Systems, apparatus, and methods for continuous authentication
Systems, apparatus, and methods for continuously authenticating individuals are provided. A continuous authentication system receives first biometric authentication information from an individual. The system compares the first biometric authentication information to stored first biometric information to identify the individual and links the identified individual to a device for obtaining second biometric authentication information. The device for obtaining second biometric authentication information continuously receives second biometric authentication information. The continuous authentication system compares the received second biometric authentication information to stored second biometric information that corresponds to the individual to determine if the received second biometric authentication information corresponds to the individual. The individual may be granted access to one or more access points if it is determined that the received second biometric authentication information corresponds to the individual.
1. A device for determining whether to grant access comprising:
a first sensor configured to acquire biometric authentication information, wherein the first sensor is a wavelength-adjustable light sensor;
a second sensor configured to acquire location authentication information;
a wavelength adjustable light-source;
a processor; and
memory storing one or more programs executable by the processor, the one or more programs including instructions for:
linking an identified individual with the device, wherein the device is carried by the individual, and wherein the linking comprises identifying the individual based on first biometric authentication information stored in a database, wherein the first biometric authentication information is biometric authentication information of a first type;
continuously acquiring second biometric authentication information from the individual using the first sensor of the device and the wavelength adjustable light-source, wherein the second biometric authentication information is biometric authentication information of a second type distinct from the first type;
continuously acquiring location authentication information from the individual using the second sensor of the device;
determining whether to grant access or to deny access to the identified individual based on the second biometric authentication information and the location authentication information indicating whether the identified individual has been present in a predefined location for less than a predefined amount of time, wherein denying access to the identified individual comprises deactivating a communication device, in the device, such that it cannot be energized when proximate to an access point.
2. The device of claim 1 , wherein determining whether to grant access to the identified individual further comprises:
comparing the continuously acquired second biometric information to stored biometric information;
in accordance with a determination that a characteristic of the acquired second biometric authentication information is within a predetermined threshold of a corresponding characteristic of the stored biometric information, granting the identified individual access.
3. The device of claim 1 , wherein determining whether to grant access or to deny access further comprises determining whether the location authentication information represents one or more sudden changes of a location.
4. The device of claim 1 , wherein determining whether to grant access or to deny access further comprises determining whether the location authentication information represents one or more security breaches.
5. The device of claim 1 , wherein determining whether to grant access or to deny access further comprises determining whether the location authentication information indicates that the identified individual is present in a location unrelated to a task the identified individual is performing.
6. The device of claim 1 , wherein granting access to the identified individual comprises granting the identified individual access to a resource or facility associated with an access point.
7. The device of claim 1 , wherein denying access to the identified individual comprises: denying the identified individual access to a resource or facility associated with an access point; and generating a signal associated with denying access to the identified individual.
8. The device of claim 1 , wherein the first biometric authentication information comprises one or more of fingerprint information, iris scan information, and facial image information.
9. The device of claim 1 , wherein the second biometric authentication information comprises one or more of ECG information, skin tone information, subdermal biomarker information, breathing rate information, oxygen content information, blood pressure information, and skin conductivity information.
10. A method for determining whether to grant access comprising:
linking an identified individual with the device, wherein the device comprises:
a first sensor configured to acquire biometric authentication information, wherein the first sensor is a wavelength-adjustable light sensor,
a wavelength adjustable light-source;
and a second sensor configured to acquire location authentication information and is carried by the individual,
and wherein the linking comprises identifying the individual based on first biometric authentication information stored in a database, wherein the first biometric authentication information is biometric authentication information of a first type;
continuously acquiring second biometric authentication information from the individual using the first sensor of the device and the wavelength adjustable-light source, wherein the second biometric authentication information is biometric authentication information of a second type distinct from the first type;
continuously acquiring location authentication information from the individual using the second sensor of the device;
determining whether to grant access or to deny access to the identified individual based on the second biometric authentication information and the location authentication information indicating whether the identified individual has been present in a predefined location for less than a predefined amount of time, wherein denying access to the identified individual comprises deactivating a communication device, in the device, such that it cannot be energized when proximate to an access point.
11. A system for determining whether to grant access comprising:
a device carried by an identified individual, wherein the device comprises:
a first sensor configured to acquire biometric authentication information, wherein the first sensor is a wavelength-adjustable light sensor;
a wavelength adjustable light-source; and
a second sensor configured to acquire location authentication information;
a system controller in communication with the device, wherein the system controller comprises a processor and memory storing one or more programs executable by the processor, the one or more programs including instructions for:
linking the identified individual with the device, and wherein the linking comprises identifying the individual based on first biometric authentication information stored in a database, wherein the first biometric authentication information is biometric authentication information of a first type;
continuously acquiring second biometric authentication information from the individual using the first sensor of the device and the wavelength adjustable light-source, wherein the second biometric authentication information is biometric authentication information of a second type distinct from the first type;
continuously acquiring location authentication information from the individual using the second sensor of the device; and determining whether to grant access or to deny access to the identified individual based on the second biometric authentication information and the location authentication information indicating whether the identified individual has been present in a predefined location for less than a predefined amount of time, wherein denying access to the identified individual comprises deactivating a communication device, in the device, such that it cannot be energized when proximate to an access point.