IP Library Granted Patent US 9,961,547
Granted Patent B1
US 9,961,547 · App. 15/281,694 · Granted May 1, 2018

Continuous seamless mobile device authentication using a separate electronic wearable apparatus

Inventors: Andres D. Molina-Markham (Woburn, MA); Shrirang Mare (West Lebanon, NH); Ronald Peterson, Jr. (Brattleboro, VT); David Kotz (Lyme, NH)
Assignees: EMC IP Holding Company LLC; The Trustees of Dartmouth College
H04W12/06G06F17/3053H04L67/22H04W4/008
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,961,547
App. No.
15/281,694
Granted
May 1, 2018
Kind
B1
Abstract

A technique performs a security operation. The technique includes receiving first activity data from a mobile device, the first activity data identifying activity by a user that is currently using the mobile device. The technique further includes receiving second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus. The technique further includes, based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, performing an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person. With such a technique, authentication may be continuous but without burdening the user to repeatedly re-enter a password.

Claims (106)

1. A method of performing a security operation, the method comprising:

receiving, by processing circuitry, first activity data from a mobile device, the first activity data identifying activity by a user that is currently using the mobile device;

receiving, by the processing circuitry, second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus; and

based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, performing, by the processing circuitry, an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person;

wherein the mobile device is a smartphone, and the user is currently using the smartphone;

wherein the electronic wearable apparatus is a smart worn device, and the wearer is currently wearing the smart worn device;

wherein performing the assessment operation includes identifying an amount of correlation between the activity by the user and the physical activity by the wearer;

wherein the processing circuitry includes confidence scoring circuitry;

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer includes:

providing, by the confidence scoring circuitry, a confidence score that indicates a numerical measure of confidence that the user and the wearer are the same person;

wherein the processing circuitry further includes hand identification circuitry which is coupled to the confidence scoring circuitry; and

wherein identifying the amount of correlation between the activity by the user and the activity by the wearer further includes:

providing, by the hand identification circuitry, hand identification data to the confidence scoring circuitry, the hand identification data being based on the first activity data and the second activity data and indicating one of: (i) the smartphone and the smart worn device residing at the same hand of the same person, (i) the smartphone and the smart worn device residing at both hands of the same person, (iii) the smartphone and the smart worn device residing at opposite hands of the same person, and (iv) unknown.

2. A method as in claim 1 wherein the smartphone communicates with the smart worn device via short-range wireless communications; and

wherein receiving the second activity data from the electronic wearable apparatus includes acquiring the second activity data by the smartphone from the smart worn device via the short-range wireless communications.

3. A method as in claim 2 wherein the processing circuitry resides within the smartphone; and

wherein the method further comprises:

controlling, by the processing circuitry, access to a protected electronic resource which is accessible via the smartphone based on the amount of correlation between the activity by the user and the physical activity by the wearer.

4. A method as in claim 2 wherein the processing circuitry resides within an external server which is remote from the smartphone and from the smart worn device;

wherein the external server receives the second activity data from the smartphone after the smartphone acquires the second activity data from the smart worn device; and

wherein the method further comprises:

controlling, by the processing circuitry, access to a protected electronic resource which is accessible via at least one of the smartphone and the smart worn device based on the amount of correlation between the activity by the user and the physical activity by the wearer.

5. A method as in claim 1 wherein the smart worn device communicates with the smartphone via short-range wireless communications; and

wherein receiving the first activity data from the smartphone includes acquiring the first activity data by the smart worn device from the smartphone via the short-range wireless communications.

6. A method as in claim 5 wherein the processing circuitry resides within the smart worn device; and

wherein the method further comprises:

controlling, by the processing circuitry, access to a protected electronic resource which is accessible via the smart worn device based on the amount of correlation between the activity by the user and the physical activity by the wearer.

7. A method as in claim 1 wherein the processing circuitry further includes motion correlation circuitry which is coupled to the confidence scoring circuitry; and

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer further includes:

providing, by the motion correlation circuitry, a motion correlation score to the confidence scoring circuitry, the motion correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between motion of the smartphone and motion of the smart worn device.

8. A method as in claim 1 wherein the processing circuitry further includes input correlation circuitry which is coupled to the confidence scoring circuitry; and

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer further includes:

providing, by the input correlation circuitry, an input correlation score to the confidence scoring circuitry, the input correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between input entered into the smartphone as sensed by the smartphone and input entered into the smartphone as sensed by the smart worn device.

9. A method as in claim 1 wherein the processing circuitry further includes motion correlation circuitry which is coupled to the confidence scoring circuitry, and input correlation circuitry which is coupled to the confidence scoring circuitry; and

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer further includes:

providing, by the motion correlation circuitry, a motion correlation score to the confidence scoring circuitry, the motion correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between motion of the smartphone and motion of the smart worn device; and

providing, by the input correlation circuitry, an input correlation score to the confidence scoring circuitry, the input correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between input entered into the smartphone as sensed by the smartphone and input entered into the smartphone as sensed by the smart worn device.

10. A method as in claim 1 wherein the confidence scoring circuitry is constructed and arranged to output a series of confidence scores which includes the confidence score; and

wherein the method further comprises:

applying a set of policies to the sequence of confidence scores to generate a set of policy decisions, the set of policy decisions controlling a set of resource access privileges.

11. A method as in claim 10 wherein applying the set of policies to the sequence of confidence scores includes:

performing an authentication operation that provides an authentication result, the user of the smartphone being granted access to the set of resource access privileges when the authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the authentication result indicates unsuccessful authentication.

12. A method as in claim 11 wherein applying the set of policies to the sequence of confidence scores further includes:

after the authentication operation is performed and after the authentication result indicates success authentication, performing a de-authentication operation that provides a de-authentication result, the user of the smartphone being granted continued access to the set of resource access privileges when the de-authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the de-authentication result indicates unsuccessful authentication.

13. Electronic circuitry, comprising:

memory; and

processing circuitry coupled to the memory, the memory storing instructions which, when carried out by the processing circuitry, cause the processing circuitry to:

receive first activity data from a mobile device, the first activity data identifying activity by a user that is currently using the mobile device;

receive second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus; and

based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, perform an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person;

wherein the mobile device is a smartphone, and the user is currently using the smartphone;

wherein the electronic wearable apparatus is a smart worn device, and the wearer is currently wearing the smart worn device;

wherein the processing circuitry, when performing the assessment operation, is constructed and arranged to identify an amount of correlation between the activity by the user and the physical activity by the wearer;

wherein the processing circuitry includes confidence scoring circuitry;

wherein the processing circuitry, when identifying the amount of correlation between the activity by the user and the physical activity by the wearer, is constructed and arranged to:

provide, by the confidence scoring circuitry, a confidence score that indicates a numerical measure of confidence that the user and the wearer are the same person;

wherein the processing circuitry further includes hand identification circuitry which is coupled to the confidence scoring circuitry; and

wherein the processing circuitry, when identifying the amount of correlation between the activity by the user and the activity by the wearer, is constructed and arranged to:

provide, by the hand identification circuitry, hand identification data to the confidence scoring circuitry, the hand identification data being based on the first activity data and the second activity data and indicating one of: (i) the smartphone and the smart worn device residing at the same hand of the same person, (i) the smartphone and the smart worn device residing at both hands of the same person, (iii) the smartphone and the smart worn device residing at opposite hands of the same person, and (iv) unknown.

14. Electronic circuitry as in claim 13 wherein the mobile device is a smartphone, and the user is currently using the smartphone;

wherein the smart worn device is a smart wrist-worn device; and

wherein the processing circuitry, when performing the assessment operation, is constructed and arranged to identify an amount of correlation between the activity by the user and the physical activity by the wearer.

15. Electronic circuitry as in claim 14 wherein the processing circuitry further includes motion correlation circuitry which is coupled to the confidence scoring circuitry, and input correlation circuitry which is coupled to the confidence scoring circuitry;

wherein the motion correlation circuitry provides a motion correlation score to the confidence scoring circuitry, the motion correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between motion of the smartphone and motion of the smart wrist-worn device; and

wherein the input correlation circuitry provides an input correlation score to the confidence scoring circuitry, the input correlation score being based on the first activity data and the second activity data and indicating a numerical measure of correlation between input entered into the smartphone as sensed by the smartphone and input entered into the smartphone as sensed by the smart wrist-worn device.

16. Electronic circuitry as in claim 15 wherein the confidence scoring circuitry is constructed and arranged to output a series of confidence scores which includes the confidence score; and

wherein the processing circuitry further includes authentication circuitry that (i) performs an authentication operation that provides an authentication result, the user of the smartphone being granted access to the set of resource access privileges when the authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the authentication result indicates unsuccessful authentication, and (ii) after the authentication operation is performed and after the authentication result indicates success authentication, performs a de-authentication operation that provides a de-authentication result, the user of the smartphone being granted continued access to the set of resource access privileges when the de-authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the de-authentication result indicates unsuccessful authentication.

17. A computer program product having a non-transitory computer readable medium which stores a set of instructions to perform a security operation, the set of instructions, when carried out by computerized circuitry, causing the computerized circuitry to perform a method of:

receiving first activity data from a mobile device, the first activity data identifying physical activity by a user that is currently using the mobile device;

receiving second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus; and

based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, performing an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person;

wherein the mobile device is a smartphone, and the user is currently using the smartphone;

wherein the electronic wearable apparatus is a smart worn device, and the wearer is currently wearing the smart worn device;

wherein performing the assessment operation includes identifying an amount of correlation between the activity by the user and the physical activity by the wearer;

wherein the computerized circuitry includes confidence scoring circuitry;

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer includes:

providing, by the confidence scoring circuitry, a confidence score that indicates a numerical measure of confidence that the user and the wearer are the same person;

wherein the computerized circuitry further includes hand identification circuitry which is coupled to the confidence scoring circuitry; and

wherein identifying the amount of correlation between the activity by the user and the activity by the wearer further includes:

providing, by the hand identification circuitry, hand identification data to the confidence scoring circuitry, the hand identification data being based on the first activity data and the second activity data and indicating one of: (i) the smartphone and the smart worn device residing at the same hand of the same person, (i) the smartphone and the smart worn device residing at both hands of the same person, (iii) the smartphone and the smart worn device residing at opposite hands of the same person, and (iv) unknown.

18. A method as in claim 1 wherein the assessment result indicates poor correlation between motion of the smartphone and motion of the smart worn device; and

wherein the method further comprises:

preventing the user from accessing a protected electronic resource of the smartphone in response to the assessment result indicating poor correlation between the motion of the smartphone and the motion of the smart worn device.

19. A method of performing a security operation, the method comprising:

receiving, by processing circuitry, first activity data from a mobile device, the first activity data identifying activity by a user that is currently using the mobile device;

receiving, by the processing circuitry, second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus; and

based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, performing, by the processing circuitry, an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person;

wherein the mobile device is a smartphone, and the user is currently using the smartphone;

wherein the electronic wearable apparatus is a smart worn device, and the wearer is currently wearing the smart worn device; and

wherein performing the assessment operation includes identifying an amount of correlation between the activity by the user and the physical activity by the wearer;

wherein the confidence scoring circuitry is constructed and arranged to output a series of confidence scores which includes the confidence score;

wherein the method further comprises:

applying a set of policies to the sequence of confidence scores to generate a set of policy decisions, the set of policy decisions controlling a set of resource access privileges;

wherein applying the set of policies to the sequence of confidence scores includes:

performing an authentication operation that provides an authentication result, the user of the smartphone being granted access to the set of resource access privileges when the authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the authentication result indicates unsuccessful authentication; and

wherein applying the set of policies to the sequence of confidence scores further includes:

after the authentication operation is performed and after the authentication result indicates success authentication, performing a de-authentication operation that provides a de-authentication result, the user of the smartphone being granted continued access to the set of resource access privileges when the de-authentication result indicates successful authentication, and the user of the smartphone being denied access to the set of resource access privileges when the de-authentication result indicates unsuccessful authentication.

20. A method of performing a security operation, the method comprising:

receiving, by processing circuitry, first activity data from a mobile device, the first activity data identifying activity by a user that is currently using the mobile device;

receiving, by the processing circuitry, second activity data from an electronic wearable apparatus, the second activity data identifying physical activity by a wearer that is currently wearing the electronic wearable apparatus; and

based on the first activity data received from the mobile device and the second activity data received from the electronic wearable apparatus, performing, by the processing circuitry, an assessment operation that provides an assessment result indicating whether the user that is currently using the mobile device and the wearer that is currently wearing the electronic wearable apparatus are the same person;

wherein the user is currently using the mobile device;

wherein the wearer is currently wearing the electronic wearable apparatus;

wherein performing the assessment operation includes identifying an amount of correlation between the activity by the user and the physical activity by the wearer; and

wherein identifying the amount of correlation between the activity by the user and the physical activity by the wearer includes:

providing hand identification data based on the first activity data and the second activity data and indicating one of: (i) the mobile device and the electronic wearable apparatus residing at the same hand of the same person, (i) the mobile device and the electronic wearable apparatus residing at both hands of the same person, (iii) the mobile device and the electronic wearable apparatus residing at opposite hands of the same person, and (iv) unknown.

Assignments (10)
CONFIRMATORY LICENSE Recorded Dec 7, 2022
From: DARTMOUTH COLLEGE
To: NATIONAL SCIENCE FOUNDATION
Reel/Frame 062080/0729 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (046366/0014) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 060450/0306 →
RELEASE OF SECURITY INTEREST AT REEL 046286 FRAME 0653 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 058298/0093 →
CONFIRMATORY LICENSE Recorded Oct 21, 2020
From: DARTMOUTH COLLEGE
To: NATIONAL SCIENCE FOUNDATION
Reel/Frame 054169/0013 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
PATENT SECURITY AGREEMENT (CREDIT) Recorded Jun 1, 2018
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 046286/0653 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Jun 1, 2018
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 046366/0014 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 22, 2016
From: MOLINA-MARKHAM, ANDRES D.; MARE, SHRIRANG; PETERSON, RONALD, JR.; KOTZ, DAVID
To: EMC IP HOLDING COMPANY LLC; THE TRUSTEES OF DARTMOUTH COLLEGE
Reel/Frame 040749/0222 →