Granted Patent B2

US 10,453,319 · App. 15/911,613 · Granted Oct 22, 2019

Abstract

Claims (44)

1. A method comprising:

storing one or more data structures defining a plurality of system modes of an intrusion detection system, each of the plurality of system modes associated with an identity of one of a plurality of users, wherein the one or more data structures are a set of rules, wherein each rule of the set of rules comprises one or more parameters for an identity variable, a security component variable, an action variable associated with the security component variable, and a security level variable;

configuring the intrusion detection system, by:

receiving from a user device, a set of identity credentials;

sending the set of identity credentials to an identity service to verify an identity of one user of the plurality of users associated with the set of identity credentials; and

receiving a result of a verification of the identity; and when verified:

selecting one system mode of the plurality of system modes based on the identity of the one user and the one or more data structures; and

configuring the intrusion detection system to operate based on the one system mode.

2. The method of claim 1 wherein subsequent to receiving the set of identity credentials,

receiving additional identification information via at least one of a credential reader or the user device, wherein the user device runs an identity wallet application, where the intrusion detection system processes the additional identification information as originating from a trusted source based on having received the result of the verification of the identity indicating the set of identity credentials are verified.

3. The method of claim 2 wherein the additional identification information is biometric information that the intrusion detection system processes to verify the one user in possession of the user device.

4. The method of claim 2 wherein the additional identification information is previously verified by the identity service and is registered mobile credential information stored on the user device.

5. The method of claim 1 , wherein the set of identity credentials are proxies for identity attributes associated with the identity of the one user.

6. A system comprises:

a processor and memory, wherein the memory is configured to store one or more data structures defining a plurality of system modes for an intrusion detection system, each of the plurality of system modes associated with one identity of one of a plurality of users, wherein the one or more data structures are a set of rules, wherein each rule of the set of rules comprises one or more parameters for an identity variable, a security component variable, an action variable associated with the security component variable, and a security level variable, wherein the processor and the memory configure the intrusion detection system, by instructions to cause the system to:

receive from a user device, a set of identity credentials;

send the set of identity credentials to an identity service to verify an identity of one user of the plurality of users associated with the set of identity credentials; and

receive a result of a verification of the identity; and when verified:

select one system mode of the plurality of system modes based on the identity and the one or more data structures; and

configure the intrusion detection system to operate based on the one system mode.

7. The system of claim 6 wherein the system is part of the intrusion detection system.

8. A system comprising:

one or more memory devices configured to store one or more data structures defining a plurality of system modes of an intrusion detection system, each of the plurality of system modes associated with an identity of one of a plurality of users, wherein the one or more data structures are a set of rules, wherein each rule of the set of rules comprises one or more parameters for an identity variable, a security component variable, an action variable associated with the security component variable, and a security level variable, wherein the one or more memory devices are configured to store instructions that, when executed by one or more processors, cause the one or more processors to configure the intrusion detection system by:

receiving from a user device, a set of identity credentials;

sending the set of identity credentials to an identity service to verify an identity of one user of the plurality of users associated with the set of identity credentials; and

receiving a result of a verification of the identity; and when verified:

select one system mode of the plurality of system modes based on the identity and the one or more data structures; and

configure the intrusion detection system to operate based on the one system mode.

9. A computer program product stored on a non-transitory computer readable media comprising instructions to cause a system to:

store one or more data structures defining a plurality of system modes of an intrusion detection system, each of the plurality of system modes associated with an identity of one of a plurality of users, wherein the one or more data structures are a set of rules, wherein each rule of the set of rules comprises an identity parameter, a security component parameter, an action parameter associated with the security component parameter, and a security level parameter;

receive from a user device, a set of identity credentials;

send the set of identity credentials to an identity service to verify an identity of one user of the plurality of users associated with the set of identity credentials; and

receive a result of a verification of the identity; and when verified:

select one system mode of the plurality of system modes based on the identity of the one user and the one or more data structures; and

configure the intrusion detection system to operate based on the one system mode.

10. The computer program product of claim 9 wherein subsequent to a reception of the set of identity credentials, the instructions cause the system to receive additional identification information via at least one of the user device, wherein the user device runs an identity wallet application or a credential reader, where the intrusion detection system processes the additional identification information as originating from a trusted source based on having received the result of the verification of the identity indicating the set of identity credentials are verified.

11. The computer program product of claim 10 wherein the additional identification information is biometric information that the intrusion detection system processes to verify the one user in possession of the user device.

12. The computer program product of claim 10 wherein the set of identity credentials were previously verified by the identity service and is a registered mobile credential stored on the user device.

13. The computer program product of claim 9 , wherein the set of identity credentials are proxies for identity attributes associated with the identity of the one user.

14. The system of claim 8 wherein subsequent to a reception of the set of identity credentials,

receiving additional identification information via at least one of a credential reader or the user device, wherein the user device runs an identity wallet application, where the intrusion detection system processes the additional identification information as originating from a trusted source based on having received the result of the verification of the identity presented to the intrusion detection system.

15. The system of claim 14 wherein the additional identification information is biometric information that the intrusion detection system processes to verify the one user in possession of the user device.

16. The system of claim 14 wherein the set of identity credentials were previously verified by the identity service and is a registered mobile credential stored on the user device.

17. The system of claim 8 , wherein the set of identity credentials are proxies for identity attributes associated with the identity of the one user.

Assignments (11)