Bio leash for user authentication
AssigneeEyeVerify Inc.
InventorReza R. Derakhshani
Life of this patent
Estimating the term…
Abstract
Systems and methods for electronically leashing a user to a mobile device. A user is authenticated on the mobile device and initial sensor data (e.g., radio signal readings, accelerometer readings, image/video, audio) is collected. Based on a timer or other triggering event, additional sensor data is captured and evaluated. Based on the evaluation of the sensor data, a value representing a likelihood of whether the device remains in possession of the user is determined. Upon determining that this value is less than a threshold, the user is required to reauthenticate on the mobile device to further engage with the device or particular features on the device.
Claims28
A computer-implemented method comprising:
- authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device;
- capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user;
- capturing movement data by a movement or positional sensor of the mobile device;
- determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data;
- determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user;
- at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time;
- and
- upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device.
A system comprising:
- one or more computers programmed to perform operations comprising:
- authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device;
- capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user;
- capturing movement data by a movement or positional sensor of the mobile device;
- determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data;
- determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user;
- at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time;
- and
- upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device.
Dependencies are inferred from the claim text.