User authentication confidence based on multiple devices

Patent metadata

Field	Value
Publication number	US-2016134609-A1
Application number	US-201414536900-A
Country	US
Kind code	A1
Filing date	Nov 10, 2014
Priority date	Nov 10, 2014
Publication date	May 12, 2016
Grant date	—

Abstract

The present application is directed to user authentication confidence based on multiple devices. A user may possess at least one device. The device may determine a device confidence level that the identity of the user is authentic based on at least data collected by a data collection module in the device. For example, a confidence module in the device may receive the data from the data collection module, determine a quality corresponding to the data and determine the device confidence level based on the quality. If the user possesses two or more devices, at least one of the devices may collect device confidence levels from other devices to determine a total confidence level. For example, a device may authenticate the other devices and then receive device confidence levels for use in determining the total confidence level, which may be used to set an operational mode in a device or system.

First claim

What is claimed:

1 . A device for determining confidence of user identity, comprising:
a communication module to interact with at least one other device; a data collection module to collect data for use in determining an identity of a user in possession of the device; and a confidence module to at least:
receive the data from the data collection module; and
determine a device confidence level that the identity of the user is authentic based on at least the data.

2 . The device of claim 1 , wherein the data comprises biometric data sensed by at least one sensor in the device.

3 . The device of claim 1 , wherein the confidence module comprises a device confidence module to at least:
determine a quality of the data; and determine the device confidence level based on at least the data quality.

4 . The device of claim 3 , wherein the data quality is determined based on at least one of data type, data frequency, data accuracy and data consistency.

5 . The device of claim 1 , wherein the confidence module is further to cause the communication module to transmit at least the device confidence level to the at least one other device.

6 . The device of claim 1 , wherein the confidence module further comprises an authentication and collection module to at least:
receive at least one device confidence level from the at least one other device; and determine a total confidence level based on the device confidence level determined in the device and the at least one device confidence level received from the at least one other device.

7 . The device of claim 6 , wherein the authentication and collection module is further to:
receive authentication data from the at least one other device; and authenticate the at least one other device based on the authentication data prior to determining the total confidence level.

8 . The device of claim 1 , wherein the confidence module is further to set an operational mode in the device based on at least the identity of the user in possession of the device and the confidence level.

9 . The device of claim 8 , wherein the confidence module is further to set the operational mode also based on a context of at least one of the device or the user.

10 . An access control device, comprising:
a communication module to interact with at least one other device; and a confidence module to at least:
receive data identifying a user in possession of the at least one other device and a confidence level that the data identifying the user is authentic via the communication module; and
set an operational mode in the device based on at least the user identity data and the confidence level.

11 . The device of claim 10 , wherein the confidence module is further to:
determine whether the user is in possession of a required device; and set the operational mode based further on whether the required device is determined to be in possession of the user.

12 . The device of claim 10 , wherein the operational mode is set by the confidence module based further on a context of at least one of the device or user determined based on at least the data.

13 . The device of claim 10 , wherein the operational mode comprises a plurality of increasing levels of access set corresponding to at least the confidence level.

14 . The device of claim 10 , wherein the confidence level is determined based on at least a quality determined for data used in determining the identity of the user in possession of the at least one other device collected by a data collection module in the at least one other device.

15 . A method for determining confidence of user identity, comprising:
receiving data for use in determining an identity of a user in possession of a device from a data collection module in the device; determining a quality corresponding to the data; and determining a device confidence level that the identity of the user is authentic based on at least the quality.

16 . The method of claim 15 , wherein the data comprises biometric data sensed by at least one sensor in the device.

17 . The method of claim 15 , wherein data quality is determined based on at least one of data type, data frequency, data accuracy and data consistency.

18 . The method of claim 15 , further comprising:
transmitting at least the device confidence level to at least one other device.

19 . The method of claim 15 , further comprising:
receiving at least one device confidence level from at least one other device; and determining a total confidence level based on the device confidence level determined in the device and the at least one device confidence level received from the at least one other device.

20 . The method of claim 19 , further comprising:
receiving authentication data from the at least one other device; and authenticating the at least one other device based on the authentication data prior to determining the total confidence level.

21 . A method for access control, comprising:
receiving, in a device, at least data identifying a user in possession of at least one other device and a confidence level that the data identifying the user is authentic; and setting, in the device, an operational mode based on at least the user identity data and the confidence level.

22 . The method of claim 21 , further comprising:
determining whether the user is in possession of a required device; and setting the operational mode based further on whether the required device is determined to be in possession of the user.

23 . The method of claim 21 , further comprising:
setting the operational mode based further on a context of at least one of the device or user determined based on at least the data.

24 . The method of claim 21 , wherein the operational mode comprises a plurality of increasing levels of access to data in the device set corresponding to at least the confidence level.

25 . At least one machine-readable storage medium having stored thereon, individually or in combination, instructions for determining confidence of user identity that, when executed by one or more processors, cause the one or more processors to:
receive data for use in determining an identity of a user in possession of a device from a data collection module in the device; determine a quality corresponding to the data; and determine a device confidence level that the identity of the user is authentic based on at least the quality.

26 . The medium of claim 25 , wherein the data comprises biometric data sensed by at least one sensor in the device.

27 . The medium of claim 25 , wherein data quality is determined based on at least one of data type, data frequency, data accuracy and data consistency.

28 . The medium of claim 25 , further comprising instructions that, when executed by one or more processors, cause the one or more processors to:
transmit at least the device confidence level to at least one other device.

29 . The medium of claim 25 , further comprising instructions that, when executed by one or more processors, cause the one or more processors to:
receive at least one device confidence level from at least one other device; and determine a total confidence level based on the device confidence level determined in the device and the at least one device confidence level received from the at least one other

Assignees

• Intel Corp

Inventors

• Durham Lenitra M
• Vembar Deepak S
• Weast John C
• Booth Cory J

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L9/3231

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title