Patent ID: 11929997
Assignee: NOK NOK LABS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method comprising:
receiving, at a client device, a request from a user of the client device to perform a particular transaction with a local transaction device;
performing, via client risk assessment logic of the client device, an assessment of client device configuration data to determine a risk level associated with the client device;
identifying, via an adaptive authentication policy module, a transaction class for the particular transaction based on variables associated with the particular transaction;
determining, via an assurance level calculation module of the client device, a required assurance level based on the risk level and the transaction class;
receiving, via one or more user authentication devices of the client device or otherwise coupled thereto, biometric input from a user on the client device and comparing the received biometric input with user biometric reference data previously received and stored at the client device to generate a similarity score;
presenting, via a display of the client device or otherwise coupled thereto, one or more screen layouts to the user;
capturing, via one or more cameras of the client device or otherwise coupled thereto, a sequence of images which include the user's eyes as the one or more screen layouts are displayed;
performing, via an eye tracking module of the client device, eye movement detection across the sequence of images to identify a first correlation between motion of the user's eyes as the one or more screen layouts are presented and an expected motion of the user's eyes as the one or more screen layouts are presented;
generating, via the assurance level calculation module of the client device, a current assurance level by combining the similarity score with a first score associated with the first correlation;
comparing, via the assurance level calculation module of the client device, the current assurance level with the required assurance level to generate an authentication result;
transmitting, via secure communication logic of the client device, the authentication result, but not data related to the biometric input, from the client device to a remote secure transaction service;
and
the remote secure transaction service transmitting a signal to the local transaction device to perform one or more operations of the particular transaction if the authentication result is sufficient to complete the particular transaction.