Methods and a system for automated authentication confidence

Patent metadata

Field	Value
Publication number	US-9754093-B2
Application number	US-201514610415-A
Country	US
Kind code	B2
Filing date	Jan 30, 2015
Priority date	Aug 28, 2014
Publication date	Sep 5, 2017
Grant date	Sep 5, 2017

Abstract

Input streams are automatically and continuously evaluated in a passive manner from sensors and resources of a device. The streams are weighted and aggregated to produce single confidence values. A current single confidence value is used to passively authenticate a user for access to the device or to one or more resources of the device when the user attempts access.

First claim

The invention claimed is:

1. A method, comprising:
obtaining, on a device, data from at least one input stream;
aggregating components of the data into a single value; and
causing passive authentication of a user for access to one of: the device and a resource of the device by supplying the single value, wherein causing passive authentication further includes providing ongoing, continuous, and transparent authentication for the user to access one of: the device and the resource and without the user affirmative providing the at least one input stream with continuous updates to the single value based on changing components in the at least one input stream and with user authentication being dynamically provided when needed.

2. The method of claim 1 , wherein obtaining further includes receiving the data from a sensor of the device.

3. The method of claim 1 , wherein obtaining further includes receiving the data from a sensor of a different device in network communication with the device.

4. The method of claim 1 , wherein obtaining further includes receiving the data from a repository located on the device.

5. The method of claim 1 , wherein obtaining further includes receive the data from a repository external to the device.

6. The method of claim 1 , wherein aggregating further includes weighting each component.

7. The method of claim 6 , wherein weighting further includes determining each weight for each component based on a stream type associated with the at least one input stream and a component type associated with each component.

8. The method of claim 7 , wherein determining further includes adjusting at least some weights based on an execution environment type associated with an execution environment of the method.

9. The method of claim 8 , wherein adjusting further includes modifying at least some of the weights based on a connection type that the device has with a second device.

10. The method of claim 9 , wherein modifying further includes adding the weight components together to obtain the single value.

11. The method of claim 1 further comprising: iterating the processing at one of: a predefined interval of time and upon detection of an event.

Assignees

• Kobres Erick
• Antonakakis Stavros
• Ncr Corp

Inventors

• Kobres Erick
• Antonakakis Stavros

Classifications

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• G06Q20/4016

  involving fraud or risk level assessment in transaction processing · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title