Back to results
US 10,757,097 B2Granted
Temporal identity vaulting
AssigneeT-Mobile USA, Inc.
InventorsEric Wayne Yocam, Shawn David Corey
Life of this patent
Estimating the term…
Abstract
A temporal identity vault used to authenticate an individual is described herein. User identifying input is received on a device, such as a cell phone. The identifying input is, in some examples, encrypted and stored as a temporal identity vault. The temporal identity vault is configured for a use. The use may be a time, location, or the like. A beacon is associated with the temporal identity vault. If the beacon is at a location relative to an object, the authentication process is started. The information stored in the temporal identity vault is authenticated at a central service. Upon authentication, the user is permitted to operate an object. The temporal identity vault may thereafter be deleted.
Claims20
A method, the method comprising:
- receiving, at a user device of a user, an input to generate a temporal identity vault;
- receiving, at the user device of the user, user identity data of the user comprising user biometric data of the user;
- receiving, at the user device of the user and from the user, a temporal identity vault configuration;
- applying, by the user device of the user, the temporal identity vault configuration to the temporal identity vault comprising the user identity data to generate a configured temporal identity vault that identifies the user;
- associating a beacon with an object to control access to the user identity data of the user using the temporal identity vault configuration;
- storing the configured temporal identity vault comprising the user identity data on the user device of the user;
- receiving a second temporal identity vault configuration associated with a second beacon to control access to one of the user identity data or another user identity data;
- applying the second temporal identity vault configuration to the configured temporal identity vault including a configuration that access to the one of the user identity data or the other user identity data in association with the second beacon is allowed if the user identity data was used to authenticate the user in association with first beacon;
- and
- storing the configured temporal identity vault to which the second temporal identity vault configuration was applied.
7 more elements
A method of authenticating a user, comprising;
- receiving, at a central authentication service and from a user device that is separate from the central authentication service, a first request to authenticate a user of the user device;
- receiving user identity information of the user associated with a temporal identity vault that identifies the user, the temporal identity vault that identifies the user being generated, based on a temporal identity vault configuration, at the user device of the user that is separate from the central authentication service;
- determining if the temporal identity vault is available for use using the temporal identity vault configuration;
- if the temporal identity vault is available for use, comparing the received user identity information of the user associated with the temporal identity vault to user identification identity information of the user stored at the central authentication service;
- authenticating the user if the received user identity information is the same as the user identity information stored at the central authentication service;
- transmitting an authentication successful message;
- receiving, at the central authentication service, a second request to authenticate the user of the user device;
- determining the user was successfully authenticated in response to the first request to authenticate the user of the user device;
- and
- authenticating the user in response to the second request to authenticated based at least in part on the determining the user was successfully authenticated in response to the first request to authenticate.
7 more elements
An apparatus comprising:
- a non-transitory storage medium;
- and
- instructions stored in the non-transitory storage medium, the instructions being executable by the apparatus to:
- receive, at a central authentication service and from a user device that is separate from the central authentication service, a first request to authenticate a user of the user device;
- receive user identity information of the user associated with a temporal identity vault that identifies the user, the temporal identity vault that identifies the user being generated, based on a temporal identity vault configuration, at the user device of the user that is separate from the central authentication service;
- determine if the temporal identity vault is available for use;
- if the temporal identity vault is available for use, compare the received user identity information of the user associated with the temporal identity vault to user identification identity information of the user stored at the central authentication service;
- authenticate the user if the received user identity information is the same as the user identity information stored at the central authentication service;
- transmit an authentication successful message;
- receive, at the central authentication service, a second request to authenticate the user of the user device;
- determine the user was successfully authenticated in response to the first request to authenticate the user of the user device;
- and
- authenticate the user in response to the second request to authenticated based at least in part on the determining the user was successfully authenticated in response to the first request to authenticate.
10 more elements
Dependencies are inferred from the claim text.