# US 10,320,779 B2 · Bio leash for user authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,779 B2 - Document ID: US10320779B2 - Status: Granted - Kind: B2 - Application number: 14/672,629 - Filed: 2015-03-30 - Published: 2015-10-08 - Granted: 2019-06-11 - Earliest claimed: 2014-04-07 - Assignees: EyeVerify Inc. - Applicants: EyeVerify, Inc. - Inventors: Reza R. Derakhshani - Web page: https://patentgrep.com/patent/US10320779B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/629: {to features or functions of an application} - G06F 21/88: Detecting or preventing theft or loss - G06V 20/52: Surveillance or monitoring of activities, e.g. for recognising suspicious objects (recognising microscopic objects G06V20/69) - G06V 40/20: Movements or behaviour, e.g. gesture recognition (recognition of facial expressions G06V40/16) - H04M 1/673: the user being required to key in a code - H04W 12/12: Detection or prevention of fraud - H04W 12/126: Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06F 2221/2147: Locking files - H04M 2250/12: including a sensor for measuring a physical value, e.g. temperature or motion - H04M 2250/52: including functional features of a camera - H04W 12/65: Environment-dependent, e.g. using captured environmental data - H04W 12/79: Radio fingerprint - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods for electronically leashing a user to a mobile device. A user is authenticated on the mobile device and initial sensor data (e.g., radio signal readings, accelerometer readings, image/video, audio) is collected. Based on a timer or other triggering event, additional sensor data is captured and evaluated. Based on the evaluation of the sensor data, a value representing a likelihood of whether the device remains in possession of the user is determined. Upon determining that this value is less than a threshold, the user is required to reauthenticate on the mobile device to further engage with the device or particular features on the device. ## Claims ### Claim 1 A computer-implemented method comprising: authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device; capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user; capturing movement data by a movement or positional sensor of the mobile device; determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data; determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user; at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time; and upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device. ### Claim 2 (depends on 1) The method of claim 1, wherein the user is authenticated based on at least one of a password, a passphrase, a gesture, a digital certificate, and a biometric identifier. ### Claim 3 (depends on 1) The method of claim 1, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises a plurality of radio signal readings. ### Claim 4 (depends on 3) The method of claim 3, wherein determining the value comprises evaluating whether a difference between the radio signal readings exceeds a threshold. ### Claim 5 (depends on 3) The method of claim 3, wherein the evaluation is performed upon determining that the mobile device has moved. ### Claim 6 (depends on 1) The method of claim 1, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises readings from a movement or positional sensor. ### Claim 7 (depends on 6) The method of claim 6, wherein determining the value comprises evaluating whether the movement or positional sensor readings conform with a known behavior pattern of the user. ### Claim 8 (depends on 1) The method of claim 1, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises audio captured by a microphone associated with the mobile device. ### Claim 9 (depends on 8) The method of claim 8, wherein determining the value comprises using at least one of acoustic location and voice recognition to determine whether the user is within a threshold distance of the mobile device. ### Claim 10 (depends on 9) The method of claim 9, wherein the acoustic location is performed upon determining that the mobile device has moved. ### Claim 11 (depends on 1) The method of claim 1, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises one or more images captured by a camera associated with the mobile device. ### Claim 12 (depends on 11) The method of claim 11, wherein determining the value comprises analyzing the images to determine whether the user is shown. ### Claim 13 (depends on 11) The method of claim 11, wherein at least one of the images is captured upon determining that the camera associated with the mobile device has a line of sight to the user. ### Claim 14 (depends on 1) The method of claim 1, wherein the first device possession measurement data and the second device possession measurement data are captured using different data capturing components of the mobile device. ### Claim 15 (depends on 1) The method of claim 1, wherein the triggering event comprises a determination, based on the movement data, that the mobile device (i) has been picked up, (ii) has been put down, (iii) has experienced sudden or violent movement, or (iv) has experienced movement different from an expected pattern of movement. ### Claim 16 A system comprising: one or more computers programmed to perform operations comprising: authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device; capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user; capturing movement data by a movement or positional sensor of the mobile device; determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data; determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user; at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time; and upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device. ### Claim 17 (depends on 16) The system of claim 16, wherein the user is authenticated based on at least one of a password, a passphrase, a gesture, a digital certificate, and a biometric identifier. ### Claim 18 (depends on 16) The system of claim 16, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises a plurality of radio signal readings. ### Claim 19 (depends on 18) The system of claim 18, wherein determining the value comprises evaluating whether a difference between the radio signal readings exceeds a threshold. ### Claim 20 (depends on 18) The system of claim 18, wherein the evaluation is performed upon determining that the mobile device has moved. ### Claim 21 (depends on 16) The system of claim 16, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises readings from a movement or positional sensor. ### Claim 22 (depends on 21) The system of claim 21, wherein determining the value comprises evaluating whether the movement or positional sensor readings conform with a known behavior pattern of the user. ### Claim 23 (depends on 16) The system of claim 16, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises audio captured by a microphone associated with the mobile device. ### Claim 24 (depends on 23) The system of claim 23, wherein determining the value comprises using at least one of acoustic location and voice recognition to determine whether the user is within a threshold distance of the mobile device. ### Claim 25 (depends on 24) The system of claim 24, wherein the acoustic location is performed upon determining that the mobile device has moved. ### Claim 26 (depends on 16) The system of claim 16, wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises one or more images captured by a camera associated with the mobile device. ### Claim 27 (depends on 26) The system of claim 26, wherein determining the value comprises analyzing the images to determine whether the user is shown. ### Claim 28 (depends on 26) The system of claim 26, wherein at least one of the images is captured upon determining that the camera associated with the mobile device has a line of sight to the user.