# US 12,003,506 B2 · Biometrics based access controls for network features > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,003,506 B2 - Document ID: US12003506B2 - Status: Granted - Kind: B2 - Application number: 17/407,666 - Filed: 2021-08-20 - Published: 2022-04-07 - Granted: 2024-06-04 - Earliest claimed: 2020-10-07 - Assignees: ARRIS Enterprises LLC - Applicants: ARRIS Enterprises LLC - Inventors: Akhtar Ghaus Zaman; Muralidharan Narayanan - Web page: https://patentgrep.com/patent/US12003506B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - G06V 40/1365: {Matching; Classification} - G06V 40/172: {Classification, e.g. identification} - G06V 40/70: Multimodal biometrics, e.g. combining information from different biometric modalities - H04L 63/105: {Multiple levels of security} - H04L 67/306: User profiles - H04L 67/52: specially adapted for the location of the user terminal - H04W 12/06: Authentication - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract To prevent unauthorized access to a network feature, multiple levels of authentication are required by utilizing a biometric authentication application that can verify access based on an authentication configuration that, for example, includes biometric data associated with a user. Requiring additional authentication to one or more network features or settings while allowing one or more other network features or settings to have less authentication provides a quality of experience for every user with access to the application while maintaining enhanced security to those network features that may be key/sensitive or require additional security. Additionally, using biometric data to perform the additional level of authentication ensures that a particular user seeking access to key or sensitive network features or settings of a network is the authorized user and not another user that has gained access to a network device associated with the authorized user. ## Claims ### Claim 1 A method for utilizing a biometric authentication application to control access to one or more features associated with access to a network comprising: receiving a request from a user of a client device to access a network feature of the network; receiving a biometric data associated with the user of the client device; comparing the network feature associated with the request to the one or more features; determining an authentication level associated with the network feature based on the comparison of the network feature and the one or more features; verifying access to the network feature, wherein the verifying the access comprises: comparing the biometric data to previously stored biometric data associated with the user based, at least in part, on the authentication level; and controlling access to the network feature by the user based, at least in part, on the comparing the biometric data to the previously stored biometric data. ### Claim 2 (depends on 1) The method of claim 1, wherein the previously stored biometric data is received from a biometric repository. ### Claim 3 (depends on 1) The method of claim 1, wherein the authentication level is associated with a plurality of biometric types. ### Claim 4 (depends on 1) The method of claim 1, wherein the plurality of biometric types comprises any of a voice scan, a fingerprint, a retinal scan, a one-time password (OTP), a facial recognition, or a combination thereof. ### Claim 5 (depends on 1) The method of claim 1, further comprising: determining a location of the client device; and wherein the determining the authentication level is based, at least in part, on the location of the client device. ### Claim 6 (depends on 1) The method of claim 1, further comprising: determining a user profile associated with the user, wherein the user profile is associated with at least one of the one or more features that require one or more authentication levels; and wherein the determining the authentication level is based, at least in part, on the user profile associated with the user. ### Claim 7 (depends on 1) The method of claim 1, wherein the request is for creating an authentication configuration, wherein the authentication configuration is associated with at least one of the one or more features. ### Claim 8 A biometric repository coupled to a network for providing authentication for access to network feature by a user of a client device, the biometric repository comprising: a memory storing one or more computer-readable instructions; and a processor configured to execute the one or more computer-readable instructions to: receive a request from a client device, wherein the request is associated with access to a network feature of the network; receive a biometric data associated with the user of the client device; compare the network feature associated with the request to the one or more features: determine an authentication level associated with the network feature based on the comparison of the network feature and the one or more features; verifying access to the network feature, wherein the verifying the access comprises: comparing the biometric data to previously stored biometric data associated with the user based, at least in part, on the authentication level; and control access to the network feature by the user based, at least in part, on the comparing the biometric data to the previously stored biometric data. ### Claim 9 (depends on 8) The biometric repository of claim 8, wherein the processor is further configured to execute the one or more computer-readable instructions to: create an authentication configuration, wherein the authentication configuration is associated with at least one of the one or more features, and wherein creating the authentication configuration comprises: receiving one or more initial biometric data associated with the user; storing the one or more initial biometric data as the previously stored biometric data; associating the biometric data with one or more features, wherein the one or more features comprise the network feature; associating the one or more features with one or more authentication levels, wherein the one or more authentication levels comprise the authentication level; and associating the one or more authentication levels with one or more biometric types, wherein the initial biometric data is associated with at least one of the one or more biometric types. ### Claim 10 (depends on 9) The biometric repository of claim 9, wherein the processor is further configured to execute the one or more computer-readable instructions to: associate the user with a user profile, wherein the user profile is associated with at least one of the one or more features that require one or more authentication levels; and wherein the verifying the access to the network feature is based, at least in part, on the user profile associated with the user. ### Claim 11 (depends on 8) The biometric repository of claim 8, wherein the authentication level is associated with a plurality of biometric types. ### Claim 12 (depends on 11) The biometric repository of claim 11, wherein the plurality of biometric types comprises any of a voice scan, a fingerprint, a retinal scan, a one-time password (OTP), a facial recognition, or a combination thereof. ### Claim 13 (depends on 8) The biometric repository of claim 8, wherein the processor is further configured to execute the one or more computer-readable instructions to: determine a location of the client device; and wherein the determining the authentication level is based, at least in part, on the location of the client device. ### Claim 14 (depends on 8) The biometric repository of claim 8, wherein the biometric repository is remote from the client device. ### Claim 15 A non-transitory computer-readable medium storing one or more computer executable instructions for controlling access to one or more features associated with access to a network, which when executed by a processor of a network device, cause the network device to perform one or more operations comprising: receiving a request from a user of a client device to access a network feature of the network; receiving a biometric data associated with the user of the client device; comparing the network feature associated with the request to the one or more features; determining an authentication level associated with the network feature based on the comparison of the network feature and the one or more features; verifying access to the network feature, wherein the verifying the access comprises: comparing the biometric data to previously stored biometric data associated with the user based, at least in part, on the authentication level; and controlling access to the network feature by the user based, at least in part, on the comparing the biometric data to previously stored biometric data. ### Claim 16 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more computer executable instructions when executed by the processor further cause the network device to perform one or more further operations comprising: receiving, from a biometric repository, the previously stored biometric data associated with the user. ### Claim 17 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the authentication level is associated with a plurality of biometric types. ### Claim 18 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the plurality of biometric types comprises any of a voice scan, a fingerprint, a retinal scan, a one-time password (OTP), a facial recognition, or a combination thereof. ### Claim 19 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more computer executable instructions when executed by the processor further cause the network device to perform one or more further operations comprising: determining a location of the client device; and wherein the determining the authentication level is based, at least in part, on the location of the client device. ### Claim 20 (depends on 15) The non-transitory computer-readable medium of claim 15, wherein the one or more computer executable instructions when executed by the processor further cause the network device to perform one or more further operations comprising: determining a user profile associated with the user, wherein the user profile is associated with at least one of the one or more features that require one or more authentication levels; and wherein the determining the authentication level is based, at least in part, on the user profile associated with the user.