Patent ID: 11899765
Assignee: DTS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A multi-factor identification system comprising:
a storage device that includes an authentication information that includes a plurality of respective enrolled user multi-factor identifiers that includes respective enrolled first factor identifiers and respective enrolled second factor identifiers;
an authentication manager controller configured to:
receive an authentication request that includes respective first factor unique user-identification information of a user and respective second factor unique user-identification information of the user;
produce a request first factor identifier and a request second factor identifier, based upon the respective received first factor unique user-identification information and the respective received second factor unique user-identification information;
search the authentication information for a match between the request first factor identifier and a respective enrolled first factor identifier and a match between the request second factor identifier and a respective enrolled second factor identifier;
in response to finding a first match between the request first factor identifier and the respective enrolled first factor identifier and a second match between the request second factor identifier with the respective enrolled second factor identifier:
send a signal indicating that the user is authenticated;
identify a first confidence level for the first match and a second confidence level for the second match, wherein the first confidence level and the second confidence level are derived based on values of a distance metric and based at least in part on one of: a rate of false positives of observed unenrolled users who are authenticated and a rate of false negatives observed for enrolled users who are not authenticated;
compare the first confidence level to the second confidence level;
if it is determined that the first confidence level exceeds the second confidence level, update the respective second enrolled factor identifier with the request second factor identifier;
if it is determined that the second confidence level exceeds the first confidence level, update the respective first enrolled factor identifier with the request first factor identifier;
reduce authentication denials by using at least one of the updated first enrolled factor identifier or the updated second enrolled factor identifier to process a subsequent authentication request; and

in response to not finding the first match or not finding the second match, send a signal indicating denial of access to the user.