Access control for access restricted domains using first and second biometric data

Patent metadata

Field	Value
Publication number	US-11270544-B2
Application number	US-201816605062-A
Country	US
Kind code	B2
Filing date	Apr 18, 2018
Priority date	Apr 20, 2017
Publication date	Mar 8, 2022
Grant date	Mar 8, 2022

Abstract

A method for granting access for a user to a domain which is subject to an access restriction, wherein the user belongs to a group of one or more user shaving an access privilege in relation to the domain. The method comprises acquiring a first set of biometric data associated with the user. A first identification is successful if a comparison of the first set of biometric data to previously acquired data relating to the user, or to the group of users, indicates that the user belongs to the group. The method also comprises acquiring a second set of biometric data associated with the user responsive to the first identification being successful. A second identification is successful if a comparison of the second set of biometric data to previously acquired data relating to the user indicates that the user has the access privilege.

First claim

What is claimed is:

1. A method for granting access for a user to a domain which is subject to an access restriction, wherein the user belongs to a group of one or more users having an access privilege in relation to the domain, the method comprising:
acquiring, via one or more first biometric readers, a first set of biometric data associated with the user, exclusively responsive to the user being in a vicinity of at least one of the first biometric readers;
performing a first identification of the user based on the first set of biometric data, wherein the first identification is successful if a comparison of the first set of biometric data to previously acquired first biometric data relating to the group of users, indicates that the user belongs to the group, wherein the previously acquired first biometric data is exclusively associated with the group of users;
acquiring, via one or more second biometric readers, a second set of biometric data associated with the user responsive to the first identification being successful;
performing a second identification of the user based on the second set of biometric data, wherein the second identification is successful if a comparison of the second set of biometric data to previously acquired second biometric data relating to the user indicates that the user has the access privilege; and
granting access for the user to the domain at least responsive to the second identification being successful.

2. The method of claim 1 further comprising denying access for the user to the domain responsive to one or more of:
the first identification being unsuccessful; and
the second identification being unsuccessful.

3. The method of claim 1 wherein acquiring the first set of biometric data is automatically performed responsive to a determination that the user is in the vicinity of the at least one of the first biometric readers.

4. The method of claim 1 wherein the first biometric data comprises one or more of facial features, body features, motion features and gesture features.

5. The method of claim 1 wherein the one or more first biometric readers comprise one or more image capturing devices and circuitry configured to perform recognition of the first biometric data comprised in captures images.

6. The method of claim 1 wherein the comparison of the first set of biometric data to the previously acquired first biometric data indicates that the user belongs to the group if the first set of biometric data matches the previously acquired first biometric data for any of the users of the group.

7. The method of claim 1 wherein acquiring the second set of biometric data comprises activating the one or more second biometric readers responsive to the first identification being successful.

8. The method of claim 1 wherein acquiring the second set of biometric data is further responsive to the user actively providing the second set of biometric data.

9. The method of claim 1 wherein the second biometric data comprises one or more of fingerprint features, iris features and body area network features.

10. The method of claim 1 wherein the one or more second biometric readers comprise one or more of a fingerprint scanner, an iris scanner, and a body area network sensor.

11. The method of claim 1 wherein the previously acquired second biometric data is associated with respective user in the group of users.

12. The method of claim 1 wherein the comparison of the second set of biometric data to the previously acquired second biometric data indicates that the user has the access privilege if the second set of biometric data matches the previously acquired second biometric data for any of the users of the group.

13. The method of claim 1 wherein the comparison of the second set of biometric data to the previously acquired second biometric data comprises combining the second set of biometric data with the first set of biometric data and comparing the combined set of biometric data to the previously acquired second biometric data.

14. An arrangement for granting access for a user to a domain which is subject to an access restriction, wherein the user belongs to a group of one or more users having an access privilege in relation to the domain, the arrangement comprising a controller configured to cause:
acquiring, via one or more first biometric readers, of a first set of biometric data associated with the user, exclusively responsive to the user being in a vicinity of at least one of the first biometric readers;
performing of a first identification of the user based on the first set of biometric data, wherein the first identification is successful if a comparison of the first set of biometric data to previously acquired first biometric data relating to the group of users, indicates that the user belongs to the group, wherein the previously acquired first biometric data is exclusively associated with the group of users;
acquiring, via one or more second biometric readers, of a second set of biometric data associated with the user responsive to the first identification being successful;
performing of a second identification of the user based on the second set of biometric data, wherein the second identification is successful if a comparison of the second set of biometric data to previously acquired second biometric data relating to the user indicates that the user has the access privilege; and
granting of access for the user to the domain at least responsive to the second identification being successful.

15. The arrangement of claim 14 wherein the controller is further configured to cause denying of access for the user to the domain responsive to one or more of:
the first identification being unsuccessful; and
the second identification being unsuccessful.

16. The arrangement of claim 14 wherein the controller is configured to cause acquiring of the first set of biometric data being automatically performed responsive to a determination that the user is in the vicinity of the at least one of the first biometric readers.

17. The arrangement of claim 14 wherein the controller is configured to cause acquiring of the second set of biometric data by activating the one or more second biometric readers responsive to the first identification being successful.

18. The arrangement of claim 14 wherein the controller is configured to cause acquiring of the second set of biometric data further responsive to the user actively providing the second set of biometric data.

19. A server node for granting access for a user to a domain which is subject to an access restriction comprising the arrangement of claim 14 .

20. An access control system configured to grant access for a user to a domain which is subject to an access restriction, the system comprising:
the server node of claim 19 ;
the one or more first biometric readers;
the one or more second biometric readers; and
data storage configured to comprise the previously acquired first biometric data and the previously acquired second biometric data.

Assignees

• Fingerprint Cards Ab
• Fingerprint Cards Anacatum Ip Ab

Inventors

• Olofsson Olis
• Almers Peter

Classifications

• G07C9/37 Primary

  using biometric data, e.g. fingerprints, iris scans or voice recognition · CPC title

• G06V40/1365

  Matching; Classification · CPC title

• G06V40/10

  Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands · CPC title

• G06V40/172

  Classification, e.g. identification · CPC title

• G07C9/38

  with central registration · CPC title