Systems, methods and apparatus for multivariate authentication

• US 9,137,246 B2
• Filed: 03/14/2013
• Issued: 09/15/2015
• Est. Priority Date: 04/09/2012
• Status: Expired due to Fees

• Current Assignee: VNS Portfolio LLC
• Original Assignee: Brivas, LLC
• Inventors: Parry, Beau Robertson, Boddeti, Yasodekshna
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US13/829,180
• Publication Number:
  US 20130269013A1
• Time in Patent Office: 915 Days
• Field of Search: 713/186
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04N 7/183 for receiving images from a single remote source
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Systems, methods, and apparatus are disclosed for user authentication using a plurality of authentication variables, such as biometrics and contextual data. Example contextual data includes the geographical location of the user, a gesture of the user, and the machine identification of the individual'"'"'s user device.

Claims

1. A non-transitory computer readable medium having instructions stored thereon which when executed by a processor of an authentication computing device cause the processor to:

receive a request for authentication of a user, wherein the request for authentication comprises collected contextual data and one of an image data of the user captured at a first resolution suitable for a first level of available network resources or an image data of the user captured at a second resolution suitable for a second level of available network resources, wherein the first level of available network resources is lower than the second level of available network resources and the first resolution is lower than the second resolution;

compare the received image data of the user to baseline image data of the user;

compare the collected contextual data to an expected contextual data value; and

determine whether to authenticate the user based on the comparison of the received image data of the user to the baseline image data of the user, the comparison of the collected contextual data to the expected contextual data value, and the determined level of available network resources.

2. A method of authenticating a user, the method comprising:

receiving, by an authentication computing system and from a requesting computing device, a request for authentication of the user, wherein the request for authentication comprises, collected contextual data and one of an image data of the user captured at a first resolution in response to a determined first level of available network resources or an image data captured of the user at a second resolution in response to a determined second level of available network resources, wherein the determined first level of available network resources is lower than the determined second level of available network resources and the first resolution is lower than the second resolution;

selectively comparing, by the authentication computing device in response to receiving the image data of the user captured at the first resolution, the image data of the user captured at the first resolution to baseline image data of the user; and

/or

selectively comparing, by the authentication computing device in response to receiving the image data of the user captured at the second resolution, the image data of the user captured at the second resolution, to baseline image data of the user; and

further

comparing, by the authentication computing device, the collected contextual data to an expected contextual data value; and

determining, by the authentication computing device, whether to authenticate the user based on the comparison of the image data of the user captured at the first resolution or the image data of the user captured at the second solution to the baseline image data of the user, the comparison of the collected contextual data to the expected contextual data value, and the determined level of available operational resources.

3. A method comprising:

receiving, by an authentication computing device and from a requesting computing device, an image data of the user captured at a first resolution in response to a determined first level of available network resources;

or

receiving, by the authentication computing device and from the requesting computing device, an image data of the user captured at a second resolution in response to a determined second level of available network resources;

wherein the determined first level of available network resources is lower than the determined second level of available network resources and the first resolution is lower than the second resolution; and

comparing the image data captured at the first resolution with the baseline biometric data in response to receiving the image data captured at the first resolution or comparing the image data of the user in the image captured at the second resolution with the baseline image data in response to receiving the image data captured at the second resolution;

And

in response to a valid comparison, issuing an authentication signal to said requesting computing device.