System and method for confirming location using supplemental sensor and/or location data
A system, apparatus, method, and machine readable medium are described for performing authentication using environmental data. For example, one embodiment of a method comprises: collecting environmental sensor data from one or more sensors of a client device; using a geographical location reported by the device to collect supplemental data for the location; comparing the environmental sensor data with the supplemental data to arrive at a correlation score; and responsively selecting one or more authentication techniques for authenticating a user of the client device based on the correlation score.
1. A method for user authentication implemented on a client device comprising a memory for storing program code and a processor for processing the program code to cause operations to be performed on the client device comprising:
collecting environmental sensor data from one or more sensors configured on the client device;
determining a current geographical location of the client device from one or more location sensors configured on the client device;
using the geographical location to identify supplemental data associated with the location;
comparing the environmental sensor data with the supplemental data to arrive at a correlation score indicating a level of correlation between the environmental sensor data and the supplemental data, the operation of comparing performed through execution of the program code by the processor; and
responsively selecting one or more authentication techniques for authenticating a user of the client device based on the correlation score and based on an authentication policy associated with a relying party, the operation of responsively selecting performed through execution of the program code by the processor, the authentication techniques including biometric authentication techniques implemented using one or more biometric sensors communicatively coupled to the client device and configured to sense biometric data provided by the user, wherein responsively selecting further comprises selecting a first set of one or more authentication techniques required to meet a first specified assurance threshold for correlation scores below a specified correlation threshold and selecting a second set of one or more authentication techniques required to meet a second specified assurance threshold for correlation scores above the specified correlation threshold, the first specified assurance threshold being greater than the second specified assurance threshold;
wherein the supplemental data is collected from one or more network servers known to include accurate environmental data for the reported location.
2. The method as in claim 1 wherein the environmental sensor data comprises a temperature reading, a humidity reading, or a pressure reading.
3. The method as in claim 2 wherein the supplemental data comprises a current temperature, humidity, or pressure associated with the location.
4. The method as in claim 3 wherein the supplemental data is collected from one or more other client devices known to be at the reported location or within a specified distance from the reported location.
5. The method as in claim 3 wherein the supplemental data includes historical data related to the location.
6. The method as in claim 1 wherein comparing comprises determining differences between the supplemental data and the environmental sensor data.
7. The method as in claim 6 wherein the greater the differences, the lower the correlation score and the smaller the differences, the greater the correlation score.
8. The method as in claim 1 wherein for correlation scores below a specified threshold, one or more explicit user authentication techniques are required.
9. The method as in claim 8 wherein the explicit user authentication techniques include manual user personal identification number (PIN) entry, fingerprint authentication, voice authentication, facial authentication, or retinal scan authentication.
10. The method as in claim 1 wherein for correlation scores above a specified threshold, one or more non-intrusive user authentication techniques are implemented.
11. The method as in claim 10 wherein one of the non-intrusive techniques comprises collecting data from one or more additional sensors to detect known behavior of the user.
12. The method as in claim 11 wherein the known behavior of the end user comprises the user's gait.
13. A client device comprising a memory for storing program code, one or more sensors, and a processor for processing the program code for user authentication comprising:
one or more environmental sensors configured on the client device providing environmental sensor data;
one or more location sensors configured on the client device to determine a current geographical location of the client device;
a supplemental data collection module comprising program code executed by the processor to use the geographical location reported by the one or more location sensors to identify supplemental data associated with the location;
the supplemental data correlation module to compare the environmental sensor data with the supplemental data to arrive at a correlation score indicating a level of correlation between the environmental sensor data and the supplemental data; and
an authentication policy module comprising program code executed by the processor to responsively select one or more authentication techniques for authenticating a user of the client device based on the correlation score and based on an authentication policy associated with a relying party; and
one or more biometric sensors communicatively coupled to the client device and configured to sense biometric data provided by the user;
wherein the authentication techniques include biometric authentication techniques implemented using the one or more biometric sensors communicatively coupled to the client device and configured to sense biometric data provided by the user, wherein to responsively select the authentication techniques, the authentication policy module is configured to select a first set of one or more authentication techniques required to meet a first specified assurance threshold for correlation scores below a specified correlation threshold and to select a second set of one or more authentication techniques required to meet a second specified assurance threshold for correlation scores above the specified correlation threshold, the first specified assurance threshold being greater than the second specified assurance threshold;
wherein the supplemental data is collected from one or more network servers known to include accurate environmental data for the reported location.
14. The client device as in claim 13 wherein the environmental sensors comprise a temperature sensor, a humidity sensor or a pressure sensor and wherein the sensor data comprises a temperature reading, a humidity reading, and/or a pressure reading.
15. The client device as in claim 14 wherein the supplemental data comprises a current temperature, humidity, or pressure associated with the location.
16. The client device as in claim 15 wherein the supplemental data is collected from one or more other client devices known to be at the reported location or within a specified distance from the reported location.
17. The client device as in claim 15 wherein the supplemental data includes historical data related to the location.
18. The client device as in claim 13 wherein comparing comprises determining differences between the supplemental data and the environmental sensor data.
19. The system as in claim 18 wherein the greater the differences, the lower the correlation score and the smaller the differences, the greater the correlation score.
20. The client device as in claim 13 wherein for correlation scores below a specified threshold, one or more explicit user authentication techniques are required.
21. The client device as in claim 20 wherein the explicit user authentication techniques include manual user personal identification number (PIN) entry, fingerprint authentication, voice authentication, facial authentication, or retinal scan authentication.
22. The client device as in claim 13 wherein for correlation scores above a specified threshold, one or more non-intrusive user authentication techniques are implemented.
23. The client device as in claim 22 wherein one of the non-intrusive techniques comprises collecting data from one or more additional sensors to detect known behavior of the user.
24. The client device as in claim 23 wherein the known behavior of the end user comprises the user's gait.