# US 10,320,782 B2 · Methods and systems for authenticating users

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,320,782 B2
- Document ID: US10320782B2
- Status: Granted
- Kind: B2
- Application number: 15/686,251
- Filed: 2017-08-25
- Published: 2018-01-25
- Granted: 2019-06-11
- Earliest claimed: 2009-08-05
- Assignees: Daon Holdings Limited
- Applicants: Daon Holdings Limited
- Inventors: Conor Robert White; Michael Peirce; Jason Scott Cramer; Chet Bradford Steiner; Suzanna Diebes
- Web page: https://patentgrep.com/patent/US10320782B2

## CPC

- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- G06F 21/31: User authentication
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06Q 10/00: Administration; Management
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 30/06: Buying, selling or leasing transactions
- H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key}
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled. Additionally, the method includes validating the communications device, capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device, biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.

## Claims

### Claim 1

A method for authenticating users comprising:
determining, by a processor, a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;
when the state of the communications device is enrolled, determining, by the processor, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device and the transaction for unlocking an electronic door lock;
determining, based on the transaction risk level, a biometric parameter for authenticating the user;
authenticating the user based on the biometric parameter; and
transmitting a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.

### Claim 2 (depends on 1)

A method for authenticating users in accordance with claim 1, said determining, based on the transaction risk level, step comprising determining, based on the policy, the parameter for authenticating the user.

### Claim 3

A computing device for authenticating users comprising:
a processor; and
a memory configured to store data, said computing device being associated with a network and said memory being in communication with said processor and having instructions stored thereon which, when executed by said processor, cause said computing device to:
determine a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;
when the state of the device is enrolled, determine, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device and the transaction for unlocking an electronic door lock;
determine, based on the transaction risk level, a biometric parameter for authenticating the user;
authenticate the user based on the biometric parameter; and
transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door\.

### Claim 4 (depends on 3)

A computing device for authenticating users in accordance with claim 3, said computing device being an authentication computer system.

### Claim 5 (depends on 4)

A computing device for authenticating users in accordance with claim 4, said computing device being a smart phone.

### Claim 6 (depends on 4)

A computing device for authenticating users in accordance with claim 4, said computing device being a tablet computer.

### Claim 7

A non-transitory computer-readable recording medium included in a computing device having stored thereon a computer program for enhancing accuracy of biometric authentication transaction results, the computer program being comprised of instructions, which when read and executed by the computing device, cause the computing device to:
determine a state of a communications device as enrolled or not enrolled, the communications device being associated with a user;
when the state of the device is enrolled, determine, based on a user request to conduct a transaction, a risk level for the transaction, the request being received from the communications device, and the transaction for unlocking an electronic door lock;
determine, based on the transaction risk level, a biometric parameter for authenticating the user;
authenticate the user based on the biometric parameter; and
transmit a message to the electronic door lock after successfully authenticating the user, the message being an instruction to unlock the door.