System and method for authenticating a user based on path location

Abstract

A passive authentication system includes a mobile device in communication with at least one of a plurality of access control devices, the mobile device being operable to determine a path trace of a user to authenticate the user based at least in part on the path trace and then allow passive access to a particular access control device.

Description

Technical Field

[0001] This disclosure was made with government support under D15PC0155 awarded by the U.S. Department of Homeland Security. The government has certain rights in this disclosure.

[0002] The present disclosure relates generally to authenticating users within a secure area, and more particularly, to systems and methods for authenticating users based on the user's movements. Background Art

[0003] Access control systems typically operate by encoding security data on a physical key fob that indicates access rights when presented to an access control device. Such systems may require constant active authentication of the user, which can be cumbersome and time consuming when used in a secure area that includes many access control devices, such as within a secure building. Furthermore, such systems do not preclude the unauthorized use of another person's key fob.

[0004] Implicitly and passively authenticating a user within a secure area is challenging. Behavioral features such as user walking patterns and location have been used to implicitly and passively authenticate a user. Typically, location is inferred from the user's GPS trajectory. However, GPS often performs poorly within buildings and may not provide sufficiently granular location. Moreover, a user's sense of touch, such as user gait, may not be a reliable indicator as such sense of touch may change over time or even throughout the day. Summary of the invention

[0005] A passive authentication system according to one disclosed non-limiting embodiment of the present disclosure includes a mobile device in communication with at least one of a plurality of access control devices, the mobile device being operable to determine a path trajectory of a user relative to a launch map of a secure area to authenticate a user based at least in part on the path trajectory of the user, and then allowing access to a particular access control device among the plurality of access control devices.

[0006] Further embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being operable to determine the path trajectory via identifying one or more of a plurality of access control devices.

[0007] Additional embodiments of any of the foregoing embodiments of the present disclosure include the identifying being performed by a magnetometer on the mobile device.

[0008] Additional embodiments of any of the foregoing embodiments of the present disclosure include the identifying being performed by a sensor on the mobile device that determines signal strength from one or more of the plurality of access control devices.

[0009] Additional embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being operable to determine a path trajectory via an accelerometer on the mobile device.

[0010] Additional embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being operable to determine a path trajectory based at least in part on a received signal strength indicator (RSSI) on the mobile device.

[0011] Additional embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being operable to determine a path trajectory based at least in part on a Wi-Fi signal strength on the mobile device.

[0012] Additional embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being operable to determine a path trajectory via a gyroscope on the mobile device.

[0013] Additional embodiments of any of the foregoing embodiments of the present disclosure include associating the path trajectory with time.

[0014] Additional embodiments of any of the foregoing embodiments of the present disclosure include associating the path trace with one or more of the plurality of access control devices.

[0015] Additional embodiments of any of the foregoing embodiments of the present disclosure include the access control device being a lock.

[0016] Additional embodiments of any of the foregoing embodiments of the present disclosure include the mobile device being a smartphone.

[0017] A method of passively authenticating a user according to one disclosed non-limiting embodiment of the present disclosure includes determining a path trajectory of the user relative to a launch map of a secure area; authenticating the user responsive to the path trajectory; and allowing access to an access control device responsive to the authentication.

[0018] Additional embodiments of any of the foregoing embodiments of the present disclosure include determining the path trajectory of the user is performed at least in part by a magnetometer on the mobile device.

[0019] Additional embodiments of any of the foregoing embodiments of the present disclosure include determining the path trajectory of the user is performed at least in part by an accelerometer on the mobile device.

[0020] Additional embodiments of any of the foregoing embodiments of the present disclosure include determining a path trajectory of the user is performed at least in part by a received signal strength indicator (RSSI) on the mobile device.

[0021] Additional embodiments of any of the foregoing embodiments of the present disclosure include determining a path trajectory of the user is performed at least in part by Wi-Fi signal strength on the mobile device.

[0022] Additional embodiments of any of the foregoing embodiments of the present disclosure include matching the user's path trajectory with a predetermined path trajectory for the user.

[0023] Additional embodiments of any of the foregoing embodiments of the present disclosure include matching a user's path trajectory with a predetermined path trajectory of the user within a specific time range.

[0024] The foregoing features and elements may be combined in various combinations, unless otherwise expressly indicated. These features and elements and their operation will be more apparent in light of the following description and accompanying drawings. It should be understood that the following description and accompanying drawings are intended to be exemplary and non-restrictive in nature. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] From the following detailed description of the disclosed non-limiting embodiments, various features will become apparent to those skilled in the art. The drawings accompanying the detailed description can be briefly described as follows:

[0026] Figure 1 is a general schematic system diagram of an access control system.

[0027] Figure 2 is a block diagram of an example electronic lock system.

[0028] Figure 3 is a flow chart of a method for operating an access control system.

[0029] Figure 4 is a general diagram of an access control system used to passively authenticate users within a secure area.

[0030] Figure 5 is a flow chart of a method for passively authenticating a user within a secure area. DETAILED DESCRIPTION

[0031] Figure 1 An access control system 10 is schematically illustrated. The system 10 generally includes a mobile device 12, a server 14, and a plurality of access control devices 16 schematically illustrated as 16a, 16b, ..., 16n, which are located within a secure area 18, such as a building or other area. It should be understood that although specific systems are individually defined in the schematic block diagrams, each or any of the systems may be combined or separated in other ways via hardware and / or software.

[0032] The mobile device 12 is a wireless-enabled handheld device, such as a smart phone, that is operable to communicate with the server 14 and the access control devices 16. The server 14 may provide the mobile device 12 with credentials and other data, such as firmware or software updates to be transmitted to one or more of the access control devices 16. Although the server 14 is illustrated herein as a single device, it should be understood that the server 14 may alternatively be implemented as a plurality of systems with which the mobile device 12 communicates to receive, for example, credentials and other data.

[0033] Each access control device 16 is a wireless-enabled, limited-access, or limited-use device, such as a wireless lock, an access control device reader for entering a room, a dispensing device, and other limited-use machines. The mobile device 12 submits credentials to the access control device 16, thereby selectively allowing the user to access or activate the functions of the access control device 16. For example, a user may passively submit credentials to an electromechanical lock to unlock it and thereby gain access to a restricted area. Some credentials may be used for multiple access control devices 16. For example, multiple electronic locks in a facility may respond to the same credential. Other credentials may be specific to a single access control device 16.

[0034] Reference Figure 2 , a block diagram of an example electronic lock system 20 includes an access control device 16a, a mobile device 12, and a server 14. The access control device 16a generally includes a lock actuator 22, a lock controller 24, a lock antenna 26, a lock transceiver 28, a lock processor 30, a lock memory 32, a lock power supply 34, a lock reader 90, and a credential module 36. The access control device 16a responds to credentials from the mobile device 12 and can be, for example, a lock of a lock box, a door lock, or a lock cylinder. Although the present disclosure focuses primarily on credentials for access control devices, it should be understood that other systems in which credentials are transmitted from a mobile device to an access control device to identify a user of an online system, or to verify user access rights or permissions in an offline system will benefit from it.

[0035] The lock controller 24 commands the lock actuator 22 to lock or unlock the mechanical or electronic lock after receiving and verifying the appropriate credentials from the mobile device 12 using the credential module 36, or after receiving card data from the lock card reader 90. The lock controller 24 and the lock actuator 22 may be parts of a single electronic or electromechanical lock unit, or may be components that are sold or installed separately.

[0036] The lock transceiver 28 is capable of transmitting data to and receiving data from at least the mobile device 12. For example, the lock transceiver 28 may be a near field communication (NFC), Bluetooth, Wi-Fi transceiver, or another suitable wireless transceiver. The lock antenna 26 is any antenna suitable for the lock transceiver 28. The lock processor 30 and the lock memory 32 are a data processing device and a data storage device, respectively. The lock processor 30 may be, for example, a microprocessor that processes instructions to verify card data and determine access rights contained in the card data, or passes a message from the transceiver to the credential module 36 and receives a response indication back from the credential module 36 using the card data. The lock memory 32 may be a RAM, an EEPROM, or other storage medium to which the lock processor 30 can read and write data, including, but not limited to, lock configuration options and a lock audit trail. The lock audit trail may be a unified audit trail that includes events initiated by accessing the lock via the lock card reader 90 or the mobile device 12. The lock power supply 34 is a power source, such as a power connection line, a power collection system, or a battery that powers the lock controller 24. In other embodiments, the lock power supply 34 may only power the lock controller 24 , with the lock actuator 22 being powered primarily or entirely by another source such as user work (eg, turning a bolt).

[0037] The credential module 36 is in communication with the lock processor 30 and is operable to decrypt and verify the credential to extract the virtual card data as a “virtual card read” that is transmitted to the lock controller 24. That is, the access control device 16a essentially has two readers, a reader 90 for reading the physical key fob 92, and the credential module 36 for communicating with the mobile device 12 via the lock processor 30 and the transceiver 28 and antenna 26.

[0038] The mobile device 12 generally includes a key antenna 40, a key transceiver 42, a key processor 44, a key memory 46, a GPS receiver 48, an input device 50, an output device 52, and a key power supply 54. The key transceiver 42 is a transceiver of a type corresponding to the lock transceiver 28, and the key antenna 40 is a corresponding antenna. In some embodiments, the key transceiver 42 and the key antenna 40 can also be used to communicate with the server 14. In other embodiments, one or more separate transceivers and antennas can be included to communicate with the server 14. The key memory 46 is of a type that locally stores multiple credentials on the mobile device 12. In other embodiments, the mobile device 12 communicates with the server 14 at the same time as it communicates with the access control device 16a. This is an online configuration, and in this embodiment, the mobile credentials are retrieved and passed to the credential module 36 in real time without first being stored in the key memory 46 on the mobile device 12.

[0039] The mobile device 12 may also include a position sensor, such as a magnetometer 100 and a received signal strength indicator (RSSI) 102. The magnetometer 100 is generally formed essentially as a miniature Hall effect sensor that detects the earth's magnetic field along three perpendicular axes X, Y and Z. The X, Y and Z axis sensor position data locates the user within the safe area 18 and tracks path trajectory, speed, etc. That is, the safe area 18 can be mapped relative to the magnetometer, Bluetooth and / or other transmission data from the access control device 16 and other sources to generate a transmission map 110 for each corresponding safe area 18. The map 110 can be constructed by an installation technician and can be referred to as a universal indoor location model. The map 110 is stored in the server 14 for access by the mobile device 12 via a security application 120 stored on the mobile device, which determines the user's path trajectory based at least in part on the user's path trajectory to verify the user.

[0040] Reference Figure 3 , schematically illustrates a method 300 for operating the access control system 10 to passively authenticate a user within the secure area 18. These functions are programmed software routines executable in various microprocessor-based electronic control implementations and are represented herein as block diagrams.

[0041] Initially, the security application 120 identifies a particular user with the server 14 and then downloads or retrieves (step 302) an appropriate map of the secure area 18. The mobile device 12 then reads the magnetometer and / or other location data to detect (step 304) the location and path taken by the user as he moves within the secure area 18 to define a user-specific map 110A ( Figure 4 ). Although GPS may be used, it may not provide the necessary granular location data. In addition, the distribution of access control devices 16 within the secure area 18 provides a unique magnetometer signature for creating a map 110 in the standalone system environment. The received signal strength indicator (RSSI) 102 determines the user path trajectory and also determines the proximity to the access control device 16 within the secure area 18 (step 306). This can be referred to as a specific path tracking model, which trains the security application 120 for a specific user. Once in proximity, the access control system 10 passively authenticates (step 308; Figure 3 ) user and opens the access control device 16 (step 310) when the user approaches, or requires further confirmation if the desired confidence level is not achieved.

[0042] Reference Figure 5, a method 500 for passively authenticating a user within a secure area 18 utilizing a security application 120 initially includes determining whether a user is within a predefined proximity 502 of a particular access control device 16 based on a received signal strength indicator (RSSI) 102. If within the predefined proximity 502 of the particular access control device 16, a path trajectory of the user from magnetometer readings is determined relative to a map as the user travels within the secure area 18.

[0043] The path trajectory of the specific user is then used to authenticate the user within the secure area 18 504. That is, the user path trajectory is used to build a user-specific path trajectory profile that defines the probability of identifying a specific user given the user path trajectory, and then the learned path trajectory profile is used to authenticate the user. Since the path trajectory of an authenticated user to reach the access control device may be different from the path of an intruder, the path trajectory can be used to authenticate the user. Alternatively or additionally, other tactile factors such as gait, time of day, etc. can be used in conjunction with the user path trajectory.

[0044] The security application 120 then predicts the probability of authentication for the actual user given the user's most recent path trajectory. If the prediction is high, the security application 120 automatically sends an open message to the access control device 16. Otherwise, the user will have to authenticate via other traditional procedures such as a physical key fob 92. Therefore, even if an intruder gains custody of an authorized user's mobile device 12, the path taken by the intruder may be different from the path that the authorized user is known to take.

[0045] The elements described and depicted herein, including the elements in the flowcharts and block diagrams of all the drawings, imply logical boundaries between the elements. However, according to software or hardware engineering practices, the depicted elements and their functions can be implemented on a machine as an overall software structure, independent software modules, or modules using external routines, codes, services, etc., or any combination of these through a computer-executable medium having a processor capable of executing program instructions stored thereon, and all such implementations may be within the scope of the present disclosure.

[0046] The use of the terms "a," "an," "the," and similar references in the context of the description (especially in the context of the following claims) are to be construed to cover both the singular and the plural, unless otherwise indicated herein or clearly contradicted by context. The modifier "about" used in connection with a quantity is inclusive of the stated value and has the meaning dictated by the context (e.g., it includes the degree of error associated with the measurement of the particular quantity). All ranges disclosed herein are inclusive of the endpoints, and the endpoints are independently combinable with each other.

[0047] Although different non-limiting embodiments have specifically shown parts, embodiments of the present invention are not limited to those specific combinations. Some parts or features from any one of the parts or features in the non-limiting embodiments may be used in combination with features or parts from any one of the other non-limiting embodiments.

[0048] It should be understood that like reference numerals identify corresponding or similar elements throughout the several drawings. It should also be understood that although specific component arrangements have been disclosed in the illustrated embodiments, other arrangements will benefit therefrom.

[0049] Although a specific order of steps is shown, described, and claimed, it should be understood that the steps may be performed in any order, separate or combined unless otherwise indicated, and will still benefit from the present disclosure.

[0050] The foregoing description is intended to be exemplary and not to be limited by the limitations therein. Various non-limiting embodiments are disclosed herein, however, one of ordinary skill in the art will recognize that various modifications and variations based on the above teachings will fall within the scope of the appended claims. Therefore, it should be understood that within the scope of the appended claims, the present disclosure may be practiced in a manner other than that specifically described. Therefore, the appended claims should be studied to determine the true scope and content.

Claims

1. A passive verification system, comprising: a plurality of locks, each lock including a wireless transmitter; a server having stored thereon a transmission map, the transmission map being based on transmission data of a plurality of locks within a secure area, the secure area containing the plurality of locks; as well as a mobile device that communicates with at least one of the plurality of locks, the mobile device comprising a transceiver and a processor, wherein the processor and transceiver are configured to: receiving a transmission map from the server; determining a path trajectory of a user relative to the launch map to authenticate the user based at least in part on the path trajectory of the user, wherein the mobile device determines a path trace by identifying signals received from the plurality of locks and then allows passive access to a particular one of the plurality of locks in response to identity verification of a user, wherein the path trace is associated with one or more of the plurality of locks; sending authentication information to one of the plurality of locks; Wherein, one of the plurality of locks is configured to allow passive access to the lock when the mobile device is in proximity to the lock.

2. The system of claim 1, wherein the identifying is performed by a magnetometer on the mobile device.

3. The system of claim 1, wherein the identifying is performed by a sensor on the mobile device that determines a signal strength from one or more of the plurality of locks.

4. The system of claim 1, wherein the mobile device is operable to determine the path trajectory via an accelerometer on the mobile device.

5. The system of claim 1, wherein the mobile device is operable to determine the path trajectory based at least in part on a received signal strength indicator (RSSI) on the mobile device.

6. The system of claim 1, wherein the mobile device is operable to determine the path trajectory based at least in part on a Wi-Fi signal strength on the mobile device.

7. The system of claim 1, wherein the mobile device is operable to determine the path trajectory via a gyroscope on the mobile device. The system of claim 1 , wherein the path trajectory is associated with time.

9. The system of claim 1, wherein the mobile device is a smart phone.

10. A method for passively authenticating a user, comprising: receiving, by the mobile device from the server, a transmission map based on transmission data of a plurality of locks within the secure area; determining a path trajectory of a user relative to the emission map, wherein the mobile device determines the path trajectory by identifying signals received from one or more of a plurality of locks, and the path trajectory is associated with one or more of the plurality of locks; authenticating the user by the mobile device in response to the path trace; and When the mobile device is in proximity to one of the plurality of locks, in response to the verification, the one of the plurality of locks allows passive access. The method of claim 10 , wherein determining the path trajectory of the user is performed at least in part by a magnetometer on the mobile device.

12. The method of claim 10, wherein determining the path trajectory of the user is performed at least in part by an accelerometer on the mobile device.

13. The method of claim 10, wherein determining the path trajectory of the user is performed at least in part by a received signal strength indicator (RSSI) on the mobile device.

14. The method of claim 10, wherein determining the path trajectory of the user is performed at least in part by Wi-Fi signal strength on the mobile device.

15. The method of claim 10, wherein authenticating the user in response to the path trajectory comprises matching the path trajectory of the user with a predetermined path trajectory of the user.

16. The method of claim 10, wherein authenticating the user in response to the path trajectory comprises matching the path trajectory of the user with a predetermined path trajectory of the user within a specific time range.

17. The method of claim 10, wherein enabling passive access to the lock in response to the verification comprises passively submitting credentials to the electromechanical lock to unlock and thereby enter the restricted area.

Images