Method and apparatus for authentication and validation of persons using gait data

Patent metadata

Field	Value
Publication number	US-2018083783-A1
Application number	US-201615268483-A
Country	US
Kind code	A1
Filing date	Sep 16, 2016
Priority date	Sep 16, 2016
Publication date	Mar 22, 2018
Grant date	—

Abstract

A system for authentication and validation of the identity of a person. The person carries a mobile device configured to measure motion as the person walks or stands still, generating a time record of motion data. A security system in a facility which the person seeks to access receives the time record of motion data and compares gait characteristics inferred from the time record with gait characteristics inferred from motion data previously obtained for a person whom the person seeking access purports to be. The security system may instruct the person to pause and stand still, and then to begin walking again, and it may then verify that the received time record of motion data includes an interval with little motion at a point in the time record corresponding to the pause.

First claim

What is claimed is:

1 . A method for identifying a person, the method comprising:
instructing the person to walk, if the person is not already walking; instructing the person to stop during an interval of time; instructing the person to begin walking again; receiving a time record of motion data generated by a motion sensing instrument carried by the person; determining whether a measure of any differences between:
the time record of motion data, and
previously recorded motion data is less than a first threshold; and
determining whether the time record of the motion data includes a segment, corresponding to the interval of time, within which an amount of motion is less than a second threshold.

2 . The method of claim 1 , further comprising receiving purported identifying information for the person.

3 . The method of claim 2 , further comprising:
granting access to a facility when:
the received purported identifying information matches identifying information for a person for whom the previously recorded motion data was recorded and who is authorized to access the facility;
the measure of any differences between:
the time record of motion data, and
the previously recorded motion data is less than the first threshold; and

the time record of the motion data includes a segment, corresponding to the interval of time, within which an amount of motion is less than the second threshold.

4 . The method of claim 1 , wherein the receiving of the time record of motion data comprises receiving an encrypted time record of motion data.

5 . The method of claim 1 , wherein the receiving of the time record of motion data comprises receiving a cryptographically signed time record of motion data.

6 . The method of claim 5 , wherein the receiving of the cryptographically signed time record of motion data comprises receiving a time record of motion data cryptographically signed utilizing a public key infrastructure (PKI).

7 . The method of claim 1 , wherein the motion sensing instrument comprises a plurality of sensors.

8 . The method of claim 7 , wherein the plurality of sensors comprises an accelerometer.

9 . The method of claim 8 , wherein the plurality of sensors further comprises a rotation sensor.

10 . The method of claim 1 , wherein the comparing of the time record of motion data to the previously recorded motion data comprises:
fitting a parameterized model to the time record of motion data to obtain a first vector of parameter values fitting the parameterized model to the previously recorded motion data to obtain a second vector of parameter values; and calculating a vector difference between the first vector and the second vector.

11 . The method of claim 10 , wherein the calculating of the vector difference between the first vector and the second vector comprises finding the largest one of a set of absolute values of element-by-element differences between the first vector and the second vector.

12 . A system for authenticating the identity of a person, the system comprising:
a mobile device comprising:
a motion sensing instrument;
a mobile device control circuit; and
a wireless communications circuit,
the mobile device control circuit being configured to:
instruct a person carrying the mobile device to begin a first interval of walking, if the person is not already walking,
instruct the person to stop during an interval of time;
instruct the person to begin a second interval of walking;
receive a plurality of signals from the motion sensing instrument;
generate a time record of motion data from the received signals; and transmit the time record of motion data through the wireless communications circuit.

13 . The system of claim 12 , wherein the mobile device control circuit is further configured to, before instructing the person to begin the first interval of walking:
receive an encrypted token through the wireless communications circuit; decrypt the encrypted token to form a decrypted token; and compare the decrypted token to a reference token stored in the mobile device.

14 . The system of claim 12 , wherein the mobile device control circuit is further configured to encrypt the time record of motion data to form an encrypted time record of motion data, and wherein the transmitting of the time record of motion data comprises transmitting the encrypted time record of motion data.

15 . The system of claim 14 , further comprising:
a controllable barrier for controlling access to a facility; and a facility control circuit; the facility control circuit being configured to:
receive the encrypted time record of motion data;
decrypt the encrypted time record of motion data to form a decrypted time record of motion data; and
determine whether a measure of any differences between:
the time record of motion data, and
previously recorded motion data is less than a first threshold.

16 . The system of claim 15 , wherein the facility control circuit is further configured to:
determine whether the time record of the motion data includes a segment, corresponding to the interval of time, within which an amount of motion is less than a second threshold.

17 . The system of claim 16 , wherein the facility control circuit is further configured to:
open the barrier when:
the measure of any differences between:
the time record of motion data, and
the previously recorded motion data is less than the first threshold; and

the time record of the motion data includes a segment, corresponding to the interval of time, within which an amount of motion is less than the second threshold.

18 . The system of claim 16 wherein:
the mobile device control circuit is further configured to encrypt a mobile device token with a private encryption key to form an encrypted mobile device token, and
the facility control circuit is further configured to:
decrypt the encrypted mobile device token to form a decrypted mobile device token; and
determine whether the decrypted mobile device token is the same as a reference token stored in the facility.

19 . The system of claim 18 , wherein the facility control circuit is further configured to:
open the barrier when:
the measure of any differences between:
the time record of motion data, and
previously recorded motion data is less than the first threshold;

the time record of the motion data includes a segment, corresponding to the interval of time, within which an amount of motion is less than the second threshold; and
the decrypted mobile device token is the same as the reference token.

Assignees

• Raytheon Bbn Technologies Corp

Inventors

• Mergen John-Francis
• Leuschner Zachary
• Carr Matthew Thomas

Classifications

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• G06F2218/12

  Classification; Matching · CPC title

• G07C9/257

  electronically (G07C9/26 takes precedence) · CPC title

• G07C9/26

  using a biometric sensor integrated in the pass · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title