# US 11,451,553 B2 · Sensor-based human authorization evaluation > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,553 B2 - Document ID: US11451553B2 - Status: Granted - Kind: B2 - Application number: 17/006,566 - Filed: 2020-08-28 - Published: 2021-05-27 - Granted: 2022-09-20 - Earliest claimed: 2014-07-03 - Assignees: Live Nation Entertainment, Inc. - Applicants: Live Nation Entertainment, Inc. - Inventors: Fengpei Du; Michael Lane; Kenneth Ives-Halperin - Web page: https://patentgrep.com/patent/US11451553B2 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - G06F 21/31: User authentication - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - H04L 47/60: implementing hierarchical scheduling - H04L 51/04: Real-time or near real-time messaging, e.g. instant messaging [IM] - H04L 63/102: {Entity profiles} - H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks - H04L 67/52: specially adapted for the location of the user terminal - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06F 2221/2133: Verifying human interaction, e.g., Captcha - H04L 51/222: using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A resource-access management system detects whether a user is authorized to access resources. The system may include a user device being configured to include a sensor that detects sensor data associated with the user. Further, the system includes a client qualification engine that determines whether or not a client is authorized to access the resources by comparing the sensor data with a plurality of patterns for evaluating whether or not the user is an authorized user. User scores are generated based on the compared sensor data and the plurality of patterns. Further, a composite score corresponding to the user is generated using the sensor data, plurality of patterns, and one or more additional criteria. Whether the user is granted access to the resources, presented with unauthorized user tests, or blocked from access to the resources depends on the composite score and threshold values. ## Claims ### Claim 1 A computer-implemented method, comprising: detecting, at a resource management system, a request pertaining to one or more items of resources, the request having originated at a user device operated by a user, the user device being configured to include a display and a processor that communicates with at least one sensor, the at least one sensor detecting sensor data associated with the user, the detected sensor data being stored on the user device; receiving the sensor data stored in the user device; evaluating the sensor data and generating an agent-characterization result based on the sensor data and based on a number of times the user has gained access to the one or more items of resources, the agent-characterization result being indicative of whether or an extent to which a characteristic of the sensor data corresponds to a human-user characteristic; determining, based on the agent-characterization result, whether an unauthorized user test is to be displayed on the display of the user device; when it is determined that the unauthorized user test is to be displayed on the display of the user device: identifying one or more unauthorized user tests comprising the unauthorized user test to be displayed on the display of the user device based on the sensor data, and including determining a number of unauthorized user tests to present based on the sensor data; displaying the unauthorized user test; receiving a response to the unauthorized user test; and processing the response to the unauthorized user test to determine whether a satisfying criterion is satisfied; and when it is determined that the unauthorized user test is not to be displayed or that the satisfying criterion is satisfied, authorizing the user operating the user device to access the one or more items of resources. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the determining of whether the unauthorized user test is to be displayed comprises: identifying one or more test-satisfying criteria, wherein the identification of the one or more test-satisfying criteria is based on the sensor data. ### Claim 3 (depends on 1) The computer-implemented method of claim 1, further comprising: processing the one or more responses and the sensor data to identify a degree of electronic access to authorize for the user device; and authorizing resources to be electronically accessed in accordance with the identified degree of electronic access via the user device. ### Claim 4 (depends on 2) The computer-implemented method of claim 2, wherein the identifying of the one or more unauthorized user tests is based on the sensor data and includes determining a level of difficulty of the unauthorized user tests to display based on the sensor data, the level of difficulty corresponding to a difficulty level associated with a bot user successfully satisfying the unauthorized user tests. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, further comprising: monitoring measurements from the at least one sensor in the user device during a period of time; and determining a template sensor-data characteristic based on the measurements. ### Claim 6 A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions configured to cause a data processing apparatus to perform operations including: detecting a request pertaining to one or more items of resources, the request having originated at a user device operated by a user, the user device being configured to include a display and a processor that communicates with at least one sensor, the at least one sensor detecting sensor data associated with the user, the detected sensor data being stored on the user device; receiving the sensor data stored in the user device; evaluating the sensor data and generating an agent-characterization result based on the sensor data and based on a number of times the user has gained access to the one or more items of resources, the agent-characterization result being indicative of whether or an extent to which a characteristic of the sensor data corresponds to a human-user characteristic; determining, based on the agent-characterization result, whether an unauthorized user test is to be displayed on the display of the user device; when it is determined that the unauthorized user test is to be displayed on the display of the user device: identifying one or more unauthorized user tests comprising the unauthorized user test to be displayed on the display of the user device based on the sensor data, and including determining a number of unauthorized user tests to present based on the sensor data; displaying the unauthorized user test; receiving a response to the unauthorized user test; and processing the response to the unauthorized user test to determine whether a satisfying criterion is satisfied; and when it is determined that the unauthorized user test is not to be displayed or that the satisfying criterion is satisfied, authorizing the user operating the user device to access the one or more items of resources. ### Claim 7 (depends on 6) The computer-program product of claim 6, wherein the determining of whether the unauthorized user test is to be displayed comprises: identifying one or more unauthorized user tests to be displayed on the display of the user device; identifying one or more test-satisfying criteria, wherein the identification of the one or more test-satisfying criteria is based on the sensor data. ### Claim 8 (depends on 6) The computer-program product of claim 6, further comprising: processing the one or more responses and the sensor data to identify a degree of electronic access to authorize for the user device; and authorizing resources to be electronically accessed in accordance with the identified degree of electronic access via the user device. ### Claim 9 (depends on 7) The computer-program product of claim 7, wherein the identifying of the one or more unauthorized user tests is based on the sensor data and includes determining a level of difficulty of the unauthorized user tests to display based on the sensor data, the level of difficulty corresponding to a difficulty level associated with a bot user successfully satisfying the unauthorized user tests. ### Claim 10 (depends on 6) The computer-program product of claim 6, further comprising: monitoring measurements from the at least one sensor in the user device during a period of time; and determining a template sensor-data characteristic based on the measurements. ### Claim 11 A system, comprising: one or more processors; and a non-transitory computer-readable storage medium containing instructions which, when executed on the one or more processors, cause the one or more processors to perform operations including: detecting a request pertaining to one or more items of resources, the request having originated at a user device operated by a user, the user device being configured to include a display and a processor that communicates with at least one sensor, the at least one sensor detecting sensor data associated with the user, the detected sensor data being stored on the user device; receiving the sensor data stored in the user device; evaluating the sensor data and generating an agent-characterization result based on the sensor data and based on a number of times the user has gained access to the one or more items of resources, the agent-characterization result being indicative of whether or an extent to which a characteristic of the sensor data corresponds to a human-user characteristic; determining, based on the agent-characterization result, whether an unauthorized user test is to be displayed on the display of the user device; when it is determined that the unauthorized user test is to be displayed on the display of the user device: identifying one or more unauthorized user tests comprising the unauthorized user test to be displayed on the display of the user device based on the sensor data, and including determining a number of unauthorized user tests to present based on the sensor data; displaying the unauthorized user test; receiving a response to the unauthorized user test; and processing the response to the unauthorized user test to determine whether a satisfying criterion is satisfied; and when it is determined that the unauthorized user test is not to be displayed or that the satisfying criterion is satisfied, authorizing the user operating the user device to access the one or more items of resources. ### Claim 12 (depends on 11) The system of claim 11, wherein the determining of whether the unauthorized user test is to be displayed comprises: identifying one or more unauthorized user tests to be displayed on the display of the user device; identifying one or more test-satisfying criteria, wherein the identification of the one or more test-satisfying criteria is based on the sensor data. ### Claim 13 (depends on 11) The system of claim 11, further comprising: processing the one or more responses and the sensor data to identify a degree of electronic access to authorize for the user device; and authorizing resources to be electronically accessed in accordance with the identified degree of electronic access via the user device. ### Claim 14 (depends on 12) The system of claim 12, wherein the identifying of the one or more unauthorized user tests is based on the sensor data and includes determining a level of difficulty of the unauthorized user tests to display based on the sensor data, the level of difficulty corresponding to a difficulty level associated with a bot user successfully satisfying the unauthorized user tests. ### Claim 15 (depends on 11) The system of claim 11, further comprising: monitoring measurements from the at least one sensor in the user device during a period of time; and determining a template sensor-data characteristic based on the measurements. ### Claim 16 (depends on 1) The computer-implemented method as claimed in claim 1, wherein when it is determined that the unauthorized user test is displayed or that the satisfying criterion is not satisfied, identifying a level of restriction for the user operating the user device to access the one or more items of resources.