Authentication using credentials submitted via a user premises device

Patent metadata

Field	Value
Publication number	US-11122045-B2
Application number	US-201916429643-A
Country	US
Kind code	B2
Filing date	Jun 3, 2019
Priority date	Feb 17, 2017
Publication date	Sep 14, 2021
Grant date	Sep 14, 2021

Abstract

An authentication system can be operable to receive from a user premises device credentials associated with a user identity, wherein the user premises device can also be operable to monitor and control a premise of the user identity. The authentication system can process the credentials and transmit an authentication verification to an on-line system to enable access to the on-line system by a user equipment of the user identity. The authentication system can be used as a factor (or additional factor) of authentication, for example, to gain sooner access to an on-line system that has locked out a user identity in response to a personal denial of service (PDoS) attack.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a first system comprising a processor, an unlock request that was transmitted by a second system in response to a condition in which a user identity has been denied access to the second system for a period based on repeated unsuccessful attempts to access the second system using a login associated with the user identity;
based on receipt of the unlock request, sending, by the first system, a prompt for a credential displayed on a user premises equipment located within a premises associated with the user identity, wherein:
the user premises equipment performs monitoring and controlling of the premises, and
the second system provides a service that is unrelated to the monitoring and the controlling of the premises;

generating, by the first system, a time duration for the credential to be input into the user premises equipment;
receiving, by the first system from the user premises equipment, the credential that was input into the user premises equipment within the time duration;
comparing, by the first system, the credential with a stored credential obtained prior to receipt of the credential; and
in response to the credential being determined to match the stored credential, transmitting, by the first system, an authentication verification to the second system enabling the access to the second system.

2. The method of claim 1 , wherein the user premises equipment monitors and controls a lighting equipment in the premises.

3. The method of claim 1 , wherein the user premises equipment monitors and controls a parameter of a security equipment of a physical security network of the premises.

4. The method of claim 1 , wherein the user premises equipment monitors and controls a temperature in the premises.

5. The method of claim 1 , wherein the credential comprises a picture associated with the user identity, and wherein the picture is taken by a camera associated with the user premises equipment.

6. The method of claim 1 , wherein the credential comprises a biometric credential associated with the user identity, and wherein the biometric credential is input via a biometric reader associated with the user premises equipment.

7. The method of claim 6 , wherein the biometric credential comprises a fingerprint relating to a finger associated with the user identity, and wherein the biometric reader comprises a fingerprint reader.

8. The method of claim 6 , wherein the biometric credential comprises a voice print relating to speech associated with the user identity, and wherein the biometric reader comprises a microphone.

9. The method of claim 6 , wherein the biometric credential comprises a retinal scan relating to an eye associated with the user identity, and wherein the biometric reader comprises a retinal scanner.

10. The method of claim 6 , wherein the biometric credential comprises an iris image relating to an eye associated with the user identity, and wherein the biometric reader comprises an iris scanner.

11. The method of claim 6 , wherein the biometric credential comprises a hand geometry measurement relating to a hand associated with the user identity, and wherein the biometric reader comprises a hand geometry reader.

12. A system, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
receiving an unlock request from a server that facilitates provision of a service, wherein the unlock request was generated by the server in response to a user identity being denied access to the service for a period due to repeated unsuccessful attempts to access the service using a login associated with the user identity;
generating a time duration for a first credential to be input into user premises equipment;
receiving, from the server, the first credential related to the user identity that was obtained via the user premises equipment, wherein:
the user premises equipment is used for monitor and control of equipment of a premises associated with, and accessible using, the user identity, and is located within the premises, and
the service is unrelated to the monitor and the control of the equipment devices;

comparing the first credential with a second credential of the user identity obtained from a memory accessible to the server, wherein the second credential was obtained prior to receipt of the first credential; and
in response to the first credential being determined to match the second credential within the time duration, transmitting an authentication verification to the server enabling the access to the service.

13. The system of claim 12 , wherein the user premises equipment monitors and controls lighting in the premises.

14. The system of claim 12 , wherein the user premises equipment monitors and controls a parameter related to a physical security of the premises.

15. The system of claim 12 , wherein the user premises equipment monitors and controls a temperature in the premises.

16. The system of claim 12 , wherein the first credential comprises an image related to the user identity, and wherein a camera associated with the user premises equipment captured the image.

17. The system of claim 12 , wherein the first credential comprises a biometric credential was input via a biometric reader associated with the user premises equipment.

18. A non-transitory machine-readable medium, comprising executable instructions that, when executed by an identity verification system comprising a processor, facilitate performance of operations, comprising:
receiving an unlock request for access to an on-line system in response to the access being denied for a period to the on-line system based on multiple unsuccessful attempts to log in to the on-line system using a login credential associated with a user identity;
receiving a time period applicable to a first credential being determined to be input into user premises equipment;
receiving, from the user premises equipment, the first credential that was obtained via the user premises equipment, wherein the user premises equipment is located in a premises accessible using the user identity, and wherein the user premises equipment monitors and controls a device unrelated to a service that the on-line system enables;
comparing the first credential with a second credential of the user identity obtained from a memory accessible to the identity verification system, wherein the second credential was obtained prior to receipt of the first credential; and
in response to the first credential being determined to match the second credential within the time period, transmitting an authentication verification to the on-line system that facilitates the access to the on-line system.

19. The non-transitory machine-readable medium of claim 18 , wherein the device unrelated to the service comprises an internet of things device.

20. The non-transitory machine-readable medium of claim 18 , wherein the first credential comprises a biometric credential associated with the user identity, and wherein the first credential is received via a biometric reader of the user premises equipment that receives the biometric credential.

Assignees

• At & T Ip I Lp

Inventors

• Serban Cristina
• Wang Wei

Classifications

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/1458

  Denial of Service · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title