Granted Patent B2

US 12,250,216 · App. 17/042,025 · Granted Mar 11, 2025

Inventors: Frédéric Dao (Gemenos, FR); Thomas Dandelot (Gemenos, FR); Frédéric Paillart (Gemenos, FR); Frédéric Faure (Gemenos, FR); Fabrice Delhoste (Gemenos, FR)

Assignee: THALES DIS FRANCE SAS

H04L63/0884G06N20/00G07C9/22H04W12/06H04W12/30H04W12/63

Abstract

Claims (32)

1. A method for authentication of a user using a user equipment, comprising an authentication engine for authenticating at least one user, said authentication engine being configured to operate with a local authentication model, wherein the method comprises the step for the user equipment of enhancing its local authentication model by at least one authentication factor; wherein said at least one authentication factor is stored in the local authentication model with a validity indication, indicating a time the at least one authentication factor is valid for taking into account by the authentication engine, wherein the authentication engine detects temporary modification of user behavior over said predefined period from said validity indications derived from a user input, a predefined default value, and context derivation over a special time, associated with said user behavior; and authenticating a user by means of a match of the local authentication model with a set of user behavior indications retrieved by the user equipment through the authentication engine; wherein, the user equipment further comprising a communication unit for communicating with a central server comprising a central authentication model used for said authentication engine; for providing a first model update message relating to said at least one authentication factor of the local authentication model to the central server, being configured to update the central authentication model based on said first model update message;

retrieving a second model update message from the central server, relating to an update of the central authentication model, said update relating to at least one model update message provided by at least one second user equipment; and enhancing the local authentication model based on the second model update message, wherein the user equipment and the at least one second user equipment belong to the same user, and upon expiration of a predefined period, checking if a change of said local authentication model takes place in order to decide if another model updated message is about to be sent, wherein the step of checking comprises determining if said validity indication of said at least one authentication factor has expired.

2. The method according to claim 1 , comprising after expiry of the predefined period the step of searching at least one authentication factor with expired validity indication in the local authentication model, removing the at least one found authentication factor from the local authentication model.

3. The method according to claim 1 , wherein the authentication engine comprises a plurality of machine learning patterns, comprising in authenticated mode an active machine learning pattern for collecting authentication factors relating to a user interaction, and a passive machine learning pattern for collecting authentication factors by retrieving information through sensors of the user equipment.

4. The method according to claim 1 , wherein said at least one authentication factor comprises at least one out of:

one of the latest user equipment used by the user,

one of the last location the user was situated at,

one of the last persons the user interacted with,

recently determined data retrieved by at least one sensor accessible by the user equipment,

an answer to a question provided through the user equipment.

5. The method according to claim 1 ,

wherein the validity indication of said at least one authentication factor is amended in case a second authentication factor impacting the first authentication factor is determined.

6. The method according to claim 1 ,

wherein, the user equipment further comprising the communication unit for communicating with the central server comprising the central authentication model used for said authentication engine.

7. A user equipment, comprising an authentication engine for authenticating at least one user, said authentication engine being configured to operate with a local authentication model, wherein the user equipment is configured to enhance its local authentication model by at least one authentication factor,

wherein said at least one authentication factor is stored in the local authentication model with a validity indication, indicating a time the at least one authentication factor is valid for taking into account by the authentication engine,

and further the user equipment is configured to authenticate a user by means of a match of the local authentication model with a set of user behavior indications retrieved by the user equipment through the authentication engine, wherein the authentication engine detects temporary modification of user behavior over said predefined period from said validity indications derived from a user input, a predefined default value, and context derivation over a special time, associated with said user behavior:

the user equipment further comprising a communication unit for communicating with a central server comprising a central authentication model used for said authentication engine, wherein the user equipment is configured to:

provide a first model update message relating to said at least one authentication factor of the local authentication model to the central server, being configured to update the central authentication model based on said first model update message;

retrieving a second model update message from the central server, relating to an update of the central authentication model, said update relating to at least one model update message provided by at least one second user equipment;

and enhancing the local authentication model based on the second model update message;

wherein the user equipment and the at least one second user equipment belong to the same user, and upon expiration of a predefined period, checking if a change of said local authentication model takes place in order to decide if another model updated message is about to be sent, wherein the step of checking comprises determining if said validity indication of said at least one authentication factor has expired.

8. The user equipment according to claim 7 , further comprising at least one sensor,

wherein the authentication engine comprises a plurality of machine learning patterns, comprising in authenticated mode an active machine learning pattern for collecting authentication factors relating to a user interaction,

and a passive machine learning pattern for collecting authentication factors by retrieving information through said sensors of the user equipment.

9. The user equipment according to claim 8 , wherein the validity indication of said at least one authentication factor is amended in case a second authentication factor impacting the first authentication factor is determined.

10. The user equipment according to claim 7 ,

the user equipment further comprising the communication unit for communicating with the central server comprising the central authentication model used for said authentication engine.

11. The user equipment according to claim 10 , further configured after expiry of the predefined period to:

search at least one authentication factor with expired validity indication in said local authentication model,

remove said at least one found authentication factor from the local authentication model,

provide a first model update message relating to the removed authentication factor to the central server.

Assignments (2)

Priority Claims (1)

Continuity (1)

References Cited (11)