# US 11,122,045 B2 · Authentication using credentials submitted via a user premises device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,122,045 B2
- Document ID: US11122045B2
- Status: Granted
- Kind: B2
- Application number: 16/429,643
- Filed: 2019-06-03
- Published: 2019-09-19
- Granted: 2021-09-14
- Earliest claimed: 2017-02-17
- Assignees: AT&T Intellectual Property I, L.P.
- Applicants: AT&T Intellectual Property I, L.P.
- Inventors: Cristina Serban; Wei Wang
- Web page: https://patentgrep.com/patent/US11122045B2

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04L 63/1458: {Denial of Service}
- H04L 2463/082: applying multi-factor authentication
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

An authentication system can be operable to receive from a user premises device credentials associated with a user identity, wherein the user premises device can also be operable to monitor and control a premise of the user identity. The authentication system can process the credentials and transmit an authentication verification to an on-line system to enable access to the on-line system by a user equipment of the user identity. The authentication system can be used as a factor (or additional factor) of authentication, for example, to gain sooner access to an on-line system that has locked out a user identity in response to a personal denial of service (PDoS) attack.

## Claims

### Claim 1

A method, comprising:
receiving, by a first system comprising a processor, an unlock request that was transmitted by a second system in response to a condition in which a user identity has been denied access to the second system for a period based on repeated unsuccessful attempts to access the second system using a login associated with the user identity;
based on receipt of the unlock request, sending, by the first system, a prompt for a credential displayed on a user premises equipment located within a premises associated with the user identity, wherein:
the user premises equipment performs monitoring and controlling of the premises, and
the second system provides a service that is unrelated to the monitoring and the controlling of the premises;
generating, by the first system, a time duration for the credential to be input into the user premises equipment;
receiving, by the first system from the user premises equipment, the credential that was input into the user premises equipment within the time duration;
comparing, by the first system, the credential with a stored credential obtained prior to receipt of the credential; and
in response to the credential being determined to match the stored credential, transmitting, by the first system, an authentication verification to the second system enabling the access to the second system.

### Claim 2 (depends on 1)

The method of claim 1, wherein the user premises equipment monitors and controls a lighting equipment in the premises.

### Claim 3 (depends on 1)

The method of claim 1, wherein the user premises equipment monitors and controls a parameter of a security equipment of a physical security network of the premises.

### Claim 4 (depends on 1)

The method of claim 1, wherein the user premises equipment monitors and controls a temperature in the premises.

### Claim 5 (depends on 1)

The method of claim 1, wherein the credential comprises a picture associated with the user identity, and wherein the picture is taken by a camera associated with the user premises equipment.

### Claim 6 (depends on 1)

The method of claim 1, wherein the credential comprises a biometric credential associated with the user identity, and wherein the biometric credential is input via a biometric reader associated with the user premises equipment.

### Claim 7 (depends on 6)

The method of claim 6, wherein the biometric credential comprises a fingerprint relating to a finger associated with the user identity, and wherein the biometric reader comprises a fingerprint reader.

### Claim 8 (depends on 6)

The method of claim 6, wherein the biometric credential comprises a voice print relating to speech associated with the user identity, and wherein the biometric reader comprises a microphone.

### Claim 9 (depends on 6)

The method of claim 6, wherein the biometric credential comprises a retinal scan relating to an eye associated with the user identity, and wherein the biometric reader comprises a retinal scanner.

### Claim 10 (depends on 6)

The method of claim 6, wherein the biometric credential comprises an iris image relating to an eye associated with the user identity, and wherein the biometric reader comprises an iris scanner.

### Claim 11 (depends on 6)

The method of claim 6, wherein the biometric credential comprises a hand geometry measurement relating to a hand associated with the user identity, and wherein the biometric reader comprises a hand geometry reader.

### Claim 12

A system, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
receiving an unlock request from a server that facilitates provision of a service, wherein the unlock request was generated by the server in response to a user identity being denied access to the service for a period due to repeated unsuccessful attempts to access the service using a login associated with the user identity;
generating a time duration for a first credential to be input into user premises equipment;
receiving, from the server, the first credential related to the user identity that was obtained via the user premises equipment, wherein:
the user premises equipment is used for monitor and control of equipment of a premises associated with, and accessible using, the user identity, and is located within the premises, and
the service is unrelated to the monitor and the control of the equipment devices;
comparing the first credential with a second credential of the user identity obtained from a memory accessible to the server, wherein the second credential was obtained prior to receipt of the first credential; and
in response to the first credential being determined to match the second credential within the time duration, transmitting an authentication verification to the server enabling the access to the service.

### Claim 13 (depends on 12)

The system of claim 12, wherein the user premises equipment monitors and controls lighting in the premises.

### Claim 14 (depends on 12)

The system of claim 12, wherein the user premises equipment monitors and controls a parameter related to a physical security of the premises.

### Claim 15 (depends on 12)

The system of claim 12, wherein the user premises equipment monitors and controls a temperature in the premises.

### Claim 16 (depends on 12)

The system of claim 12, wherein the first credential comprises an image related to the user identity, and wherein a camera associated with the user premises equipment captured the image.

### Claim 17 (depends on 12)

The system of claim 12, wherein the first credential comprises a biometric credential was input via a biometric reader associated with the user premises equipment.

### Claim 18

A non-transitory machine-readable medium, comprising executable instructions that, when executed by an identity verification system comprising a processor, facilitate performance of operations, comprising:
receiving an unlock request for access to an on-line system in response to the access being denied for a period to the on-line system based on multiple unsuccessful attempts to log in to the on-line system using a login credential associated with a user identity;
receiving a time period applicable to a first credential being determined to be input into user premises equipment;
receiving, from the user premises equipment, the first credential that was obtained via the user premises equipment, wherein the user premises equipment is located in a premises accessible using the user identity, and wherein the user premises equipment monitors and controls a device unrelated to a service that the on-line system enables;
comparing the first credential with a second credential of the user identity obtained from a memory accessible to the identity verification system, wherein the second credential was obtained prior to receipt of the first credential; and
in response to the first credential being determined to match the second credential within the time period, transmitting an authentication verification to the on-line system that facilitates the access to the on-line system.

### Claim 19 (depends on 18)

The non-transitory machine-readable medium of claim 18, wherein the device unrelated to the service comprises an internet of things device.

### Claim 20 (depends on 18)

The non-transitory machine-readable medium of claim 18, wherein the first credential comprises a biometric credential associated with the user identity, and wherein the first credential is received via a biometric reader of the user premises equipment that receives the biometric credential.