Contextual identification and information security

Patent metadata

Field	Value
Publication number	US-11232187-B2
Application number	US-201615338654-A
Country	US
Kind code	B2
Filing date	Oct 31, 2016
Priority date	Jan 13, 2016
Publication date	Jan 25, 2022
Grant date	Jan 25, 2022

Abstract

A system may identify a user based on inputs from multiple devices. The system may determine a confidence score based on the probability that the system accurately identifies the user. The system may provide a permissions level based on the confidence score. The permissions level may affect the type of interactions the user may perform with a device. The system may determine a privacy level for an interaction based on determining whether the user is in a public or private setting.

First claim

What is claimed is:

1. A method comprising:
receiving, by a computer-based system, a first input from a first device, wherein the first input comprises a device type, a device location, a current activity of the first device, a time since last interaction with the first device, or a most recent authentication type on the first device:
receiving, by the computer-based system, a second input from a second device associated with a particular individual;
calculating, by the computer-based system, a confidence score based on the first input and the second input, wherein the confidence score indicates a likelihood that a user of the first device is the particular individual;
setting, by the computer-based system and based on the confidence score indicating that the user of the first device is the particular individual, a permissions level on the first device for the user of the first device, wherein the permissions level defines interactions that the user of the first device can take using the first device, wherein the permission levels comprise at least a first permissions level, a second permissions level, and a third permissions level;
granting, by the computer-based system, no user interactions with the first device for the first permissions level, wherein the first permission levels is set when the confidence score is below a first threshold score;
granting, by the computer-based system, partial user interactions with the first device for the second permissions level, wherein the second permissions level is set when the confidence score is above the first threshold score and below a second threshold score;
granting, by the computer-based system, full user interactions with the first device for the third permissions level, wherein the third permissions level is set when the confidence is above the second threshold score;
receiving, by the computer-based system, authorization from another user that allows the individual user to access a sub-persona owned by the other user which allows persona data of the other user to be shared with the individual user;
launching, by the computer-based system, a user session with the first device of the individual user, wherein the user session is customized using the persona data of the other user while the individual user has accessed the sub-persona owned by the other user;
determining, by the computer-based system, a privacy level of the first device based on a monitoring of device inputs, wherein the device inputs comprise at least a microphone of the first device, wherein the privacy level indicates whether the first device is currently residing in a public location or a private location; and
limiting, by the computer-based system, an amount of information displayed or spoken by the first device when the first device is determined to be residing in a public location.

2. The method of claim 1 , further comprising comparing, by the computer-based system, a first location of the first device and a second location of the second device.

3. The method of claim 2 , wherein the confidence score is based at least partially upon the comparing.

4. The method of claim 1 , wherein the determining the privacy level comprises determining that the user is on a public network, the microphone of the first device is receiving multiple voices, or a camera of the first device detects multiple people in a geographic area around the first device, wherein the device inputs further include the camera of the first device and a network connection component of the first device.

5. The method of claim 1 , further comprising altering, by the computer-based system, the confidence score in response to a first location of the first device changing.

6. The method of claim 1 , wherein the first input comprises a device type, a device location, a current activity of the first device, a time since last interaction with the first device, and a most recent authentication type on the first device.

7. The method of claim 1 , further comprising receiving, by the computer-based system, a persona of the user including at least one of demographics, purchase history or contact information of the user.

8. The method of claim 1 , further comprising:
receiving, by the computer-based system, permissions from the user for access by a merchant to at least a subset of user information;
retrieving, by the computer-based system, the permissions, in response to receiving an API call from the merchant for access to the user information; and
providing, by the computer-based system and to the merchant, the access to the user information,
wherein the merchant provides a webpage to the user, wherein the webpage is customized based on the user information.

9. The method of claim 1 , further comprising communicating, by the computer-based system, with a merchant via at least one of API calls, HTTP communication, shared tables or web services.

10. The method of claim 1 , wherein the partial user interactions include at least one of accessing content on a local hard drive of the first device, accessing an internet, accessing financial information, conducting purchase transactions, transferring funds between accounts, changing passwords or obtaining social security numbers.

11. The method of claim 1 , further comprising altering, by the computer-based system, a privacy setting with requirements for interaction between the user and the first device, in response to the first device being in the public location.

12. The method of claim 1 , further comprising altering, by the computer-based system, a privacy setting with requirements for interaction between the user and the first device, in response to the user providing input comprising at least one of a verbal cue, a visual cue, a physical movement, a gesture, a cough or a code word.

13. The method of claim 1 , further comprising providing, by the computer-based system, contextual offers for multiple people, in response to determining the multiple people are in a geographic area around the first device.

14. The method of claim 1 , wherein the confidence score is based on, a factor score for the first device being associated with an individual, recent data on the first device, historical data on the first device, time since last interaction with the first device and most recent authentication type used to access the first device.

15. The method of claim 1 , wherein the confidence score is based on comparing recent data on the first device with historical data on the first device.

16. The method of claim 1 , wherein the confidence score is based on type of the first device and a type of the second device.

17. A computer-based system, comprising:
a processor; and
a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
receiving a first input from a first device, wherein the first input comprises a device type, a device location, a current activity of the first device, a time since last interaction with the first device, or a most recent authentication type on the first device;
receiving a second input from a second device associated with a particular individual;
calculating a confidence score based on the first input and the second input, wherein the confidence score indicates a likelihood that a user of the first device is the particular individual;
setting, based on the confidence score indicating that the user of the first device is the particular in

Assignees

• American Express Travel Related Services Co Inc

Inventors

• Bruno John
• Basheerahammed Sibish Neelikattil

Classifications

• G06F21/34 Primary

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title