Multi-factor authentication and access control in a vehicular environment

Patent metadata

Field	Value
Publication number	US-11528605-B2
Application number	US-202017064224-A
Country	US
Kind code	B2
Filing date	Oct 6, 2020
Priority date	Oct 3, 2017
Publication date	Dec 13, 2022
Grant date	Dec 13, 2022

Abstract

The systems and methods described herein can include a digital assistant application that receives sensor signals from sensors installed in a vehicle and determines an entry event into the vehicle. The digital assistant application can receive, responsive to the entry event into the vehicle, a plurality authentication input signals from a plurality of sensors associated with the vehicle. The digital assistant application can determine a plurality of authentication states based on the plurality of authentication input signals and a plurality of authentication credentials. The digital assistant application can identify an access permission level of a plurality of access permission levels based at least in part on the plurality of identifies authentication states. The digital assistant application can identify, responsive to the access permission level, a subset of a set of functionalities available via the vehicle, and provide vehicular access to the subset of functionalities.

First claim

What is claimed:

1. A method implemented by one or more processors, comprising:
receiving a first, first user authentication input signal, the first, first user authentication input signal including first, first user sensor data obtained by one or more first vehicle sensors associated with a vehicle or one or more first mobile device sensors associated with a first mobile device of a first user;
determining a first, first user authentication state based on processing the first, first user sensor data, wherein determining the first, first user authentication state comprises performing a first speaker recognition authentication;
receiving a second, first user authentication input signal, the second, first user authentication input signal including second, first user sensor data obtained by one or more second vehicle sensors associated with the vehicle or one or more second mobile device sensors associated with the first mobile device of the first user;
determining a second, first user authentication state based on processing the second, first user sensor data, wherein determining the second, first user authentication state comprises performing a first face recognition authentication;
identifying, based on the first, first user authentication state and the second, first user authentication state, a first access permission level for the first user, the first access permission level for the first user being one of a plurality of access permission levels;
receiving a first, second user authentication input signal, the first, second user authentication input signal including first, second user sensor data obtained by one or more of the first vehicle sensors associated with the vehicle or one or more first mobile device sensors associated with a second mobile device of a second user;
determining a first, second user authentication state based on processing the first, second user sensor data, wherein determining the first, second user authentication state comprises performing a second speaker recognition authentication;
receiving a second, second user authentication input signal, the second, second user authentication input signal including second, second user sensor data obtained by one or more of the second vehicle sensors associated with the vehicle or one or more second mobile device sensors associated with the second mobile device of the second user;
determining a second, second user authentication state based on processing the second, second user sensor data, wherein determining the second, second user authentication state comprises performing a second face recognition authentication;
identifying, based on the first, second user authentication state and the second, second user authentication state, a second access permission level for the second user, the second access permission level for the second user being one of the plurality of access permission levels, and the second access permission level for the second user differing from the first access permission level for the first user;
in response to identifying the first access permission level, of the plurality of access permission levels, as the access permission level for the first user:
identifying a first set of vehicle functionalities available via the vehicle; and
providing vehicular access to the first set of vehicle functionalities for the first user while the user is driving the vehicle; and

in response to identifying the second access permission level, of the plurality of access permission levels, as the access permission level for the second user:
identifying a second set of vehicle functionalities available via the vehicle, wherein the second set of the vehicle functionalities includes at least one distinct functionality that is distinct from the first set of vehicle functionalities; and
providing vehicular access to the second set of vehicle functionalities for the second user while the second user is a passenger of the vehicle.

2. The method of claim 1 , further comprising:
identifying a user category of the first user based on the first, first user authentication state or the second, first user authentication state; and
wherein identifying the first set of vehicle functionalities is based on the user category of the first user being stored in association with the first set of vehicle functionalities.

3. The method of claim 2 , wherein the first set of vehicle functionalities includes at least one of:
accessing data stored in a memory of the vehicle;
accessing playlists stored in the memory of the vehicle,
accessing data stored on a remote storage system;
actuating a window of the vehicle; or
controlling home related settings.

4. The method of claim 2 , wherein the user category is one of: a child family member category, a friend category, or a new user category.

5. The method of claim 1 , further comprising:
identifying a user category of the second user based on the first, second user authentication state or the second, second user authentication state; and
wherein identifying the second set of vehicle functionalities is based on the user category of the second user being stored in association with the second set of vehicle functionalities.

6. The method of claim 5 , wherein the second set of vehicle functionalities includes at least one of:
accessing playlists stored in the memory of the vehicle; or
actuating a window of the vehicle.

7. The method of claim 5 , wherein the user category is one of: an owner category, or an adult family member category.

8. The method of claim 1 , further comprising:
in response to identifying no access permission level for the second user, provide no vehicular access for the second user.

9. The method of claim 1 , further comprising:
subsequent to identifying the second access permission level for the second user:
receiving, from the second user, a request to perform a given vehicular function;
determining, based on the second access permission level for the second user, whether the second user is authorized to perform the given vehicular function included in the request.

10. The method of claim 9 , further comprising:
in response to determining that the second user is not authorized to perform the given vehicular function included in the request, refraining from performing the given vehicular function.

11. The method of claim 9 , further comprising:
in response to determining that the second user is authorized to perform the given vehicular function included in the request, causing the given vehicular function to be performed.

12. A method implemented by one or more processors, comprising:
receiving a first, first user authentication input signal, the first, first user authentication input signal including first, first user sensor data obtained by one or more first vehicle sensors associated with a vehicle or one or more first mobile device sensors associated with a first mobile device of a first user;
determining a first, first user authentication state based on processing the first, first user sensor data, wherein determining the first, first user authentication state comprises performing a first mobile device authentication;
receiving a second, first user authentication input signal, the second, first user authentication input signal including second, first user sensor data obtained by one or more second vehicle sensors associated with the vehicle or one or more second mobile device sensors associated with the first mobile device of the first user;
determining a second, first user authentication state based on processing the second, first user sensor data, wherein determining the second, first user authentication state compri

Assignees

• Google Llc

Inventors

• Ramie Haris
• Chan Victor
• Gupta Vikas
• Li Lingjun

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04W4/40

  for vehicles, e.g. vehicle-to-pedestrians [V2P] · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title