# US 11,115,403 B2 · Multi-level user device authentication system for internet of things (IOT) > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,115,403 B2 - Document ID: US11115403B2 - Status: Granted - Kind: B2 - Application number: 15/897,195 - Filed: 2018-02-15 - Published: 2018-06-28 - Granted: 2021-09-07 - Earliest claimed: 2017-02-21 - Applicants: Baldev Krishan - Inventors: Baldev Krishan - Web page: https://patentgrep.com/patent/US11115403B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - G06F 21/31: User authentication - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - H04L 63/105: {Multiple levels of security} - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04W 12/06: Authentication - G06F 2221/2113: Multi-level security, e.g. mandatory access control - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 2463/121: Timestamp - H04W 12/61: Time-dependent - H04W 12/65: Environment-dependent, e.g. using captured environmental data - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The present invention describes the user authentication system comprising of multiple levels of security which is used to authorize the user. The system uses more than one levels of authentication process which receives the credentials from the user and authorizes them to allow access to the IoT devices which are used by the user. The connected devices represent individual targets, for the cyber-criminals who 20 would hack the devices to retrieve the secure information of the users. Such insecurities about the IoT devices and the system are eliminated by using the multiple level user authentication system which is described in the present invention. ## Claims ### Claim 1 A user-device authentication system comprising: memory configured to store computer-executable instructions, and at least one computer processor configured to access the memory and execute the computer-executable instructions to: receive, at a third device, a request for access to information from a first device, the first device being a first Internet of Things (IoT) device; request a phone number from the first device; receive the phone number from the first device; determine a user profile associated with the phone number; determine a second device associated with the user profile, the second device being a second Internet of Things (IoT) device; send a first message to the second device associated with the user profile, the first message requesting user authentication on the second device using biometric information configured to be obtained on the second device; receive a second message from the second device, the second message validating authentication based on the biometric information obtained on the second device; send a third message to the first device granting access to information to the first device based on the second message validating authentication; and share, by the third device, the information with the first device. ### Claim 2 (depends on 1) The user-device authentication system of claim 1, wherein a user identification is associated with the user profile and corresponds to the first device and the second device. ### Claim 3 (depends on 1) The user-device authentication system of claim 1, wherein the biometric information obtained on the second device is a fingerprint or an iris scan. ### Claim 4 (depends on 1) The user-device authentication system of claim 1, wherein receiving a request for access from a first device comprises receiving a user identification and password from the first device, and further comprising determining that the user identification and password match a known user identification and known password corresponding to the known user identification. ### Claim 5 (depends on 1) The user-device authentication system of claim 1, wherein the second device maintains, on the second device, second biometric information for validating the biometric information obtained on the second device. ### Claim 6 (depends on 1) The user-device authentication system of claim 1, wherein the request for access to information from the first device comprises one or more of a request for access to health information, fitness information, or entertainment information. ### Claim 7 (depends on 1) The method of claim 1, wherein the phone number corresponds to the second device. ### Claim 8 A method for granting access to information by a first device, the method comprising: receiving, by the first device, a request for access to information from a second device, the second device being a first Internet of Things (IoT) device; sending, by the first device, a request for a phone number to the second device; receiving, by the first device, the phone number; determining, by the first device, a user profile associated with the phone number; determining, by the first device, a third device corresponding to the user profile, the third device being a second Internet of Things (IoT) device; sending, by the first device, a request for biometric authentication using biometric information obtained on the third device to the third device; receiving, by the third device, the request for biometric authentication; obtaining, by the third device, first biometric information; determining, by the third device, that first biometric information obtained on the third device matches second biometric information saved on the third device; receiving, by the first device, a message indicating that the biometric information has been authenticated by the third device; sending, by the first device, instructions granting the request for access to information to the second device; and sharing, by the first device, the information with the second device. ### Claim 9 (depends on 8) The method of claim 8, wherein the biometric information comprises at least one of a fingerprint or an iris scan. ### Claim 10 (depends on 8) The method of claim 8, wherein the phone number and user profile are associated with the second device. ### Claim 11 (depends on 8) The method of claim 8, wherein the request for access from the second device comprises one or more of a request for access to health information, fitness information, or entertainment information. ### Claim 12 A method for granting a first device access to information, the method comprising: receiving, by a third device, a request for access to information from the first device, the first device being a first Internet of Things (IoT) device; requesting, by the third device, phone number from the first device; receiving, by the third device, the phone number from the first device; determining, by the third device, a user profile associated with the phone number; determining, by the third device, a second device associated with the user profile, the second device being a second Internet of Things (IoT) device; sending, by the third device, a first message to the second device associated with the user profile, the first message requesting user authentication on the second device using biometric information obtained on the second device; receiving, by the second device, the first message requesting user authentication on the second device using biometric information; obtaining, by the second device, first biometric information; determining, by the second device, that first biometric information obtained on the second device matches second biometric information saved on the second device; receiving, by the third device, a second message from the second device, the second message validating authentication based on the biometric information obtained on the second device; and sending, by the third device, a third message to the first device granting access to information to the first device based on the second message validating authentication. ### Claim 13 (depends on 12) The method of claim 12, wherein the biometric information obtained on the second device is a fingerprint or an iris scan. ### Claim 14 (depends on 12) The method of claim 12, wherein the request for access to information from the first device comprises one or more of a request for access to health information, fitness information, or entertainment information.