Dual-factor identification system and method with adaptive enrollment

Patent metadata

Field	Value
Publication number	US-11899765-B2
Application number	US-202017131506-A
Country	US
Kind code	B2
Filing date	Dec 22, 2020
Priority date	Dec 23, 2019
Publication date	Feb 13, 2024
Grant date	Feb 13, 2024

Abstract

A multi-factor identification system is provided in which enrolled user authentication information is updated in the course of an authorization request based upon at least one of a confidence level of a match between a request first factor identifier, produced based upon first unique user identifying information received with the authentication request, and a respective matching enrolled first factor identifier and a confidence level of a match between a request second factor identifier, produced based upon second unique user identifying information received with the authentication request, and a respective matching enrolled second factor identifier.

First claim

The invention claimed is:

1. A multi-factor identification system comprising:
a storage device that includes an authentication information that includes a plurality of respective enrolled user multi-factor identifiers that includes respective enrolled first factor identifiers and respective enrolled second factor identifiers;
an authentication manager controller configured to:
receive an authentication request that includes respective first factor unique user-identification information of a user and respective second factor unique user-identification information of the user;
produce a request first factor identifier and a request second factor identifier, based upon the respective received first factor unique user-identification information and the respective received second factor unique user-identification information;
search the authentication information for a match between the request first factor identifier and a respective enrolled first factor identifier and a match between the request second factor identifier and a respective enrolled second factor identifier;
in response to finding a first match between the request first factor identifier and the respective enrolled first factor identifier and a second match between the request second factor identifier with the respective enrolled second factor identifier:
send a signal indicating that the user is authenticated;
identify a first confidence level for the first match and a second confidence level for the second match, wherein the first confidence level and the second confidence level are derived based on values of a distance metric and based at least in part on one of: a rate of false positives of observed unenrolled users who are authenticated and a rate of false negatives observed for enrolled users who are not authenticated;
compare the first confidence level to the second confidence level;
if it is determined that the first confidence level exceeds the second confidence level, update the respective second enrolled factor identifier with the request second factor identifier;
if it is determined that the second confidence level exceeds the first confidence level, update the respective first enrolled factor identifier with the request first factor identifier;
reduce authentication denials by using at least one of the updated first enrolled factor identifier or the updated second enrolled factor identifier to process a subsequent authentication request; and

in response to not finding the first match or not finding the second match, send a signal indicating denial of access to the user.

2. The multi-factor identification system of claim 1 ,
wherein update one of the respective matching first enrolled factor identifier and the respective matching second enrolled factor identifier includes one of,
update the respective matching first enrolled factor identifier, based upon a confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier exceeding a confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier; and
update the respective matching second enrolled factor identifier, based upon a confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier exceeding a confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier.

3. The multi-factor identification system of claim 1 ,
wherein update one of the respective matching first enrolled factor identifier and the respective matching second enrolled factor identifier includes,
update the respective matching first enrolled factor identifier, based further upon the confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier exceeding a second prescribed confidence level.

4. The multi-factor identification system of claim 1 ,
wherein update one of the respective matching first enrolled factor identifier and the respective matching second enrolled factor identifier includes one of,
wherein update the respective matching first enrolled factor identifier, based further upon the confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier exceeding a second prescribed confidence level; and
update the respective matching second enrolled factor identifier, based further upon the confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier exceeding a first prescribed confidence level.

5. The multi-factor identification system of claim 1 ,
wherein update one of the respective matching first enrolled factor identifier and the respective matching second enrolled factor identifier includes,
update the respective matching first enrolled factor identifier, based upon a confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier exceeding a confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier and also exceeding a second prescribed confidence level.

6. The multi-factor identification system of claim 1 ,
wherein update one of the respective matching first enrolled factor identifier and the respective matching second enrolled factor identifier includes,
update the respective matching first enrolled factor identifier, based upon a confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier exceeding a confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier and also exceeding a second prescribed confidence level; and
update the respective matching second enrolled factor identifier, based upon a confidence level of the match between the respective request first factor identifier and the respective matching enrolled first factor identifier exceeding a confidence level of the match between the respective request second factor identifier and the respective matching enrolled second factor identifier and also exceeding a first prescribed confidence level.

7. The multi-factor identification system of claim 1 ,
the authentication manager system further configured to:
receive the respective first factor unique user-identification information and the respective second factor unique user-identification information corresponding to respective authorized users; and
produce the respective authorized user multi-factor identifiers corresponding to the respective authorized users based upon the respective received first factor unique user-identification information and the respective received second factor corresponding to the respective authorized users.

8. The multi-factor identification system of claim 1 ,
sending a signal to an access device indicating authentication.

9. The multi-factor identification system of claim 1 ,
wherein the first factor unique user-identification information includes a first biometric measurement and the respective second factor unique user-identification information includes a second biometric information.

10. A multi-factor identification method comprising:
a storing at a storage device, an authentication information that includes a plu

Assignees

• Dts Inc

Inventors

• Seroussi Gadiel
• Goodwin Michael M

Classifications

• G06N3/09

  Supervised learning · CPC title

• G06N3/0464

  Convolutional networks [CNN, ConvNet] · CPC title

• G06N3/0442

  characterised by memory or gating, e.g. long short-term memory [LSTM] or gated recurrent units [GRU] · CPC title

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/40

  by quorum, i.e. whereby two or more security principals are required · CPC title