Self-adaptive secure authentication system

Patent metadata

Field	Value
Publication number	US-10681024-B2
Application number	US-201715610558-A
Country	US
Kind code	B2
Filing date	May 31, 2017
Priority date	May 31, 2017
Publication date	Jun 9, 2020
Grant date	Jun 9, 2020

Abstract

A method, a system, and a non-transitory computer readable program code are disclosed for authenticating users for services. The method includes registering one or more users in an authentication system; assigning a score index to each of the one or more users in the authentication system for one or more services, the score index representing a security level and corresponding authentication required to access each of the one or more services; inputting each request for services from the one or more users into the authentication system to continuously update the score index for each of the one or more users, each of the requests including one or more authenticators or biometric identifiers for the requested service; and requesting the one or more users to register one or more additional authenticators or biometric identifiers with the authentication system upon the score index for a user reaching of a predefined threshold value.

First claim

What is claimed is:

1. A method of authenticating users for services, the method comprising:
registering one or more users in an authentication system;
assigning a score index to each of the one or more users in the authentication system for one or more services, the score index representing a numerical value corresponding to a security level and corresponding authentication required to access each of the one or more services;
inputting each request for services from a user of the one or more users into the authentication system to continuously update the score index for the user, each of the request for services including one or more authenticators or biometric identifiers for the requested service;
calculating a new score index for the user after each request for services from the user, the new score index representing a change in the numerical value corresponding to the security level of the user for access to the one or more services calculated in real-time using a machine-learning algorithm, the machine-learning algorithm configured to calculate the new score index based on a combination of user activities and other user information; and
requesting the user to enter one or more additional authenticators or biometric identifiers with the authentication system upon the numerical value of the new score index for the user reaching a predefined threshold value.

2. The method of claim 1 , comprising:
assigning a default score index to each of the one or more users based on one or more attributes, the default score index reflecting an initial security level for each of the one or more users.

3. The method of claim 1 , comprising:
receiving a request for a service from the user, the request including at least one authenticator or biometric identifier; and
granting the user access to the service when the at least one authenticator or biometric identifier is sufficient based on the score index of the user and the authenticator or biometric identifier provides a credential or matches a stored authenticator or biometric identifier for the user.

4. The method of claim 1 , wherein the at least one authenticator or biometric identifier comprises:
at least one authenticator and at least one biometric identifier.

5. The method of claim 1 , comprising:
receiving a biometric identifier from a biometric authentication device, the biometric authentication device including at least one of the following:
a sensor, a scanning device, or an electronic reader; and

wherein the biometric identifier is at least one physiological characteristic of a user, and wherein the at least one physiological characteristic is selected from one or more of the following:
fingerprints, palm veins, face recognition, DNA (or deoxyribonucleic acid), palm print, hand geometry, iris recognition, retina, and/or odor/scent.

6. The method of claim 1 , wherein an authenticator of the one or more authenticators or biometric identifiers comprises:
a keypad for a username and password (“password”), and/or a sensor, scanning device, or an electronic reader, which can read and/or obtain data from one or more of the following:
a proximity cards, a radio-frequency identification (RFID) card, smart cards, and/or RSA tokens.

7. The method of claim 1 , wherein the one or more services comprise one or more of the following:
accessing a home or office;
accessing a client device or a host device; and
accessing a database on the client device or the host device.

8. The method of claim 1 , comprising:
calculating the new score index for the user based on at least a time of a request for a service and/or a location of the request for the service.

9. The method of claim 8 , comprising:
further calculating the new score index based on a type of service in the request for the service.

10. The method of claim 1 , comprising:
creating a biometric template for each of the one or more users with a biometric device, and forwarding the biometric template from the biometric device to the authentication system.

11. The method of claim 10 , comprising:
processing the biometric template received from the biometric device to create a unique signature for each of the one or more users, and wherein the unique signature for each of the one or more users is used to grant or deny access to the one or more services.

12. A non-transitory computer readable program code configured to execute a process of authenticating users for services, the process comprising:
registering one or more users in an authentication system;
assigning a score index to each of the one or more users in the authentication system for one or more services, the score index representing a numerical value corresponding to a security level and corresponding authentication required to access each of the one or more services;
inputting each request for services from a user of the one or more users into the authentication system to continuously update the score index for the user, each of the request for services including one or more authenticators or biometric identifiers for the requested service;
calculating a new score index for the user after each request for services from the user, the new score index representing a change in the numerical value corresponding to the security level of the user for access to the one or more services calculated in real-time using a machine-learning algorithm, the machine-learning algorithm configured to calculate the new score index based on a combination of user activities and other user information; and
requesting the user to enter one or more additional authenticators or biometric identifiers with the authentication system upon the numerical value of the new score index for the user reaching a predefined threshold value.

13. An authentication system configured to grant authentication to a user of a service, the authentication system comprising:
a server having a processor configured to:
register one or more users in an authentication system;
assign a score index to each of the one or more users in the authentication system for one or more services, the score index representing a numerical value corresponding to a security level and corresponding authentication required to access each of the one or more services;
input each request for services from a user of the one or more users into the authentication system to continuously update the score index for the user, each of the request for services including one or more authenticators or biometric identifiers for the requested service;
calculate a new score index for the user after each request for services from the user, the new score index representing a change in the numerical value corresponding to the security level of the user for access to the one or more services calculated in real-time using a machine-learning algorithm, the machine-learning algorithm configured to calculate the new score index based on a combination of user activities and other user information; and
request the user to enter one or more additional authenticators or biometric identifiers with the authentication system upon the numerical value of the score index for the user reaching a predefined threshold value.

14. The authentication system of claim 13 , wherein the processor is configured to:
receive a request for a service from the user, the request including at least one authenticator or biometric identifier; and
grant the user access to the service when the at least one authenticator or biometric identifier is sufficient based on the score index of the user and the authenticator or biometric identifier provides a credential or matches a

Assignees

• Konica Minolta Laboratory Usa Inc

Inventors

• Badri Subramanyam
• Sista Sarma

Classifications

• H04L63/06 Primary

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title