Granted Patent B2

US 8,903,060 · App. 14/279,968 · Granted Dec 2, 2014

Inventors: Grant Gongaware (San Francisco, CA); Nick Garcia (Oakland, CA); Richard Torgersrud (San Francisco, CA); Kevin Krauss (San Francisco, CA)

Assignee: Telmate, LLC

H04M3/38H04M3/382

Abstract

Claims (53)

1. A computer-implemented method for permitting a user to log into a restricted access communications terminal, the method comprising:

receiving a request from a user to log into a communications terminal, the request comprising a first authentication provided by the user;

verifying the first authentication provided by the user;

identifying the user based on the verified first authentication;

determining, based on an actual location of the communications terminal, that the identified user is restricted from logging into the communications terminal;

requesting a second authentication from the user when the user is attempting to access the communications terminal from an unauthorized or undocumented location;

receiving the second authentication from the user;

verifying the second authentication provided by the user; and

permitting the user to log into the communications terminal based on the verified second authentication,

wherein the user is permitted to log into the communications terminal based on the verified first authentication if the user is in an authorized location.

2. The method of claim 1 , wherein determining that the user is restricted from logging into the communications terminal comprises comparing a stored location of the user with the actual location of the communications terminal, and determining that the stored location of the user is different than the actual location of the communications terminal.

3. The method of claim 2 , further comprising updating the stored location of the user based on the actual location of the communications terminal when the second authentication provided by the user is verified.

4. The method of claim 3 , wherein updating the stored location of the user based on the actual location of the communications terminal comprises storing an identification of a time at which the request from the user to log into the communications terminal is received.

5. The method of claim 3 , further comprising updating the stored location of the user with actual location information received from a user database when the information from the user database indicates that the actual location of the user is different than the stored location of the user or the actual location of the communications terminal.

6. The method of claim 1 , wherein determining that the user is restricted from logging into the communications terminal comprises determining that a stored location of the user restricts the user from logging into terminals in the actual location of the communications terminal.

7. The method of claim 1 , wherein the communications terminal comprises at least one of a telephone, videophone, camera, touchscreen, keyboard, or biometric scanner.

8. The method of claim 1 , wherein the first authentication comprises a personal identification number.

9. The method of claim 1 , wherein the communications terminal is configured to restrict the user from logging in based on the actual location of the communications terminal within a detention environment.

10. The method of claim 1 , wherein the second authentication comprises at least one of a physiological biometric identification or a behavioral biometric identification.

11. The method of claim 10 , wherein the physiological biometric identification comprises at least one of the user's voice, DNA, finger print, retinal scan, facial scan, iris scan, or vein matching, and wherein the behavioral biometric identification comprises at least one of the user's handwriting sample, typing rhythm, gait, or voice.

12. A system for providing access to a restricted access communications terminal, the system comprising:

a memory comprising instructions; and

a processor configured to execute the instructions to:

receive a request from a user to access a communications terminal, the request comprising a first authentication provided by the user;

verify the first authentication provided by the user;

identify the user based on the verified first authentication;

determine, based on a location of the communications terminal, that the user is restricted from accessing the communications terminal;

request a second authentication from the user when the user is in an unauthorized location;

receive the second authentication from the user;

verify the second authentication provided by the user; and

provide access to the user to the communications terminal based on the verified second authentication,

wherein access to the communications terminal is provided to the user based on the verified first authentication if the user is in an authorized location.

13. The system of claim 12 , wherein the processor being configured to determine that the user is restricted from accessing the communications terminal comprises the processor being configured to compare a stored location of the user with the location of the communications terminal, and determine that the stored location of the user is different than the location of the communications terminal.

14. The system of claim 13 , wherein the processor is further configured to update the stored location of the user based on the location of the communications terminal when the second authentication provided by the user is verified.

15. The system of claim 14 , wherein the processor being configured to update the stored location of the user based on the location of the communications terminal comprises the processor being configured to store an identification of a time at which the request from the user to access the communications terminal is received.

16. The system of claim 15 , wherein the processor is further configured to update the stored location of the user with location information received from a user database when the information from the user database indicates that the location of the user is different than the stored location of the user or the location of the communications terminal.

17. The system of claim 12 , wherein the processor being configured to determine that the user is restricted from accessing the communications terminal comprises the processor being configured to determine that a stored location of the user restricts access of the user to terminals in the location of the communications terminal.

18. The system of claim 12 , wherein the communications terminal comprises at least one of a telephone, videophone, or camera.

19. The system of claim 12 , wherein the first authentication comprises a personal identification number.

20. The system of claim 12 , wherein the communications terminal is configured to restrict access based on the location of the communications terminal within a controlled access facility.

21. The system of claim 12 , wherein the second authentication comprises at least one of a physiological biometric identification or a behavioral biometric identification.

22. The system of claim 12 , wherein the physiological biometric identification comprises at least one of the user's voice, DNA, finger print, retinal scan, facial scan, iris scan, vein matching, and wherein the behavioral biometric identification comprises at least one of the user's handwriting sample. typing rhythm, gait, or voice.

23. A machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method for providing access to a restricted access communications terminal, the method comprising:

receiving a request from a user to access a communications terminal, the request comprising a first authentication provided by the user;

verifying the first authentication provided by the user;

identifying the user based on the verified first authentication;

determining, based on a location of the communications terminal, that the user is restricted from accessing the communications terminal;

request a second authentication from the user when the user is in an unauthorized location;

receiving the second authentication from the user;

verifying the second authentication provided by the user; and

providing access to the user to the communications terminal based on the verified second authentication,

wherein access to the communications terminal is provided to the user based on the

verified first authentication if the user is in an authorized location.

Assignments (10)

Continuity (2)