# US 11,451,536 B2 · User state monitoring system and method using motion, and a user access authorization system and method employing same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,536 B2 - Document ID: US11451536B2 - Status: Granted - Kind: B2 - Application number: 16/663,781 - Filed: 2019-10-25 - Published: 2021-04-29 - Granted: 2022-09-20 - Earliest claimed: 2019-10-25 - Assignees: Nymi Inc. - Applicants: Nymi Inc. - Inventors: Stuart Keith MacLean; Abhishek Ranjan - Web page: https://patentgrep.com/patent/US11451536B2 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/102: {Entity profiles} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/166: {at the transport layer} - H04W 12/065: Continuous authentication - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04W 12/63: Location-dependent; Proximity-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Described are various embodiments of a system for monitoring a physical user presence during an authenticated user access session at an access point. In one embodiment, the system comprises a wireless digital user authentication device (UAD) operable to wirelessly establish the authenticated user access session, periodically communicate an authenticated presence code to actively maintain the session and acquire motion-related data during the session to capture a UAD departure motion representative of the user departing from the access point. The system further comprises a digital application operatively associated with the access point and operable to wirelessly establish the session with the UAD upon arrival at the access point, and periodically receive the authenticated presence code to maintain the authenticated user access session. The authenticated user session is terminated upon identifying the UAD departure motion from said the motion-related data. ## Claims ### Claim 1 A system for monitoring a physical user presence during an authenticated user access session at an access point, the system comprising: a wireless digital user authentication device (UAD) comprising a wireless transceiver and digital data processor operable to: wirelessly establish the authenticated user access session at the access point; periodically communicate an authenticated presence code to the access point during the authenticated user access session so to actively maintain the authenticated user access session; and acquire motion data during the authenticated user access session so to capture a UAD departure motion representative of the user departing from the access point; and a digital application operatively associated with the access point and operable to: wirelessly establish the authenticated user access session with the UAD upon arrival at the access point; and periodically receive said authenticated presence code so to maintain the authenticated user access session, and otherwise terminate the authenticated user access session upon failure to timely receive said authenticated presence code; wherein said motion data is periodically processed to identify said UAD departure therefrom, and said authenticated user access session is terminated upon identifying said UAD departure motion from said motion data. ### Claim 2 (depends on 1) The system of claim 1, wherein said UAD is further operable to periodically communicate said motion data to said digital application via the access point, wherein said digital application initiates termination of the authenticated user access session upon processing said motion data to identify said UAD departure motion therefrom. ### Claim 3 (depends on 2) The system of claim 2, wherein said motion data is periodically communicated with said authenticated presence code. ### Claim 4 (depends on 2) The system of claim 2, wherein said digital application communicates termination of the authenticated user access session to said UAD via acknowledgement of said authenticated presence code, which results in termination of said periodic communication of said authenticated presence code. ### Claim 5 (depends on 1) The system of claim 1, wherein said UAD is further operable to process said motion data to identify capture of said UAD departure motion, and initiate termination of the authenticated user access session accordingly. ### Claim 6 (depends on 5) The system of claim 5, wherein termination of the authenticated user access session is initiated by said UAD upon identifying capture of said UAD departure motion by communicating a user departing status identifier representative of a user departure to the access point, wherein said digital application terminates the authenticated user access session upon receipt of said user departing status identifier. ### Claim 7 (depends on 6) The system of claim 6, wherein said user departing status identifier is communicated with said periodically communicated authenticated presence code. ### Claim 8 (depends on 5) The system of claim 5, wherein said UAD automatically terminates periodic communication of said authenticated presence code upon identifying said UAD departure motion, resulting in termination of the authenticated user access session. ### Claim 9 (depends on 1) The system of claim 1, wherein at least one of said UAD or said digital application is operable to process proximity data related to wireless communications therebetween, wherein said authenticated user access session is only terminated upon said identified UAD departure motion coinciding with a change in proximity as determined from said proximity data. ### Claim 10 (depends on 9) The system of claim 9, wherein said proximity data is representative of at least one of a wireless signal attenuation, time-of-flight measurement, or radio fingerprint. ### Claim 11 (depends on 9) The system of claim 9, wherein said proximity data is acquired at or by the UAD, and/or at or by the access point. ### Claim 12 (depends on 1) The system of claim 1, wherein said UAD further comprises a physiological sensor operable to acquire physiological data, and wherein the authenticated user access session is further only terminated upon said identified UAD departure motion coinciding with identification of a change in said physiological data representative of an increase in user physical activity consistent with said UAD departure motion. ### Claim 13 (depends on 12) The system of claim 12, wherein said physiological sensor comprises at least one of a photoplethysmogram (PPG) sensor or an electrocardiograms (ECG) sensor. ### Claim 14 An automated method for monitoring a physical user presence during an authenticated user access session at an access point, the method comprising: wirelessly establishing the authenticated user access session between a wireless digital user authentication device (UAD) and a network application operatively associated with the access point; periodically communicating an authenticated presence code from the UAD to the access point during the authenticated user access session so to actively maintain the authenticated user access session; acquiring motion data via said UAD during the authenticated user access session so to capture a UAD departure motion representative of the user departing from the access point; periodically processing said motion data to identify therefrom said UAD departure motion; and terminating said authenticated user access session upon identifying said UAD departure motion from said motion data. ### Claim 15 (depends on 14) The automated method of claim 14, wherein said motion data is periodically communicated with said authenticated presence code so to actively maintain the authenticated user access session until said UAD departure motion is identified therefrom. ### Claim 16 (depends on 15) The automated method of claim 15, wherein said terminating comprises communicating termination of the authenticated user access session to said UAD via acknowledgement of said authenticated presence code, which results in termination of said periodic communication of said authenticated presence code. ### Claim 17 (depends on 14) The automated method of claim 14, further comprising said UAD processing said motion data onboard to identify said UAD departure motion, and initiating termination of the authenticated user access session accordingly. ### Claim 18 (depends on 17) The automated method of claim 17, wherein said initiating termination comprises communicating a user departing status identifier representative of a user departure to the access point, wherein the authenticated user access session is terminated upon receipt of said user departing status identifier by the access point. ### Claim 19 (depends on 18) The automated method of claim 18, wherein said user departing status identifier is communicated with said periodically communicated authenticated presence code. ### Claim 20 (depends on 17) The automated method of claim 17, wherein said UAD automatically terminates periodic communication of said authenticated presence code upon identifying said UAD departure motion, resulting in termination of the authenticated user access session. ### Claim 21 (depends on 14) The automated method of claim 14, further comprising processing proximity data related to wireless communications between said UAD and said access point, and wherein said terminating comprises only terminating the authenticated user access session upon said identified UAD departure motion coinciding with a change in proximity as determined from said proximity data. ### Claim 22 (depends on 14) The automated method of claim 14, further comprising acquiring physiological data from said UAD, and wherein said terminating comprises only terminating the authenticated user access session upon said identified UAD departure motion coinciding with identification of a change in said physiological data representative of an increase in user physical activity consistent with said UAD departure motion. ### Claim 23 A portable digital user authentication device (UAD) for monitoring a physical user presence during an authenticated user access session at an access point, the device comprising: a wireless transceiver; and a digital data processor operable to: wirelessly establish the authenticated user access session at the access point via said wireless transceiver; acquire motion data during the authenticated user access session representative of user motion; periodically process said motion data to identify therefrom a designated UAD departure motion; update a user motion status indicator as representative of the user departing from the access point upon identification of said designated UAD departure motion; and periodically communicate an authenticated presence code and said user motion status indicator to the access point during the authenticated user access session so to actively maintain the authenticated user access session unless said user motion status indicator is representative of the user departing from the access point, wherein said authenticated user access session is terminated upon the access point failing to timely receive said authenticated presence code. ### Claim 24 (depends on 23) The device of claim 23, wherein the device is further operable to process proximity data related to wireless communications between the device and the access point, wherein said authenticated user access session is only terminated upon said identified UAD departure motion coinciding with a change in proximity as determined from said proximity data. ### Claim 25 (depends on 24) The device of claim 24, wherein said proximity data is representative of at least one of a wireless signal attenuation, time-of-flight measurement, or radio fingerprint. ### Claim 26 (depends on 23) The device of claim 23, wherein the device further comprises a physiological sensor operable to acquire physiological data, and wherein the authenticated user access session is further only terminated upon said identified UAD departure motion coinciding with identification of a change in said physiological data representative of an increase in user physical activity consistent with said UAD departure motion. ### Claim 27 (depends on 26) The device of claim 26, wherein said physiological sensor comprises at least one of a photoplethysmogram (PPG) sensor or an electrocardiograms (ECG) sensor. ### Claim 28 (depends on 1) The system of claim 1, wherein said motion data is periodically processed with said authenticated presence code to terminate said authenticated user access session upon said identifying said UAD departure motion from said motion data. ### Claim 29 (depends on 1) The system of claim 1, wherein said motion data is acquired via one or more of an accelerometer, a motion sensor, a step counter, a global positioning system, or a gyroscope on board said UAD.