IP Library Granted Patent US 11,134,084
Granted Patent B1
US 11,134,084 · App. 16/200,931 · Granted Sep 28, 2021

Diversified authentication and access control

Inventors: Darren Tuadleng Koh (Dublin, CA); Arun Suresh Prabhu (Dublin, CA)
Assignee: HID Global Corporation
H04L63/102H04L63/0861
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,134,084
App. No.
16/200,931
Granted
Sep 28, 2021
Kind
B1
Abstract

The invention provides for an improved and diversified system, apparatus and method for authenticating and/or authorizing an identity of an action requester within a secure environment. The invention provides for human and non-human agents as authentication factors that can be communicated with in real time via a communications network, such as via the Internet. The invention also provides for facilitating authorization of action requests that are received from non-human action requesters.

Claims (35)

1. A system for authenticating and authorizing performance of an action, the system comprising:

a computer terminal comprising an action request interface component that is configured for receiving an action request from an action requester, said action request being a request for the action to be permitted, and for receiving a first set of authentication information from said action requester via the computer terminal, said first set of authentication information comprising one or more traditional authentication factors that are personal to said action requester; and

a first communications channel formed in a communications network between said access request interface component and a computer system for providing communication between said access request interface component and the computer system, the computer system comprising a database storing authentication registration information and physical memory storing an authorizing logic component;

wherein said authorizing logic component is configured to determine a set of one or more authorizing actions that are required in association with an identity of said action requester and with said action request, said one or more authorizing actions comprising processing the one or more traditional authentication factors and one or more non-traditional authentication factors that are not personal to said action requester;

wherein the one or more traditional authentication factors comprise one or more of a password known to the action requester, a biometric feature of the action requester, and an object in the possession of the action requester;

wherein the one or more non-traditional authentication factors comprise one or more of a GPS location of a GPS tracking device and authorization from a human authorizing agent through a portable communications device of the authorizing agent that is in operable communication with the computer system;

wherein said authorizing logic component includes an authorization formula that produces an authorization score based on the processing of the one or more traditional authentication factors and one or more non-traditional authentication factors that are not personal to said action requester; and

wherein said authorizing logic component includes a minimum authorization score required to permit said action, the minimum authorization score determined such that in order for the authorization score to meet the minimum authorization score, both satisfaction of at least one traditional authentication factor and satisfaction of at least one non-traditional authentication factor are required.

2. The system of claim 1 wherein processing the one or more non-traditional authentication factors comprises communication with one or more authorizing agents.

3. The system of claim 2 wherein at least one authorizing agent is a network accessible device.

4. The system of claim 1 wherein the action requester is not a human being.

5. The system of claim 1 wherein said first set of authentication information includes a representation of a biometric feature of said action requester.

6. An apparatus for authenticating and authorizing performance of an action, the apparatus comprising:

a computer terminal comprising an action request interface component that is configured for receiving an action request from an action requester, said action request being a request for the action to be permitted, and for receiving a first set of authentication information from said action requester via the computer terminal, said first set of authentication information comprising one or more traditional authentication factors that are personal to said action requester; and

a first communications channel formed in a communications network between said access request interface component and a computer system for providing communication between said access request interface component and the computer system, the computer system comprising a database storing authentication registration information and physical memory storing an authorizing logic component;

wherein said authorizing logic component is configured to determine a set of one or more authorizing actions that are required in association with an identity of said action requester and with said action request, said one or more authorizing actions comprising processing the one or more traditional authentication factors and one or more non-traditional authentication factors that are not personal to said action requester;

wherein said one or more traditional authentication factors comprise one or more of a password known to the action requester, a biometric feature of the action requester, and an object in the possession of the action requester;

wherein said one or more non-traditional authentication factors comprise one or more of a GPS location of a GPS tracking device and authorization from a human authorizing agent through a portable communications device of the authorizing agent that is in operable communication with the computer system; and

wherein in order for the authorizing logic component to permit said action, both satisfaction of at least one traditional authentication factor and satisfaction of at least one non-traditional authentication factor are required.

7. The apparatus of claim 6 wherein said one or more non-traditional authentication factors comprise communication with an authorizing agent that is a network accessible device.

8. The apparatus of claim 6 wherein the action requester is not a human being.

9. The apparatus of claim 6 wherein said first set of authentication information includes a representation of a biometric feature of said action requester.

10. A method for authenticating and authorizing performance of an action, the method comprising:

receiving, at an action request interface component, an action request and a first set of authentication information from an action requester, said action request being a request for the action to be permitted, and said first set of authentication information comprising one or more traditional authentication factors that are personal to said action requester;

communicating between said access request interface component and an authorizing logic component;

using said authorizing logic component to determine a set of one or more authorizing actions that are required in association with an identity of said action requester and with said action request, said one or more authorizing actions comprising processing the one or more traditional authentication factors and one or more non-traditional authentication factors that are not personal to said action requester;

performing said one or more authorizing actions and computing an authorization score based on processing of the one or more traditional authentication factors and one or more non-traditional authentication factors that are not personal to said action requester; and

permitting said action when the authorization score meets a minimum authorization score required to permit said action, the minimum authorization score determined such that in order for the authorization score to meet the minimum authorization score, both satisfaction of at least one traditional authentication factor and satisfaction of at least one non-traditional authentication factor are required;

wherein the one or more traditional authentication factors comprise one or more of a password known to the action requester, a biometric feature of the action requester, and an object in the possession of the action requester; and

wherein the one or more non-traditional authentication factors comprise one or more of a GPS location of a GPS tracking device and authorization from a human authorizing agent through a portable communications device of the authorizing agent that is in operable communication with the computer system.

11. The method of claim 10 wherein processing the one or more non-traditional authentication factors comprises communication with one or more authorizing agents.

12. The method of claim 11 wherein at least one authorizing agent is a network accessible device.

13. The method of claim 11 wherein at least one authorizing agent is a human being.

14. The method of claim 10 wherein the action requester is not a human being.

15. The method of claim 10 wherein said first set of authentication information includes a representation of a biometric feature of said action requester.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 17, 2021
From: CROSS MATCH TECHNOLOGIES, INC.
To: HID GLOBAL CORPORATION
Reel/Frame 055632/0611 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 7, 2018
From: KOH, DARREN TUADLENG; PRABHU, ARUN SURESH
To: CROSS MATCH TECHNOLOGIES, INC.
Reel/Frame 047704/0450 →