IP Library Granted Patent US 12,039,021
Granted Patent B2
US 12,039,021 · App. 17/310,968 · Granted Jul 16, 2024

Multi-level classifier based access control

Inventors: Gabriele Gelardi (London, GB); Gery Ducatel (London, GB)
Assignee: BRITISH TELECOMMUNICATIONS PUBLIC LIMITED COMPANY
G06F21/316G06F21/10G06F21/45
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,039,021
App. No.
17/310,968
Granted
Jul 16, 2024
Kind
B2
Abstract

A computer implemented method of access control for a user device having at least one component for determining behaviors of the user. The method including accessing a first machine learning classifier trained based on at least one prior behavior of the user using the device, the classifier classifying user behavior as compliant or non-compliant. The method further including, in response to a determination that a subsequent behavior is classified as non-compliant, accessing a second machine learning classifier trained based on at least one prior behavior of the user using the device where the prior behavior is classified as non-compliant by the first classifier. The method further including, in response to a determination that the subsequent behavior is classified as non-compliant by the second classifier, requesting a credential-based authentication of the user and constructively training one of the machine learning classifiers based on the credential-based authentication result.

Claims (29)

1. A computer implemented method of access control for a user device having at least one component for determining behaviors of a user of the user device, the method comprising:

accessing a first machine learning classifier trained based on at least one prior behavior of the user using the user device, the first machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the first machine learning classifier to be consistent with prior behavior for permitting access to the user device; and

responsive to a determination by the first machine learning classifier that a subsequent behavior is classified as non-compliant, accessing a second machine learning classifier trained based on at least one prior behavior of the user using the user device where the prior behavior is classified as non-compliant by the first machine learning classifier, the second machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the second machine learning classifier to be consistent with prior behavior for permitting access to the user device in the event of non-compliant classification by the first machine learning classifier, and further responsive to the determination:

responsive to a determination that the subsequent behavior is classified as non-compliant by the second machine learning classifier:

requesting a credential-based authentication of the user;

constructively training the second machine learning classifier based on the subsequent behavior and a result of the credential-based authentication by providing the subsequent behavior as a training example for the second machine learning classifier; and

permitting access to the user device in response to the credential-based authentication; and

responsive to a determination that the subsequent behavior is classified by the first machine learning classifier as compliant, constructively training the first machine learning classifier based on the subsequent behavior as a compliant behavior by providing the subsequent behavior as a training example for the first machine learning classifier.

2. The method of claim 1 , further comprising, responsive to a determination that the subsequent behavior is classified by the first machine learning classifier as non-compliant, constructively training the first machine learning classifier based on the subsequent behavior as a non-compliant behavior by providing the subsequent behavior as a training example for the first machine learning classifier.

3. The method of claim 1 , wherein the component is one or more of: a location sensor; a position sensor; an orientation sensor; an accelerometer; an input device; a touch-screen; a temperature sensor; a time determiner; a pressure sensor; an olfactory sensor; a chemical sensor; a biometric sensor; a heart rate sensor; a cardiogram generator; a sound sensor; a voice recognition component; a handwriting recognition component; a global positioning system; and a gyroscope.

4. The method of claim 1 , wherein the credential-based authentication includes one or more of: an authentication scheme using a user identifier and password; a key-based user authentication scheme; a token-based user authentication scheme; and a multi-factor authentication scheme in which authentication is requested via a different device.

5. A computer system comprising:

a processor; and

a memory storing computer program code for performing a method of access control for a user device having at least one component for determining behaviors of a user of the user device, the method comprising:

accessing a first machine learning classifier trained based on at least one prior behavior of the user using the user device, the first machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the first machine learning classifier to be consistent with prior behavior for permitting access to the user device; and

responsive to a determination by the first machine learning classifier that a subsequent behavior is classified as non-compliant, accessing a second machine learning classifier trained based on at least one prior behavior of the user using the user device where the prior behavior is classified as non-compliant by the first machine learning classifier, the second machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the second machine learning classifier to be consistent with prior behavior for permitting access to the user device in the event of non-compliant classification by the first machine learning classifier, and further responsive to the determination:

responsive to a determination that the subsequent behavior is classified as non-compliant by the second machine learning classifier:

requesting a credential-based authentication of the user;

constructively training the second machine learning classifier based on the subsequent behavior and a result of the credential-based authentication by providing the subsequent behavior as a training example for the second machine learning classifier; and

permitting access to the user device in response to the credential-based authentication; and

responsive to a determination that the subsequent behavior is classified by the first machine learning classifier as compliant, constructively training the first machine learning classifier based on the subsequent behavior as a compliant behavior by providing the subsequent behavior as a training example for the first machine learning classifier.

6. A non-transitory computer-readable storage medium comprising computer program code to, when loaded into a computer system and executed thereon, cause the computer system to perform a method of access control for a user device having at least one component for determining behaviors of a user of the user device, the method comprising:

accessing a first machine learning classifier trained based on at least one prior behavior of the user using the user device, the first machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the first machine learning classifier to be consistent with prior behavior for permitting access to the user device; and

responsive to a determination by the first machine learning classifier that a subsequent behavior is classified as non-compliant, accessing a second machine learning classifier trained based on at least one prior behavior of the user using the user device where the prior behavior is classified as non-compliant by the first machine learning classifier, the second machine learning classifier classifying user behavior as compliant or non-compliant such that compliant behavior is determined by the second machine learning classifier to be consistent with prior behavior for permitting access to the user device in the event of non-compliant classification by the first machine learning classifier, and further responsive to the determination:

responsive to a determination that the subsequent behavior is classified as non-compliant by the second machine learning classifier:

requesting a credential-based authentication of the user;

constructively training the second machine learning classifier based on the subsequent behavior and a result of the credential-based authentication by providing the subsequent behavior as a training example for the second machine learning classifier; and

permitting access to the user device in response to the credential-based authentication; and

responsive to a determination that the subsequent behavior is classified by the first machine learning classifier as compliant, constructively training the first machine learning classifier based on the subsequent behavior as a compliant behavior by providing the subsequent behavior as a training example for the first machine learning classifier.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 22, 2022
From: GELARDI, GABRIELE; DUCATEL, GERY
To: BRITISH TELECOMMUNICATIONS PUBLIC LIMITED COMPANY
Reel/Frame 060855/0288 →
Priority Claims (1)
EP 19161164 · Mar 7, 2019 · regional
Continuity (1)
Related Publication 20220100829A1 · Mar 31, 2022
Cited By (1)
US 12,699,900