Identify management using ephemeral biometrics
An authentication system, device and method that include ephemeral biometrics at login authentication is disclosed. The system, device and method may continue to authenticate the user while accessed to a user system. The system, device and method may also include position/location reporting of the device.
1. A method for authenticating a user's identity to determine access to a system, comprising:
inputting a first login into an ephemeral biometric device comprising a medical sensor;
persistently monitoring a live user biometric with the ephemeral biometric device and using the persistently monitored user biometric to persistently authorize the ephemeral biometric device without determining that the user biometric is unique to the user and that the user is unique;
communicating the authorization via a short distance wireless communication circuitry to an interface device;
inputting a second login to the interface device to access the system; and
persistently communicating an authentication signal between the biometric device and the interface device by persistently generating a nonce at the ephemeral biometric device while persistently validating the nonce at the interface device to validate that data transmitted between the biometric device and the interface device is authentic, which then allows the interface device to persistently authenticate and access to the system.
2. The method of claim 1 , wherein the first login comprises a fingerprint.
3. The method of claim 1 , wherein the first login comprises a personal identification number.
4. The method of claim 1 , wherein the interface device is selected from a group consisting of a smartphone, computer, tablet, workstation, kiosk, or any other network-enabled device.
5. An ephemeral biometric device for authenticating the identity of a user to determine access to a system, comprising:
a medical sensor comprising a biometric interface for accepting a biometric login from the user;
a monitoring device for persistently monitoring at least one live biometric parameter of the user and using the at least one persistently monitored user biometric to persistently authorize use of the ephemeral biometric device without determining the user biometric is unique to the user and that the user is unique; and
a short distance wireless communication circuitry for persistently communicating an authentication signal to an interface device having persistent authentication and access to the system over a login session;
wherein the ephemeral biometric device has an ephemeral biometric identity;
the user has a user identity; and
wherein the persistently communicated authentication signal comprises a nonce generated by the ephemeral biometric device, the ephemeral biometric identity, and the user identity.
6. The device of claim 5 , wherein the biometric login is a fingerprint.
7. The device of claim 5 , further comprising:
a fourth module for determining the location of the biometric device.
8. The device of claim 7 , wherein the fourth module includes global positioning system connectivity.
9. The device of claim 7 , wherein the fourth module includes indoor positioning system connectivity.