Sensor-based human authorization evaluation

Patent metadata

Field	Value
Publication number	US-10230729-B2
Application number	US-201715830543-A
Country	US
Kind code	B2
Filing date	Dec 4, 2017
Priority date	Jul 3, 2014
Publication date	Mar 12, 2019
Grant date	Mar 12, 2019

Abstract

A resource-access management system detects whether a user is authorized to access resources. The system may include a user device being configured to include a sensor that detects sensor data associated with the user. Further, the system includes a client qualification engine that determines whether or not a client is authorized to access the resources by comparing the sensor data with a plurality of patterns for evaluating whether or not the user is an authorized user. User scores are generated based on the compared sensor data and the plurality of patterns. Further, a composite score corresponding to the user is generated using the sensor data, plurality of patterns, and one or more additional criteria. Whether the user is granted access to the resources, presented with unauthorized user tests, or blocked from access to the resources depends on the composite score and threshold values.

First claim

What is claimed is:

1. A resource-access management system for selectively granting access to resources based on sensor data obtained by sensors, the system comprising:
a user device that receives input corresponding to a request to access one or more resources, the user device being configured to include a processor that communicates with at least one sensor, the at least one sensor detecting sensor data associated with the user device, and the detected sensor data being stored on the user device;
an access management system, including one or more first processors, that manages assignment of access rights to the one or more resources, the access management system being configured to include:
an agent characterizer, including one or more second processors, configured to:
access the detected sensor data stored on the user device,
access a plurality of patterns, each pattern of the plurality of patterns being a criteria for evaluating the sensor data, the plurality of patterns including a first pattern for determining whether or an extent to which the detected sensor data corresponds to a human, and a second pattern for determining whether or an extent to which the detected sensor data corresponds to a bot user,
perform a first comparison between the accessed sensor data and the first pattern,
perform a second comparison between the accessed sensor data and the second pattern,
compute a first score for the first comparison and a second score for the second comparison,
identify one or more additional criteria for evaluating whether the user device is authorized to access the one or more resources,
evaluate information relating to the user device and the one or more additional criteria, and
generate an evaluation result based on the evaluated information,
compute a composite score corresponding to the user device, based on the first score, the second score, and the evaluation result;

a virtual test engine including one or more third processors configured to determine whether or not to present an unauthorized user test, based on the computed composite score; and
a resource request controller including one or more fourth processors configured to:
identify one or more workflow parameters associated with assigning access rights to user devices, and
automatically modify the one or more workflow parameters, the one or more workflow parameters being automatically modified based on the computed composite score, and each workflow parameter of the one or more workflow parameters enabling the assignment of at least one access right under modifiable constraints.

2. The resource-access management system of claim 1 , wherein:
when the composite score is equal to or less than a first threshold value, the agent characterizer generates a first characterization result indicating that the user device is authorized to access the one or more resources,
when the composite score exceeds the first threshold value and is equal to or less than a second threshold, the agent characterizer generates a second characterization result indicating that additional tests are required to determine whether the user device is authorized to access the one or more resources, and
when the composite score exceeds the second threshold, the agent characterizer generates a third characterization result indicating that the user device is not authorized to access the one or more resources.

3. The resource-access management system of claim 1 , wherein the one or more additional criteria includes a criteria for evaluating a predetermined number of previously transmitted requests to access the one or more resources, the predetermined number of previously transmitted requests being transmitted by a user via the user device, and the criteria for evaluating the predetermined number of previously transmitted requests evaluating a number of instances of the predetermined number of previously transmitted requests where the user device was characterized as being unauthorized to access the resources.

4. The resource-access management system of claim 1 , wherein the one or more additional criteria includes a criteria for evaluating a predetermined number of previously transmitted requests to access the one or more resources, the predetermined number of previously transmitted requests being transmitted by a user via the user device, and the criteria for evaluating the predetermined number of previously transmitted requests evaluating a number of instances of the predetermined number of previously transmitted requests where the user device was characterized as being authorized to access the resources.

5. The resource-access management system of claim 1 , wherein the one or more additional criteria includes a criteria for evaluating a geographical location of the user device based on the sensor data associated with a user.

6. The resource-access management system of claim 2 , wherein the agent characterizer evaluates a geographical location of previously detected users characterized as being unauthorized to access the one or more resources, and
when the geographical location of the user device matches the geographical location of the previously detected users characterized as being unauthorized, the agent characterizer generates the third characterization result indicating that the user device is not authorized to access the one or more resources.

7. The resource-access management system of claim 2 , wherein the agent characterizer evaluates a geographical location of previously detected users characterized as being unauthorized to access the one or more resources, and
when the geographical location of the user device matches the geographical location of the previously detected users characterized as being unauthorized, the agent characterizer generates the second characterization result indicating that additional tests are required to determine whether the user device is authorized to access the one or more resources.

8. The resource-access management system of claim 2 , wherein when the agent characterizer generates the first characterization result, the virtual test engine determines that the unauthorized user test is not to be presented.

9. The resource-access management system of claim 2 , wherein when the agent characterizer generates the second characterization result, the virtual test engine determines that the unauthorized user test is to be presented.

10. The resource-access management system of claim 2 , wherein when the agent characterizer generates the second characterization result, the virtual test engine determines that the unauthorized user test is to be presented.

11. The resource-access management system of claim 1 , further comprising:
a resource request controller configured to receive the request to access the one or more resources, retrieve a parameter relating to the request to access the one or more resources
from a resource store, and dynamically adjust the parameter relating to the request.

12. A computer-implemented method comprising:
receiving, at a user device, input corresponding to a request to access one or more resources, the user device being configured to include a processor that communicates with at least one sensor, the at least one sensor detecting sensor data associated with the user device, and the detected sensor data being stored on the user device;
accessing the detected sensor data stored on the user device;
accessing a plurality of patterns, each pattern of the plurality of patterns being a criteria for evaluating the sensor data, the plurality of patterns including a first pattern for determining whether or an extent to which the detected sensor data corresponds to a hum

Assignees

• Live Nation Entertainment Inc

Inventors

• Du Fengpei
• Lane Michael
• Ives-Halperin Kenneth

Classifications

• G06F2221/2133

  Verifying human interaction, e.g., Captcha · CPC title

• H04L51/04

  Real-time or near real-time messaging, e.g. instant messaging [IM] · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• H04L63/102

  Entity profiles · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title