Sensor-based human authorization evaluation

Patent metadata

Field	Value
Publication number	US-11736487-B2
Application number	US-202217947973-A
Country	US
Kind code	B2
Filing date	Sep 19, 2022
Priority date	Jul 3, 2014
Publication date	Aug 22, 2023
Grant date	Aug 22, 2023

Abstract

A resource-access management system detects whether a user is authorized to access resources. The system may include a user device being configured to include a sensor that detects sensor data associated with the user. Further, the system includes a client qualification engine that determines whether or not a client is authorized to access the resources by comparing the sensor data with a plurality of patterns for evaluating whether or not the user is an authorized user. User scores are generated based on the compared sensor data and the plurality of patterns. Further, a composite score corresponding to the user is generated using the sensor data, plurality of patterns, and one or more additional criteria. Whether the user is granted access to the resources, presented with unauthorized user tests, or blocked from access to the resources depends on the composite score and threshold values.

First claim

What is claimed is:

1. A resource management method for dynamically granting access to a resource, the resource management method comprising:
receiving a first request associated with a resource, from a user device associated with a user, wherein:
the user device includes a display and a processor that communicates with a group of sensors,
each sensor of the group of sensors configured to detect sensor data associated with the user, and
the sensor data is stored on the user device;
receiving the sensor data from the user device based on the first request, wherein the sensor data includes biometric data of the user;
processing of the biometric data based on comparison of the biometric data with a plurality of patterns, wherein the plurality of patterns is stored in a storage device;
categorizing the user based on the comparison and according to a likelihood the user is a human or a bot;
scaling a difficulty level of a first test based on the categorizing, wherein the first test determines whether the user is the human or the bot;
selecting the first test according to the difficulty level for the user;
presenting the first test chosen according to the difficulty level;
receiving user response to the first test;
concluding based upon the processing of the biometric data and the user response to the first test that the user is human; and
authorizing the user device to access the resource, wherein the authorizing is based upon the concluding.

2. The resource management method according to claim 1 , wherein the plurality of patterns includes a first pattern associated with the human and a second pattern associated with the bot.

3. The resource management method according to claim 1 , further comprising:
computing a similarity score based on the comparison of the biometric data with the plurality of patterns, wherein the similarity score indicates similarity of the biometric data of the user with the human or the bot;
presenting the first test with a higher difficulty level if the biometric data of the user is similar to the bot; and
presenting the first test with a lower difficulty level if the biometric data of the user is similar to the human.

4. The resource management method according to claim 1 , wherein the first test includes a visual completely automated public turing test to tell computers and humans apart (CAPTCHA) test, an audio CAPTCHA test, or a mathematics question presented in an image.

5. The resource management method according to claim 1 , further comprising:
receiving a second request associated with the resource, from the user device; and
determining that no test is to be presented in response to the second request, based on the authorizing of the user device for the first request.

6. The resource management method according to claim 1 , further comprising presenting a second test with a different difficulty level than the first test based on the user response to the first test.

7. The resource management method according to claim 1 , further comprising:
processing the user response and the sensor data to identify a degree of electronic access to authorize the user device; and
authorizing the user device for the resource to be electronically accessed in accordance with the degree of electronic access via the user device.

8. The resource management method according to claim 1 , further comprising:
determining a level of access for the resource to be granted to the user based on the comparison of the biometric data with the plurality of patterns; and
transmitting a subset of resource to the user device based on the level of access.

9. The resource management method according to claim 1 , further comprising:
computing a user score based on the comparison of the biometric data with the plurality of patterns;
identifying additional criteria related to historical data of the user; and
computing a composite score to evaluate the authorizing of the user device based on the user score and the additional criteria.

10. The resource management method according to claim 9 , further comprising:
comparing the composite score with a first threshold and a second threshold;
authorizing the user device when the composite score is less than the first threshold;
presenting the first test when the composite score lies between the first threshold and the second threshold; and
denying access to the resource when the composite score is greater than the first threshold and the second threshold.

11. The resource management method according to claim 1 , further comprising detection of the sensor data during an activation of a specific application on the user device.

12. A resource management system for dynamically granting access to a resource, the resource management system comprising:
a user device including a display and a first processor that communicates with a group of sensors, wherein
the user device is associated with a user,
each sensor of the group of sensors configured to detect sensor data associated with the user, and
the sensor data is stored on the user device; and
a cloud server including a second processor configured to:
receive a first request associated with a resource, from the user device,
receive the sensor data from the user device based on the first request, wherein the sensor data includes biometric data of the user,
process the biometric data based on comparison of the biometric data with a plurality of patterns, wherein the plurality of patterns is stored in a storage device,
categorize the user based on the comparison and according to a likelihood the user is a human or a bot,
scale a difficulty level of a first test based on the categorizing, wherein the first test determines whether the user is the human or the bot,
select the first test according to the difficulty level for the user,
present the first test chosen according to the difficulty level,
receive user response to the first test, and
authorize the user device to access the resource, wherein the authorize is based on the process of the biometric data and the user response to the first test after concluding that the user is a human.

13. The resource management system according to claim 12 , wherein the second processor is further configured to:
compute a similarity score based on the comparison of the biometric data with the plurality of patterns, wherein the similarity score indicates similarity of the biometric data of the user with the human or the bot;
present the first test with a higher difficulty level if the biometric data of the user is similar to the bot; and
present the first test with a lower difficulty level if the biometric data of the user is similar to the human.

14. The resource management system according to claim 12 , wherein the second processor is further configured to:
receive a second request associated with the resource, from the user device; and
determine that no test is to be presented in response to the second request, based on the authorize of the user device for the first request.

15. The resource management system according to claim 12 , wherein the second processor is further configured to present a second test with a different difficulty level than the first test based on the user response to the first test.

16. The resource management system according to claim 12 , wherein the second processor is further configured to:
compute a user score based on the comparison of the biometric data with the plurality of patterns;
identify additional criteria related to historical data of the user; and
compute a composite score

Assignees

• Live Nation Entertainment Inc

Inventors

• Du Fengpei
• Lane Michael
• Ives-Halperin Kenneth

Classifications

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L47/60

  implementing hierarchical scheduling · CPC title

• H04L51/04

  Real-time or near real-time messaging, e.g. instant messaging [IM] · CPC title