Bio leash for user authentication
Systems and methods for electronically leashing a user to a mobile device. A user is authenticated on the mobile device and initial sensor data (e.g., radio signal readings, accelerometer readings, image/video, audio) is collected. Based on a timer or other triggering event, additional sensor data is captured and evaluated. Based on the evaluation of the sensor data, a value representing a likelihood of whether the device remains in possession of the user is determined. Upon determining that this value is less than a threshold, the user is required to reauthenticate on the mobile device to further engage with the device or particular features on the device.
1. A computer-implemented method comprising:
authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device;
capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user;
capturing movement data by a movement or positional sensor of the mobile device;
determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data;
determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user;
at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time; and
upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device.
2. The method of claim 1 , wherein the user is authenticated based on at least one of a password, a passphrase, a gesture, a digital certificate, and a biometric identifier.
3. The method of claim 1 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises a plurality of radio signal readings.
4. The method of claim 3 , wherein determining the value comprises evaluating whether a difference between the radio signal readings exceeds a threshold.
5. The method of claim 3 , wherein the evaluation is performed upon determining that the mobile device has moved.
6. The method of claim 1 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises readings from a movement or positional sensor.
7. The method of claim 6 , wherein determining the value comprises evaluating whether the movement or positional sensor readings conform with a known behavior pattern of the user.
8. The method of claim 1 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises audio captured by a microphone associated with the mobile device.
9. The method of claim 8 , wherein determining the value comprises using at least one of acoustic location and voice recognition to determine whether the user is within a threshold distance of the mobile device.
10. The method of claim 9 , wherein the acoustic location is performed upon determining that the mobile device has moved.
11. The method of claim 1 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises one or more images captured by a camera associated with the mobile device.
12. The method of claim 11 , wherein determining the value comprises analyzing the images to determine whether the user is shown.
13. The method of claim 11 , wherein at least one of the images is captured upon determining that the camera associated with the mobile device has a line of sight to the user.
14. The method of claim 1 , wherein the first device possession measurement data and the second device possession measurement data are captured using different data capturing components of the mobile device.
15. The method of claim 1 , wherein the triggering event comprises a determination, based on the movement data, that the mobile device (i) has been picked up, (ii) has been put down, (iii) has experienced sudden or violent movement, or (iv) has experienced movement different from an expected pattern of movement.
16. A system comprising:
one or more computers programmed to perform operations comprising:
authenticating a user on a mobile device at a first time and, based thereon, authenticating the user to use a set of features on the mobile device;
capturing first device possession measurement data by the mobile device and, based on an evaluation of the first device possession measurement data, establishing that the mobile device is in physical possession of the user;
capturing movement data by a movement or positional sensor of the mobile device;
determining that the movement data exceeds a threshold and has resulted in an occurrence of a triggering event, and, in response thereto, initiating capture by the mobile device of second device possession measurement data comprising radio signal data, sound wave data, image data, or video data;
determining, based at least in part on an evaluation of the second device possession measurement data captured by the mobile device, a value representing a likelihood that the device remains in physical possession of the user;
at a second, later time while the user is still authenticated on the mobile device, upon determining that the value is greater than a first threshold and less than a second threshold, deactivating a subset of the features on the mobile device for which the user was previously authenticated at the first time; and
upon determining that the value is less than the first threshold, requiring the user to reauthenticate on the mobile device.
17. The system of claim 16 , wherein the user is authenticated based on at least one of a password, a passphrase, a gesture, a digital certificate, and a biometric identifier.
18. The system of claim 16 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises a plurality of radio signal readings.
19. The system of claim 18 , wherein determining the value comprises evaluating whether a difference between the radio signal readings exceeds a threshold.
20. The system of claim 18 , wherein the evaluation is performed upon determining that the mobile device has moved.
21. The system of claim 16 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises readings from a movement or positional sensor.
22. The system of claim 21 , wherein determining the value comprises evaluating whether the movement or positional sensor readings conform with a known behavior pattern of the user.
23. The system of claim 16 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises audio captured by a microphone associated with the mobile device.
24. The system of claim 23 , wherein determining the value comprises using at least one of acoustic location and voice recognition to determine whether the user is within a threshold distance of the mobile device.
25. The system of claim 24 , wherein the acoustic location is performed upon determining that the mobile device has moved.
26. The system of claim 16 , wherein at least one of the first device possession measurement data and the second device possession measurement data captured by the mobile device comprises one or more images captured by a camera associated with the mobile device.
27. The system of claim 26 , wherein determining the value comprises analyzing the images to determine whether the user is shown.
28. The system of claim 26 , wherein at least one of the images is captured upon determining that the camera associated with the mobile device has a line of sight to the user.