Sensor-based human authorization evaluation

Patent metadata

Field	Value
Publication number	US-10764293-B2
Application number	US-201916298453-A
Country	US
Kind code	B2
Filing date	Mar 11, 2019
Priority date	Jul 3, 2014
Publication date	Sep 1, 2020
Grant date	Sep 1, 2020

Abstract

A resource-access management system detects whether a user is authorized to access resources. The system may include a user device being configured to include a sensor that detects sensor data associated with the user. Further, the system includes a client qualification engine that determines whether or not a client is authorized to access the resources by comparing the sensor data with a plurality of patterns for evaluating whether or not the user is an authorized user. User scores are generated based on the compared sensor data and the plurality of patterns. Further, a composite score corresponding to the user is generated using the sensor data, plurality of patterns, and one or more additional criteria. Whether the user is granted access to the resources, presented with unauthorized user tests, or blocked from access to the resources depends on the composite score and threshold values.

First claim

What is claimed is:

1. A computer-implemented method comprising:
detecting, at a resource management system, a first request for one or more access rights to a resource stored at the resource management system, the first request being transmitted by a first user device associated with a first user, and the first user device being configured to include at least one sensor generating first sensor data generated by movement of the first user device;
accessing the first sensor data associated with the first user device;
evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device, the evaluation using a parameter associated with the first request;
denying the first user access to the one or more access rights when the first user is determined not to be authorized to access the one or more access rights;
detecting, at the resource management system, a second request to access the one or more access rights, the second request being transmitted by a second user device associated with a second user;
accessing second sensor data associated with the second user device;
determining whether the second sensor data is behaviorally similar to the first sensor data, the determination being based at least in part on a parameter associated with the second request;
in response to determining that the second sensor data is behaviorally similar to the first sensor data, grouping the first user and the second user into a group associated with a bot;
determining that the second user is not authorized to access the one or more access rights, the determination being based at least in part on the grouping of the first user and the second user; and
denying the second user access to the one or more access rights.

2. The computer-implemented method of claim 1 , wherein the parameter of the first request corresponds to a first geographical location of the first user device, and the parameter of the second request corresponds to a second geographical location of the second user device.

3. The computer-implemented method of claim 2 , wherein the second sensor data is behaviorally similar to the first sensor data when the first geographical location corresponds to the second geographical location.

4. The computer-implemented method of claim 1 , wherein the parameter of the first request corresponds to an interne protocol (IP) address of the first user device, and the parameter of the second request corresponds to an IP address of the second user device.

5. The computer-implemented method of claim 1 , further comprising:
when the second sensor data is behaviorally similar to the first sensor data, evaluating whether the second user is authorized to access the one or more access rights based on second sensor data associated with the second user device.

6. The computer-implemented method of claim 1 , wherein evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device includes evaluating whether the first sensor data is associated with a characteristic that corresponds to a bot user.

7. A system, comprising:
one or more data processors; and
a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more data processors, cause the one or more data processors to perform operations including:
detecting, at a resource management system, a first request for one or more access rights to a resource stored at the resource management system, the first request being transmitted by a first user device associated with a first user, and the first user device being configured to include at least one sensor generating first sensor data generated by movement of the first user device;
accessing the first sensor data associated with the first user device;
evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device;
denying the first user access to the one or more access rights when the first user is determined not to be authorized to access the one or more access rights;
detecting, at the resource management system, a second request to access the one or more access rights, the second request being transmitted by a second user device associated with a second user;
accessing second sensor data associated with the second user device;
determining whether the second sensor data is behaviorally similar to the first sensor data, the determination being based at least in part on a parameter associated with the second request;
in response to determining that the second sensor data is behaviorally similar to the first sensor data, grouping the first user and the second user into a group associated with a bot;
determining that the second user is not authorized to access the one or more access rights, the determination being based at least in part on the grouping of the first user and the second user; and
denying the second user access to the one or more access rights.

8. The system of claim 7 , wherein the parameter of the first request corresponds to a first geographical location of the first user device, and the parameter of the second request corresponds to a second geographical location of the second user device.

9. The system of claim 8 , wherein the second sensor data is behaviorally similar to the first sensor data when the first geographical location corresponds to the second geographical location.

10. The system of claim 7 , wherein the parameter of the first request corresponds to an internet protocol (IP) address of the first user device, and the parameter of the second request corresponds to an IP address of the second user device.

11. The system of claim 7 , further comprising:
when the second sensor data is behaviorally similar to the first sensor data, evaluating whether the second user is authorized to access the one or more access rights based on sensor data associated with the second user device.

12. The system of claim 7 , wherein evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device includes evaluating whether the first sensor data is associated with a characteristic that corresponds to a bot user.

13. A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including:
detecting, at a resource management system, a first request for one or more access rights to a resource stored at the resource management system, the first request being transmitted by a first user device associated with a first user, and the first user device being configured to include at least one sensor generating first sensor data generated by movement of the first user device;
accessing the first sensor data associated with the first user device;
evaluating whether the first user is authorized to access the one or more access rights based on the first sensor data associated with the first user device;
denying the first user access to the one or more access rights when the first user is determined not to be authorized to access the one or more access rights;
detecting, at the resource management system, a second request to access the one or more access rights, the second request being transmitted by a second user device associated with a second user;
accessing second sensor data associated with the second user device;
determining whet

Assignees

• Live Nation Entertainment Inc

Inventors

• Du Fengpei
• Lane Michael
• Ives-Halperin Kenneth

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• H04L51/222

  using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area · CPC title

• H04L67/535

  Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34) · CPC title

• H04L67/52

  specially adapted for the location of the user terminal · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title