message security level determined for the message with the specific message security level assigned respectively to each biometric capturing component; and

select at least one biometric capturing component based upon the message security level and a current context of the communication device.

26. The communication device of claim 25, wherein:

the message certification utility configuring the communication device to assign a specific message security level to each biometric capturing component includes the message certification utility further configuring the communication device to assign a specific message security level to a combination of at least two biometric capturing components; and

the message certification utility configuring the communication device to select at least one biometric component includes the message certification utility further configuring the communication device to select the combination of at least two biometric capturing components based upon the message security level;

the message certification utility further configures the communication device to;

generate and issue a first prompt requesting the biometric input at a first selected biometric capturing component of the combination of at least two biometric capturing components; and

generate and issue a second prompt requesting a second biometric input at another selected at least one biometric capturing component of the combination of at least two biometric capturing components based upon receiving the biometric input.

27. The communication device of claim 15, wherein the message certification utility configuring the communication device to transmit the message in response to authenticating the biometric input includes the message certification utility configuring the communication device to:

forward the biometric input to a clearinghouse service that performs an association of the received biometric input to authoritative information associated with the user and provides an authentication in response to the association being successful;

receive authentication of the user from the clearinghouse service; and

transmits the message in response to receiving the authentication.

28. The communication device of claim 15, wherein the message certification utility configuring the communication device to transmit the message in response to authenticating the biometric input includes the message certification utility configuring the communication device to:

select a scanner of the one or more biometric capturing components of the communication device;

trigger the scanner to capture the corresponding biometric input comprising a pattern from a portion of the user'"'"'s body;

receive an authentication confirmation code from one of the communication device and the scanner that is based on the pattern;

forward the biometric input comprising the authentication confirmation code to a clearinghouse service that performs an association of the received biometric input to authoritative information associated with the user and provides an authentication in response to the association being successful;

receive authentication of the user from the clearinghouse service; and

transmit the message in response to receiving the authentication.

29. A method for user authentication by a clearinghouse for a message being transmitted from a communication device to a recipient device, the method comprising:

the clearinghouse receiving a biometric input from a communication device;

comparing the received biometric input against clearinghouse biometric verification input/s of registered users in order to authenticate a user of the communication device; and

in response to authenticating the user, generating and transmitting a certification token to the communication device for inclusion in the message being transmitted by the communication device to the recipient device.

30. The method of claim 29, further comprising:

prior to receiving biometric inputs for message authentication from the communication device;

receiving a request to create a user account for the user;

in response to receiving the request, selecting information about the user from an authoritative source;

prompting the user to provide an entry of data corresponding to the selected information;

in response to receiving, from the user, the data entry that corresponds to the selected information, prompting the user to submit one or more clearinghouse biometric verification inputs;

associating the submitted clearinghouse biometric verification inputs with the user; and

storing the clearinghouse biometric verification inputs and user identifier within a clearinghouse database for future access by the user via a communication device to user authenticate a message.

31. The method of claim 29, wherein:

transmitting the certification token further comprises the clearinghouse embedding an expiration criterion with the certification token that dynamically invalidates the certification token based on an occurrence of one of more pre-established conditions at one of the communication device and the recipient device.

32. The method of claim 29, wherein the clearinghouse generating and transmitting the certification token further comprises one or more of:

receiving contextual information transmitted by the communication device;

accessing information about the user in response to receiving the received contextual information; and

incorporating the accessed information in the certification token for access by a recipient device.

33. A clearinghouse server comprising:

a communication interface that enables communication with a communication device that generates messages for transmission to a recipient device;

a network interface by which the clearing house server communicates with an authoritative source that provides unique identifying information about one or more users;

a processor coupled to the communication interface and the network interface;

a storage device coupled to the processor and which includes a certifying utility that executes on the processor to configure the clearinghouse server to;

receive a biometric input from a communication device;

compare the received biometric input against clearinghouse biometric verification input/s of registered users in order to authenticate a user of the communication device; and

in response to authenticating the user, generate and transmit a certification token to the communication device for inclusion in the message being transmitted by the communication device to the recipient device.

34. The clearinghouse server of claim 33, wherein the certifying utility further configures the clearinghouse server to:

prior to receiving biometric inputs for message authentication from the communication device;

receive a request to create a user account for the user;

in response to receiving the request, select information about the user from an authoritative source;

prompt the user to provide an entry of data corresponding to the selected information;

in response to receiving, from the user, the data entry that corresponds to the selected information, prompt the user to submit one or more clearinghouse biometric verification inputs;

associate the submitted clearinghouse biometric verification inputs with the user; and

store the clearinghouse biometric verification inputs and user identifier within a clearinghouse database for future access by the user via a communication device to user authenticate a message.

35. The clearinghouse server of claim 33, wherein:

transmitting the certification token further comprises the clearinghouse embedding an expiration criterion with the certification token that dynamically invalidates the certification token based on an occurrence of one of more pre-established conditions at one of the communication device and the recipient device.

36. The clearinghouse server of claim 33, wherein the clearinghouse transmitting the certification token further comprises one or more of:

receiving contextual information transmitted by the communication device;

accessing information about the user; and

incorporating the accessed information in the certification token for access by a recipient device.