Authentication of users for securing remote controlled devices

Patent metadata

Field	Value
Publication number	US-11117664-B2
Application number	US-201916544680-A
Country	US
Kind code	B2
Filing date	Aug 19, 2019
Priority date	Mar 15, 2017
Publication date	Sep 14, 2021
Grant date	Sep 14, 2021

Abstract

In one embodiment, a method includes limiting functionality of a remote controlled device during a first period of time where a user of the remote controlled device is not authenticated, receiving, from a separate authentication device, identity information of the user of the remote controlled device and information of the remote controlled device via an authentication process, authenticating the user prior to allowing full functionality of the remote controlled device, sending an indication of the identity of the user to the remote controlled device; and in response to determining during the authenticating that the user is verified as a trainee for the remote controlled device, enabling a trainer/trainee setting that allows a trainer to provide control of the remote controlled device to the trainee without functionality of the remote controlled device being limited.

First claim

What is claimed is:

1. A system, comprising:
a processing circuit; and
logic integrated with the processing circuit, executable by the processing circuit, or integrated with and executable by the processing circuit, the logic being configured to cause the processing circuit to:
limit functionality of a remote controlled device during a first period of time where a user of the remote controlled device is not authenticated, including:
setting a rotations per minute (RPM) limiter on one or more propellers of the remote controlled device,
disabling one or more cameras of the remote controlled device, and
disabling audio recording and transmission of the remote controlled device;

receive, from a separate authentication device, identity information of the user of the remote controlled device and information of the remote controlled device via an authentication process, wherein the identity information establishes an identity of the user and the remote controlled device, and includes a unique code provided to the user by an authorizing agency of the remote controlled device as well as a registration number for the remote controlled device;
authenticate the user prior to allowing full functionality of the remote controlled device, including:
communicating with a database that includes records of authorized users for the remote controlled device,
comparing the identity information of the user with the records of the database, and
verifying the identity of the user, based on the comparing;

send an indication of the identity of the user to the remote controlled device;
in response to determining during the authenticating that the user is verified as a trainee for the remote controlled device, enable a trainer/trainee setting that allows a trainer to provide control of the remote controlled device to the trainee without functionality of the remote controlled device being limited; and
during operation of the remote controlled device:
periodically read a fingerprint of the user to ensure that the user is still controlling the remote controlled device,
request a spoken password from the user, and
perform a re-authentication of the user, based on the spoken password;
wherein the identity information further comprises:
a fingerprint of the user,
a voice sample of the user,
an optical scan of an eye of the user,
facial recognition of the user, and
a secure link with an electronic device of the user;

wherein the indication of the identity of the user includes:
a name of the user,
a physical address of the user,
an internet protocol (IP) address of a remote controller and the authentication device,
a media access control (MAC) address of the remote controller and the authentication device,
an image depicting at least a face of the user,
a registration code unique to the user, and
the unique code provided to the user by the authorizing agency of the remote controlled device.

2. The system as recited in claim 1 , wherein the logic is further configured to cause the processing circuit to provide full functionality of the remote controlled device to the user during a second period of time in response to the authenticating.

3. The system as recited in claim 1 , wherein the logic is further configured to cause the processing circuit to maintain a wireless link to the separate authentication device during operation of the remote controlled device.

4. The system as recited in claim 1 , wherein the logic is further configured to cause the processing circuit to restrict the full functionality of the remote controlled device to the user to a predetermined level of functionality, based on a class of the user.

5. The system as recited in claim 1 , wherein the logic is further configured to cause the processing circuit to detect a disruption in a wireless link for greater than a predetermined amount of time during the operation of the remote controlled device.

6. The system as recited in claim 5 , wherein the logic is further configured to cause the processing circuit to restrict the functionality of the remote controlled device, in response to detecting the disruption, including terminating a provision of operation commands to the remote controlled device.

7. A method, comprising:
limiting functionality of a remote controlled device during a first period of time where a user of the remote controlled device is not authenticated, including:
setting a rotations per minute (RPM) limiter on one or more propellers of the remote controlled device,
disabling one or more cameras of the remote controlled device, and
disabling audio recording and transmission of the remote controlled device;

receiving, from a separate authentication device, identity information of the user of the remote controlled device and information of the remote controlled device via an authentication process, wherein the identity information establishes an identity of the user and the remote controlled device, and includes a unique code provided to the user by an authorizing agency of the remote controlled device as well as a registration number for the remote controlled device;
authenticating the user prior to allowing full functionality of the remote controlled device, including:
communicating with a database that includes records of authorized users for the remote controlled device,
comparing the identity information of the user with the records of the database, and
verifying the identity of the user, based on the comparing;

sending an indication of the identity of the user to the remote controlled device;
in response to determining during the authenticating that the user is verified as a trainee for the remote controlled device, enabling a trainer/trainee setting that allows a trainer to provide control of the remote controlled device to the trainee without functionality of the remote controlled device being limited; and
during operation of the remote controlled device:
periodically reading a fingerprint of the user to ensure that the user is still controlling the remote controlled device,
requesting a spoken password from the user, and
performing a re-authentication of the user, based on the spoken password;
wherein the identity information further comprises:
a fingerprint of the user,
a voice sample of the user,
an optical scan of an eye of the user,
facial recognition of the user, and
a secure link with an electronic device of the user;

wherein the indication of the identity of the user includes:
a name of the user,
a physical address of the user,
an internet protocol (IP) address of a remote controller and the authentication device,
a media access control (MAC) address of the remote controller and the authentication device,
an image depicting at least a face of the user,
a registration code unique to the user, and
the unique code provided to the user by the authorizing agency of the remote controlled device.

8. The method as recited in claim 7 , further comprising providing full functionality of the remote controlled device to the user during a second period of time in response to the authenticating.

9. The method as recited in claim 7 , further comprising maintaining a wireless link to the separate authentication device during operation of the remote controlled device.

10. The method as recited in claim 7 , further comprising restricting the full functionality of the remote controlled device to the user to a predetermined level of functionality, based on a class of the user.

11. The method as recited in claim 7 , further comprising detecting a disruption in a wireless link for greater than a predetermined amount of time during the operation of the remote controll

Assignees

• IBM

Inventors

• Amisano Michael A
• Behnken John F
• Linton Jeb R
• Melchionne John
• Wright David K

Classifications

• B64U2201/20

  Remote controls · CPC title

• B64U10/14

  with four distinct rotor axes, e.g. quadcopters · CPC title

• G05D1/0022

  characterised by the communication link (data switching networks in general H04L12/00) · CPC title

• H04W12/065

  Continuous authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title