# US 12,192,197 B2 · Proximity based identity modulation for an identity verification system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,192,197 B2
- Document ID: US12192197B2
- Status: Granted
- Kind: B2
- Application number: 17/542,289
- Filed: 2021-12-03
- Published: 2022-06-09
- Granted: 2025-01-07
- Earliest claimed: 2020-12-04
- Assignees: TruU, Inc.
- Applicants: TruU, Inc.
- Inventors: Lucas Allen Budman; Amitabh Agrawal; Oleksandr Rodak; Andrew Weber Spott
- Web page: https://patentgrep.com/patent/US12192197B2

## CPC

- G06F 21/31: User authentication
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- G06F 3/011: {Arrangements for interaction with the human body, e.g. for user immersion in virtual reality (blind teaching G09B21/00)}
- G06F 3/017: {Gesture based interaction, e.g. based on a set of recognized hand gestures (interaction based on gestures traced on a digitiser G06F3/04883)}
- G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/1433: {Vulnerability analysis}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An identity verification system receives a candidate signal transmitted from a computing device located near a secured asset in response to a target user requesting access to the secure asset. The identity verification system compares the candidate signal to a cluster of signals measured during past successful authentications by the computing device to determine a modulation factor and determines a match probability for the target user based on the determined modulation factor. The identity verification system grants the requesting target user access to the secured asset in response to determining that the match probability is greater than the operational security threshold.

## Claims

### Claim 1

A non-transitory computer-readable medium comprising stored computer-readable instructions that, when executed by a processor, cause the processor to:
receive a candidate signal transmitted from a computing device located near a secured asset, wherein the computing device transmits the signal in response to a target user requesting access to the secured asset;
compare the candidate signal to a cluster of signals measured during past successful authentications by the computing device to determine a modulation factor, wherein comparing the candidate signal to a cluster of signals comprises comparing one or more statistical metrics for the candidate signal to one or more statistical metrics for the cluster of signals, the one or more statistical metrics of the candidate signal comprising a mean strength of the candidate signal and the one or more statistical metrics of the cluster of signals comprising a mean strength of the cluster of signals;
determine a match probability for the target user based on the determined modulation factor, wherein the match probability represents a likelihood that an identity of the requesting target user matches an authenticating identity associated with access credentials recorded at the secured asset; and
grant the requesting target user access to the secured asset in response to determining that the match probability is greater than a security threshold.

### Claim 2 (depends on 1)

The non-transitory computer-readable medium of claim 1, wherein the instructions further comprise instructions that, when executed, cause the processor to:
access a plurality of signals measured during past successful authentications by the target user; and
generate one or more clusters of signals from the plurality of signals measured during past successful authentications, wherein each cluster of the one or more clusters represents a pattern of access to the secured asset.

### Claim 3 (depends on 1)

The non-transitory computer-readable medium of claim 1, wherein the instructions for comparing the candidate signal to the cluster of signals further comprises instructions that, when executed, cause the processor to:
determine one or more statistical metrics for the candidate signal; and
determine one or more statistical metrics for the cluster of signals.

### Claim 4 (depends on 3)

The non-transitory computer-readable medium of claim 3, wherein the instructions further comprise instructions that, when executed, cause the processor to:
determine an operational context of the secured asset;
identify one or signal sources available at the secured asset based on the operational context; and
for each signal source available at the secured asset, determine one or more statistical metrics for signals received from the signal source during past successful authentication.

### Claim 5 (depends on 1)

The non-transitory computer-readable medium of claim 1, wherein the instructions for comparing the candidate signal to the cluster of signals further comprises instructions that, when executed, cause the processor to:
encode a vector representation of the candidate signal;
encode a vector representation of each signal of the cluster of signals; and
determine a distance between the vector representation of the candidate signal and the vector representation of each signal of the cluster of signals to determine the candidate signal matches the signal of the cluster of signals.

### Claim 6 (depends on 1)

The non-transitory computer-readable medium of claim 1, wherein the instructions further comprise instructions that, when executed, cause the processor to:
deny the target user access to the secured asset in response to determining the match probability is less than a threshold assigned to the security threshold; and
request a secondary authentication mechanism verify the identity of the target user.

### Claim 7

A system comprising:
a computing device located near a secured asset, wherein the computing device transmits a candidate signal in response to a target user requesting access to the secured asset; and
a non-transitory computer-readable medium comprising stored computer-readable instructions that, when executed by a processor, cause the processor to:
receive the candidate signal transmitted from the computing device;
compare the candidate signal to a cluster of signals measured during past successful authentications by the computing device to determine a modulation factor, wherein comparing the candidate signal to a cluster of signals comprises comparing one or more statistical metrics for the candidate signal to one or more statistical metrics for the cluster of signals, the one or more statistical metrics of the candidate signal comprising a mean strength of the candidate signal and the one or more statistical metrics of the cluster of signals comprising a mean strength of the cluster of signals;
determine a match probability for the target user based on the determined modulation factor, wherein the match probability represents a likelihood that an identity of the requesting target user matches an authenticating identity associated with access credentials recorded at the secured asset; and
grant the requesting target user access to the secured asset in response to determining that the match probability is greater than the operational a security threshold.

### Claim 8 (depends on 7)

The system of claim 7, wherein the instructions further comprise instructions that, when executed, cause the processor to:
access a plurality of signals measured during past successful authentications by the target user; and
generate one or more clusters of signals from the plurality of signals measured during past successful authentications, wherein each cluster of the one or more clusters represents a pattern of access to the secured asset.

### Claim 9 (depends on 7)

The system of claim 7, wherein the instructions for comparing the candidate signal to the cluster of signals further comprises instructions that, when executed, cause the processor to:
determine one or more statistical metrics for the candidate signal; and
determine one or more statistical metrics for the cluster of signals.

### Claim 10 (depends on 9)

The system of claim 9, wherein the instructions further comprise instructions that, when executed, cause the processor to:
determine an operational context of the secured asset;
identify one or signal sources available at the secured asset based on the operational context; and
for each signal source available at the secured asset, determine one or more statistical metrics for signals received from the signal source during past successful authentication.

### Claim 11 (depends on 9)

The system of claim 9, wherein the instructions for comparing the candidate signal to the cluster of signals further comprises instructions that, when executed, cause the processor to:
encode a vector representation of the candidate signal;
encode a vector representation of each signal of the cluster of signals; and
determine a distance between the vector representation of the candidate signal and the vector representation of each signal of the cluster of signals to determine the candidate signal matches the signal of the cluster of signals.

### Claim 12 (depends on 9)

The system of claim 9, wherein the instructions further comprise instructions that, when executed, cause the processor to:
deny the target user access to the secured asset in response to determining the match probability is less than the security threshold; and
request a secondary authentication mechanism verify the identity of the target user.

### Claim 13

A system comprising:
a computing device located near a secured asset, wherein the computing device transmits a candidate signal in response to a target user requesting access to the secured asset;
a signal measurement module configured to receive the candidate signal transmitted from the computing device;
a modulation factor generator configured to compare the candidate signal to a cluster of signals measured during past successful authentications by the computing device to determine a modulation factor, wherein comparing the candidate signal to a cluster of signals comprises comparing one or more statistical metrics for the candidate signal to one or more statistical metrics for the cluster of signals, the one or more statistical metrics of the candidate signal comprising a mean strength of the candidate signal and the one or more statistical metrics of the cluster of signals comprising a mean strength of the cluster of signals; and
a confidence evaluation module configured to:
determine a match probability for the target user based on the determined modulation factor, wherein the match probability represents a likelihood that an identity of the requesting target user matches an authenticating identity associated with access credentials recorded at the secured asset; and
grant the requesting target user access to the secured asset in response to determining that the match probability is greater than a security threshold.

### Claim 14 (depends on 13)

The system of claim 13, wherein the signal measurement module is configured to:
access a plurality of signals measured during past successful authentications by the target user; and
generate one or more clusters of signals from the plurality of signals measured during past successful authentications, wherein each cluster of the one or more clusters represents a pattern of access to the secured asset.

### Claim 15 (depends on 13)

The system of claim 13, wherein the signal measurement module is configured to:
determine one or more statistical metrics for the candidate signal; and
determine one or more statistical metrics for the cluster of signals.

### Claim 16 (depends on 15)

The system of claim 15, wherein the signal measurement module is configured to:
determine an operational context of the secured asset;
identify one or signal sources available at the secured asset based on the operational context; and
for each signal source available at the secured asset, determine one or more statistical metrics for signals received from the signal source during past successful authentication.

### Claim 17 (depends on 13)

The system of claim 13, wherein the modulation factor generator is configured to:
encode a vector representation of the candidate signal;
encode a vector representation of each signal of the cluster of signals; and
determine a distance between the vector representation of the candidate signal and the vector representation of each signal of the cluster of signals to determine the candidate signal matches the signal of the cluster of signals.

### Claim 18 (depends on 13)

The system of claim 13, wherein the confidence evaluation is configured to:
deny the target user access to the secured asset in response to determining the match probability is less than the security threshold; and
request a secondary authentication mechanism verify the identity of the target user.