Office Action 1: Notice of Allowance (2024-09-06)

CLAIMS:
AMENDMENTS TO THE CLAIMS:

This listing of claims will replace all prior versions and listings of claims in the application:

1-20. (Cancelled)219

21\. (New) A computer-implemented method of activating an encrypted user session on a public access user computing device, the method comprising:
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with a first user;
receiving a selection of the option to activate the encrypted user session from a requestor at the public access user computing device;
in response to receiving the selection, receiving, from at least one camera, image data of the requestor at the public access user computing device;
detecting, based on the image data, that the requestor is the first user;
retrieving, based on the detection, a session key associated with the first user;
decrypting the user session associated with the first user; and
activating the user session associated with the first user on the public access user computing device.
22\. (New) The computer-implemented method of claim 21, further comprising:retrieving, from a database, one or more index-difference vectors linked with the session key.

23\. (New) The computer-implemented method of claim 22, wherein decrypting the user session associated with the first user includes:calculating the user session from the retrieved index-difference vectors.

24\. (New) The computer-implemented method of claim 21, further comprising:analyzing the received image data to extract facial and appearance features associated with the requestor.

25\. (New) The computer-implemented method of claim 24, wherein retrieving, based on the detection, a session key associated with the first user includes:retrieving the session key based on the extracted facial and appearance features.

26\. (New) The computer-implemented method of claim 21, wherein detecting, based on the image data, that the requestor is the first user includes:comparing the received image data of the requestor to stored image data of the first user.

27\. (New) The computer-implemented method of claim 21, wherein the session key was generated based on previous image data associated with the first user, and wherein the session key is a hash.

28\. (New) The computer-implemented method of claim 22, wherein the index- difference vectors were generated based on a comparison of the user session to a new generic user session.

29\. (New) The computer-implemented method of claim 24, wherein the facial and appearance features associated with the requestor are extracted by employing at least one of a convolutional neural network (CNN) model or a long short-term memory (LSTM) recurrent neural network model on the received image data.

30\. (New) The computer-implemented method of claim 24, wherein the extracted facial and appearance features include a size and a distance between one or more of eyes, a nose, or a mouth of the requestor.

31\. (New) A system for activating an encrypted user session on a public access user computing device, the system comprising:a memory storing instructions; and
one or more processors operatively connected to the memory and configured to execute the instructions to perform operations including:
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with a first user;
receiving a selection of the option to activate the encrypted user session from a requestor at the public access user computing device;

in response to receiving the selection, receiving, from at least one camera,
image data of the requestor at the public access user computing device;detecting, based on the image data, that the requestor is the first user;
retrieving, based on the detection, a session key associated with the first user;
decrypting the user session associated with the first user; and
activating the user session associated with the first user on the public access user computing device.

32\. (New) The system of claim 31, wherein the operations further include:retrieving, from a database, one or more index-difference vectors linked with the session key.

33\. (New) The system of claim 32, wherein decrypting the user session associated with the first user includes:calculating the user session from the retrieved index-difference vectors.

34\. (New) The system of claim 31, wherein the operations further include:analyzing the received image data to extract facial and appearance features associated with the requestor.

35\. (New) The system of claim 34, wherein retrieving, based on the detection, a session key associated with the first user includes:

retrieving the session key based on the extracted facial and appearance features.

36\. (New) The system of claim 31, wherein detecting, based on the image data, that the requestor is the first user includes:comparing the received image data of the requestor to stored image data of the first user.

37\. (New) The system of claim 31, wherein the session key was generated based on previous image data associated with the first user, and wherein the session key is a hash.

38\. (New) The system of claim 32, wherein the index-difference vectors were generated based on a comparison of the user session to a new generic user session.

39\. (New) The system of claim 34, wherein the facial and appearance features associated with the requestor are extracted by employing at least one of a convolutional neural network (CNN) model or a long short-term memory (LSTM) recurrent neural network model on the received image data.

40\. (New) A computer-implemented method of activating an encrypted user session on a public access user computing device, the method comprising:receiving, from at least one camera, image data;

detecting, based on the received image data, and by employing a machine learning model trained using a dataset of actions collected from a plurality of previous users, that a requestor has moved toward the public access user computing device;
detecting, based on the image data, that the requestor is a first user;
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with the first user;
receiving a selection of the option to activate the encrypted user session from the first user at the public access user computing device;
retrieving, based on the selection, a session key associated with the first user;
decrypting the user session associated with the first user; and
activating the user session associated with the first user on the public access user computing device.

OFFICE ACTION:
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
DETAILED ACTION
This office action is responsive to the application filed on 12/01/2023. In which,
Claims 21, 31 and 40 are independent.
Claims 1-20, 22-23, 32-33 are cancelled.
Claims 21, 28, 31, 38 and 40 are amended.
New claims 41-44 have been added.
Claims 21, 24-31 and 34-44 are allowed.
Terminal Disclaimer based on parent patent (U.S. Patent No. 11,861,041B2) for double patenting has been filed and approved on 08/22/2024.
Information Disclosure Statement
The information disclosure statement (IDS) submitted on 12/01/2023 was filed on or after the mailing date of the application no.18/526,398 filed on 12/01/2023. The submission is in compliance with the provisions of 37 CFR 1.97.  Accordingly, the information disclosure statement is being considered by the examiner and an initialed and dated copy of Applicant’s IDS form 1449 filed on 12/01/2023 is attached to the instant office action.
EXAMINER’S AMENDMENT
An examiner's amendment to the record appears below. Should the changes
and/or additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee.
Authorization for this examiner's amendment was given via an email and phone -conversation with the applicant’s representative- Lindsay Littler Chiarello (Reg. No. 68,979) on 08/21/2024.
In the application, please replace all existing set of claims with the following:
1-20.	(Cancelled)
21.	 (Proposed Amendment) A computer-implemented method of activating an encrypted user session on a public access user computing device, the method comprising:
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with a first user;
receiving a selection of the option to activate the encrypted user session from a requestor at the public access user computing device;
in response to receiving the selection, receiving, from at least one camera, image data of the requestor at the public access user computing device;
detecting, based on the image data, that the requestor is the first user;
retrieving, based on the detection, a session key associated with the first user;
retrieving, from a database, one or more index-difference vectors linked with the session key;
decrypting the user session associated with the first user based on calculating the user session from the retrieved one or more index-difference vectors; and
activating the user session associated with the first user on the public access user computing device.
22. 	(Cancelled)
23. 	(Cancelled)
24. 	(Original) The computer-implemented method of claim 21, further comprising:
analyzing the received image data to extract facial and appearance features associated with the requestor.
25. 	(Original) The computer-implemented method of claim 24, wherein retrieving, based on the detection, a session key associated with the first user includes:
retrieving the session key based on the extracted facial and appearance features.
26. 	(Original) The computer-implemented method of claim 21, wherein detecting, based on the image data, that the requestor is the first user includes:
comparing the received image data of the requestor to stored image data of the first user.
27. 	(Original) The computer-implemented method of claim 21, wherein the session key was generated based on previous image data associated with the first user, and wherein the session key is a hash.
28. 	(Proposed Amendment) The computer-implemented method of claim [[22]]21, wherein the index-difference vectors were generated based on a comparison of the user session to a new generic user session.
29. 	(Original) The computer-implemented method of claim 24, wherein the facial and appearance features associated with the requestor are extracted by employing at least one of a convolutional neural network (CNN) model or a long short-term memory (LSTM) recurrent neural network model on the received image data.
30. 	(Original) The computer-implemented method of claim 24, wherein the extracted facial and appearance features include a size and a distance between one or more of eyes, a nose, or a mouth of the requestor.
31.	(Proposed Amendment) A system for activating an encrypted user session on a public access user computing device, the system comprising:
a memory storing instructions; and
one or more processors operatively connected to the memory and configured to execute the instructions to perform operations including:
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with a first user;
receiving a selection of the option to activate the encrypted user session from a requestor at the public access user computing device;
in response to receiving the selection, receiving, from at least one camera, image data of the requestor at the public access user computing device;
detecting, based on the image data, that the requestor is the first user;
retrieving, based on the detection, a session key associated with the first user;
retrieving, from a database, one or more index-difference vectors linked with the session key;
decrypting the user session associated with the first user based on calculating the user session from the retrieved one or more index-difference vectors; and
activating the user session associated with the first user on the public access user computing device.
32. 	(Cancelled)
33. 	(Cancelled)
34. 	(Original) The system of claim 31, wherein the operations further include:
analyzing the received image data to extract facial and appearance features associated with the requestor.
35. 	(Original) The system of claim 34, wherein retrieving, based on the detection, a session key associated with the first user includes:
retrieving the session key based on the extracted facial and appearance features.
36. 	(Original) The system of claim 31, wherein detecting, based on the image data, that the requestor is the first user includes:
comparing the received image data of the requestor to stored image data of the first user.
37. 	(Original) The system of claim 31, wherein the session key was generated based on previous image data associated with the first user, and wherein the session key is a hash.
38. 	(Proposed Amendment) The system of claim [[32]]31, wherein the index-difference vectors were generated based on a comparison of the user session to a new generic user session.
39. 	(Original) The system of claim 34, wherein the facial and appearance features associated with the requestor are extracted by employing at least one of a convolutional neural network (CNN) model or a long short-term memory (LSTM) recurrent neural network model on the received image data.
40. 	(Proposed Amendment) A computer-implemented method of activating an encrypted user session on a public access user computing device, the method comprising:
receiving, from at least one camera, image data;
detecting, based on the received image data, and by employing a machine learning model trained using a dataset of actions collected from a plurality of previous users, that a requestor has moved toward the public access user computing device;
detecting, based on the image data, that the requestor is a first user;
causing display, on the public access user computing device, of an option to activate the encrypted user session associated with the first user;
receiving a selection of the option to activate the encrypted user session from the first user at the public access user computing device;
retrieving, based on the selection, a session key associated with the first user;
retrieving, from a database, one or more index-difference vectors linked with the session key;
decrypting the user session associated with the first user based on calculating the user session from the retrieved one or more index-difference vectors; and
activating the user session associated with the first user on the public access user computing device.
41. 	(Proposed New) The computer-implemented method of claim 40, further comprising:
analyzing the received image data to extract facial and appearance features associated with the requestor.
42. 	(Proposed New) The computer-implemented method of claim 41, wherein retrieving, based on the selection, a session key associated with the first user includes:
retrieving the session key based on the extracted facial and appearance features.
43. 	(Proposed New) The computer-implemented method of claim 40, wherein detecting, based on the image data, that the requestor is the first user includes:
comparing the received image data of the requestor to stored image data of the first user.
44. 	(Proposed New) The computer-implemented method of claim 40, wherein the session key was generated based on previous image data associated with the first user, and wherein the session key is a hash.
Allowable Subject Matter
Claims 21, 24-31 and 34-44 are allowed over prior art of record.
The following is an examiner’s statement of reasons for allowance:
Examiner’s search did not yield any specific references that reasonably, either alone or in combination, would result in a proper rejection of all the claimed features presented in each of the independent claims 21, 31 and 40 under 35 U.S.C 102 or 35 U.S.C.103 with proper motivation.
Thus, independent claims 21, 31 and 40 are allowed and the corresponding dependent claims depend upon one of the above-mentioned allowed claims are therefore allowed by virtue of their dependencies.
The closest relevant prior art made of record are:
a)	Fernandez-Spadaro et al. (US 2021/0281572 A1) discloses a system and a method of determining persistent presence of an authorized user while performing allowed operations on an allowed resource of the system while satisfying certain context-sensitive restrictions are disclosed. The system receives a request from a user to authenticate him/her. The system authenticates the user using biometric information of the user or any other authentication mechanism in a given context-sensitive restriction. If the user is authenticated, then the system allows the user to perform the allowed operation using the allowed resources in the context-sensitive restriction. If the authentication fails indicating that the user is an unauthorized user, then the system initiates a resolution process to halt or terminate the allowed operation to restrict or obfuscate the allowed operation from being accessed by the unauthorized user. In one embodiment, the system comprises an External Companion Device (ECD) paired with the system to perform the authentication and manage the allowed.
b)	Magi et al. (US 2020/0134151 A1) in Para. [0137-0138] discloses an example training manager 300 that trains the image data analyzer 230 of the example authentication analyzer 128 of FIG. 2 to recognize features (e.g., facial features, hair color) of the one or more authorized users in image data using machine learning and training image data 306 of the authorized user(s). The training image data 306 can be stored in the database 307. The training image data 306 includes images of authorized user(s). For instance, the training image data 306 can include images of an authorized user’s face from different angles and/or in different lighting. The example training manager 300 of FIG. 3 includes a trainer 308 and a machine learning engine 310. The trainer 308 trains the machine learning engine 310 using the training image data 306 using, for example, supervised learning to generate models for analysis of image data. Such as, the generated machine learning models are used by the analyzer 128 to perform authentication of a user attempting to access the user device 102. The image analyzer may further detect whether the user in the image data has walked away from the device 102 after initially being within the range of the user presence detection sensor(s).
c)	Parsons, Jr. et al. (US 6,349,337 B1) discloses that when user 1 completes a task, the user freezes the created session 1 without logging off or otherwise terminating the session. Another user is then free to use the terminal 24(4). Suppose user 2 logs onto the server. The session manager 90 creates a second session 2 for the second user 2 […]. This process continues for the N users. Now, when the terminal is again free to use, user 1 may wish to return to the existing session 1 […]. After authentication, the operating system re-associates the user with the existing Session 1.
d)	SUN, Yi-zhen (CN 112565270 B) discloses that the invention claims an HTTP session abnormality detection method, comprising recognition the HTTP traffic; extracting the feature of each HTTP user session; performing vectorization processing to the session characteristic corresponding to each HTTP session to obtain a feature vector; clustering and marking the session set by using the clustering algorithm and judging to obtain the abnormal session. The invention solves the large problem existing in the existing technology, and has high reliability, good practicability and high accuracy.
e)	Jae Woo Yoon (US 8,351,599 B2) discloses a cryptographic device for fast session switching, and more particularly, a cryptographic device using a block cipher algorithm and capable of rapidly performing session switching. The cryptographic device includes: a block cipher algorithm executer for performing encryption or decryption on input data using an initialization vector and a round key corresponding to a current session; an initialization vector manager for storing an initialization vector input from outside of the cryptographic device and an initialization vector received from the block cipher algorithm executer, and providing the initialization vector corresponding to the current session to the block cipher algorithm executer; and a session round key generator for storing a session key input from outside of the cryptographic device, generating the round key based on a session key corresponding to the current session, and providing the round key to the block cipher algorithm executer. The device has a structure capable of performing minimum operation to store and manage an initialization vector and a session key, and thus can minimize delay time caused by session switching.
However, none of the closest cited prior art as mentioned above teaches or suggests, either taken alone or in combination, neither anticipates nor renders obvious, all of the claimed features presented in each of the amended independent claims 21, 31 and 40. Such as,
with regards to independent claims 21 and 31, the subject matter “in response to receiving a selection of the option to activate the encrypted user session from a requestor, receiving from at least one camera an image data of the requestor at the public access user computing device; retrieving, from a database, one or more index-difference vectors linked with the session key; decrypting the user session associated with the first user based on calculating the user session from the retrieved one or more index-difference vectors;” as claimed in the amended independent claims is not reasonably disclosed by the closest cited prior art of record. Furthermore, the closest cited prior art would not result in a proper rejection under 35 U.S.C 102 or 35 U.S.C.103 with a proper motivation. For these reasons, claim limitations as recited in the amended independent claims 21 and 31 along with other features taken as a whole are allowable over the cited prior arts.
with regards to independent claim 40, the subject matter “retrieving a session key associated with the first user based on the selection of the option to activate the encrypted user session from the first user at the public access user computing device; retrieving, from a database, one or more index-difference vectors linked with the session key; decrypting the user session associated with the first user based on calculating the user session from the retrieved one or more index-difference vectors;” as claimed in the amended independent claim is not reasonably disclosed by the closest cited prior art of record. Furthermore, the closest cited prior art would not result in a proper rejection under 35 U.S.C 102 or 35 U.S.C.103 with a proper motivation. For these reasons, claim limitations as recited in the amended independent claim 40 along with other features taken as a whole are allowable over the cited prior arts.
Thus, independent claims 21, 31 and 40 along with their dependent claims are allowed for the reasons mentioned above.
Any comments considered necessary by applicant must be submitted no later than the payment of the issue fee and, to avoid processing delays, should preferably accompany the issue fee. Such submissions should be clearly labeled Comments on Statement of Reasons for Allowance. In event of any post-allowance papers (e.g., IDS, 312 amendments, petition, etc.), Applicant is exhorted to mail papers to the Production Control branch in Publications or faxed to post-allowance papers correspondence branch at (703) 308-5864 to expedite issuing process or call PUB's Customer Service if any questions at (703) 305-8497.
Conclusion



CITED REFERENCE SUMMARIES: Ref US20210281572A1: Claims:
A computing device or server for authorizing a set of authorized operations on allowable associated circuits in associated electronic devices, comprising: circuitry, computer processors, and computer processor instructions, executable computer operation instructions and data, and password and/or biometric persistent user authentication algorithms; wherein said server system provides a set of authorized operations further comprising a set of operating system level functions on an associated electronic device and on an identified application on said associated electronic device, wherein said set of authorization operations occur on circuitry, said circuitry comprising circuitry and executable instructions for authorizing a specified user input through one or more potentially heterogeneous electronic devices having potentially different computational capabilities; a plurality of sensors distributed among said electronic devices; an accessibility/authorization protocol for providing rules for authentication and validation of said plurality of electronic devices, user interfaces, executable instructions and data, resources and contacts; firmware for executing instructions and processing data for authenticating a plurality of user inputs having a plurality of authentication elements; wherein said set of authorization operations comprise instructions and data for use of a hierarchy of layers, said hierarchy of layers comprising a user authentication layer operating on said associated electronic device; a validation layer for validating an intended operation from a set of authorized operations; a contextual layer or allowing said set of authorized operations only under a set of specified contexts, including geo-location, date and time contexts; an allowable resource layer for allowing said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media; a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
circuitry, computer processors, and computer processor instructions, executable computer operation instructions and data, and password and/or biometric persistent user authentication algorithms;
wherein said server system provides a set of authorized operations further comprising a set of operating system level functions on an associated electronic device and on an identified application on said associated electronic device,
wherein said set of authorization operations occur on circuitry, said circuitry comprising circuitry and executable instructions for authorizing a specified user input through one or more potentially heterogeneous electronic devices having potentially different computational capabilities; a plurality of sensors distributed among said electronic devices; an accessibility/authorization protocol for providing rules for authentication and validation of said plurality of electronic devices, user interfaces, executable instructions and data, resources and contacts; firmware for executing instructions and processing data for authenticating a plurality of user inputs having a plurality of authentication elements;
circuitry and executable instructions for authorizing a specified user input through one or more potentially heterogeneous electronic devices having potentially different computational capabilities;
a plurality of sensors distributed among said electronic devices;
an accessibility/authorization protocol for providing rules for authentication and validation of said plurality of electronic devices, user interfaces, executable instructions and data, resources and contacts;
firmware for executing instructions and processing data for authenticating a plurality of user inputs having a plurality of authentication elements;
wherein said set of authorization operations comprise instructions and data for use of a hierarchy of layers, said hierarchy of layers comprising a user authentication layer operating on said associated electronic device; a validation layer for validating an intended operation from a set of authorized operations; a contextual layer or allowing said set of authorized operations only under a set of specified contexts, including geo-location, date and time contexts; an allowable resource layer for allowing said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media; a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
a user authentication layer operating on said associated electronic device;
a validation layer for validating an intended operation from a set of authorized operations;
a contextual layer or allowing said set of authorized operations only under a set of specified contexts, including geo-location, date and time contexts;
an allowable resource layer for allowing said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media;
a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
The server of claim 1 , further comprising authentication elements grouped for multi-factor (primary, secondary, tertiary or more) simultaneous or near simultaneous authentication and/or authorization, said authentication elements comprising multi-step (initiation and persistent) authentication and/or authorization process for creating a sequence of methods according to a group of predefined settings that may depend on availability and status of devices, sensors and environmental conditions.
The server of claim 1 , further comprising authentication elements for performing said authentication operation in a remote device with authentication relayed via secure encrypted means, and further whereby said authentication operation is performed in an external device is passive, comprising a beacon or RFID tag, for interacting with one or more of the devices for authentication and/or context validation.
The server of claim 1 , further comprising authentication elements including, but are not limited to one or a combination of passcodes, facial or hand gestures, device gesture, signature, biometrics, from the group comprising voice, fingerprint, facial recognition, and retinal scan.
The server of claim 1 , further comprising authentication elements according to a set of predefined user preferences for providing user or user group authorizations.
The server of claim 5 , further comprising authentication elements for granting access to or deny access to using the computing device(s) (e.g., a phone, a tablet, a desktop computer, a router, a control panel, a Programmable Logic Controller, etc.).
The server of claim 5 , further comprising authentication elements for granting access to or deny access to perform an operation (e.g., launch an application, delete a file, print an image, edit a document, take a photograph, change volume, use microphone, access GPS, etc.).
The server of claim 5 , further comprising authentication elements for granting the ability or deny ability for executing specific action within an application (e.g., read a message).
The server of claim 5 , further comprising authentication elements for granting the ability or deny ability for performing a specific action within an application on allowed resources (e.g., read Mary Jones messages).
The server of claim 5 , further comprising authentication elements for granting the ability or deny ability for performing a specific action within an application on allowed resources based on certain allowed context (e.g., write emails @office, @work_days+@work_hours)
The server of claim 5 , further comprising authentication elements for predefining whether one or multiple of the multitude of authentication(s) is to be a one-time authentication or a persistent authentication, said one-time or persistent authentication(s) combinable by having one or a multitude of one-time or persistent authentications, and useable in a multitude of operations and resources where authentication is required (e.g. launching an app, reading a message, and other examples of authorizations herein disclosed.).
The server of claim 1 , further comprising persistent authentication further comprising one or a combination of passcodes, facial or hand gestures, device gesture, signature, biometrics from the group consisting of voice, fingerprint, facial recognition, and retinal scan), wherein said authentication is performed in the device and a plurality of persistent authentications formed to be continuous with any user predefined protocol rules to how often the authentication is verified, and further comprising user instructions for providing authority and ability to temporarily suspend persistent authentication or override the frequency (time period) of authentication verification if they have all of the required authentication (user, operation, resource and context).
A method for authorizing a set of authorized operations on allowable associated circuits in associated electronic devices, comprising: providing circuitry, computer processors, and computer processor instructions, executable computer operation instructions and data, and password and/or biometric persistent user authentication algorithms; providing using said server system a set of authorized operations further comprising a set of operating system level functions on an associated electronic device and on an identified application on said associated electronic device, operating said set of authorization operations to occur on circuitry, said circuitry comprising circuitry and executable instructions for authorizing a specified user input through one or more potentially heterogeneous electronic devices having potentially different computational capabilities; a plurality of sensors distributed among said electronic devices; an accessibility/authorization protocol for providing rules for authentication and validation of said plurality of electronic devices, user interfaces, executable instructions and data, resources and contacts; firmware for executing instructions and processing data for authenticating a plurality of user inputs having a plurality of authentication elements; performing said set of authorization operations comprise instructions and data for use of a hierarchy of layers, said hierarchy of layers comprising a user authentication layer operating on said associated electronic device; a validation layer for validating an intended operation from a set of authorized operations; a contextual layer or allowing said set of authorized operations only under a set of specified contexts, including geo-location, date and time contexts; allowing, said an allowable resource layer, said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media; and using a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
providing circuitry, computer processors, and computer processor instructions, executable computer operation instructions and data, and password and/or biometric persistent user authentication algorithms;
providing using said server system a set of authorized operations further comprising a set of operating system level functions on an associated electronic device and on an identified application on said associated electronic device,
operating said set of authorization operations to occur on circuitry, said circuitry comprising circuitry and executable instructions for authorizing a specified user input through one or more potentially heterogeneous electronic devices having potentially different computational capabilities; a plurality of sensors distributed among said electronic devices; an accessibility/authorization protocol for providing rules for authentication and validation of said plurality of electronic devices, user interfaces, executable instructions and data, resources and contacts; firmware for executing instructions and processing data for authenticating a plurality of user inputs having a plurality of authentication elements;
performing said set of authorization operations comprise instructions and data for use of a hierarchy of layers, said hierarchy of layers comprising a user authentication layer operating on said associated electronic device; a validation layer for validating an intended operation from a set of authorized operations; a contextual layer or allowing said set of authorized operations only under a set of specified contexts, including geo-location, date and time contexts; allowing, said an allowable resource layer, said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media; and using a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
allowing, said an allowable resource layer, said set of authorized operations according to allowable resources from a set comprising data, information, messages, audio data, image data, files and media; and
using a resolution layer for executing a plurality of resolution operations when an authentication operation fails according to a predetermined hierarchy of actions, said hierarchy actions depending upon the state of said server and said associated electronic device.
The method of claim 13 , further comprising grouping said authentication elements for multi-factor (primary, secondary, tertiary or more) simultaneous or near simultaneous authentication and/or authorization, said authentication elements comprising multi-step (initiation and persistent) authentication and/or authorization process for creating a sequence of methods according to a group of predefined settings that may depend on availability and status of devices, sensors and environmental conditions.
The method of claim 13 , further performing said authentication operation in a remote device with authentication relayed via secure encrypted means, and further whereby said authentication operation is performed in an external device is passive, comprising a beacon or RFID tag, for interacting with one or more of the devices for authentication and/or context validation.
The method of claim 13 , further providing said set of authentication elements to include, but not be limited to one or a combination of passcodes, facial or hand gestures, device gesture, signature, biometrics, from the group comprising voice, fingerprint, facial recognition, and retinal scan.
The method of claim 13 , further providing said authentication elements according to a set of predefined user preferences for providing user or user group authorizations.
The method of claim 17 , further providing said authentication elements for granting access to or deny access to using the computing device(s) (e.g., a phone, a tablet, a desktop computer, a router, a control panel, a Programmable Logic Controller, etc.).
The method of claim 17 , further comprising the steps of granting access to or deny access to perform an operation (e.g., launch an application, delete a file, print an image, edit a document, take a photograph, change volume, use microphone, access GPS, etc.).
The method of claim 17 , further comprising the step of granting the ability or deny ability for executing specific action within an application (e.g., read a message).
The method of claim 17 , further comprising the step of granting the ability or deny ability for performing a specific action within an application on allowed resources (e.g., read Mary Jones messages).
The method of claim 17 , further comprising the step of granting the ability or deny ability for performing a specific action within an application on allowed resources based on certain allowed context (e.g., write emails @office, @work_days+@work_hours)
The method of claim 17 , further comprising the step of predefining whether one or multiple of the multitude of authentication(s) is to be a one-time authentication or a persistent authentication, said one-time or persistent authentication(s) combinable by having one or a multitude of one-time or persistent authentications, and useable in a multitude of operations and resources where authentication is required (e.g. launching an app, reading a message, and other examples of authorizations herein disclosed.).
The method of claim 13 , further comprising the step of providing persistent authentication further comprising one or a combination of passcodes, facial or hand gestures, device gesture, signature, biometrics from the group consisting of voice, fingerprint, facial recognition, and retinal scan, wherein said authentication is performed in the device and a plurality of persistent authentications formed to be continuous with any user predefined protocol rules to how often the authentication is verified, and further comprising user instructions for providing authority and ability to temporarily suspend persistent authentication or override the frequency (time period) of authentication verification if they have all of the required authentication (user, operation, resource and context).
Ref US6349337B1: Claims:
In a distributed computer system, a computer-implemented method comprising:
maintaining a session at a first computing device for a user who connects to the first computing device via a second computing device, the session conforming to a system configuration of the second computing device;
subsequently establishing a connection for the user who connects to the first computing device via a third computing device, the third computing device having a system configuration that is different than the second computing device;
recognizing the user as being associated with the session;
adapting the session to conform to the system configuration of the third computing device; and
reassociating the connection with the session.
A computer-implemented method as recited in claim 1 , wherein the second and third computing devices have different display types, and the adapting comprises reconfiguring the session to conform to the display type on the third computing device.
A computer-implemented method as recited in claim 1 , wherein:
the system configuration of the second and third computing devices include parameters selected from a group of parameters comprising display type, keyboard type, network protocol type, peripheral types, human language, and memory drives; and
the adapting comprises changing the session to conform to at least one of the parameters on the third computing device.
An operating system embodied on a computer-readable medium having computer-executable instructions for performing the computer-implemented method as recited in claim 1 .
A computer programmed to perform the computer-implemented method as recited in claim 1 .
creating a connection with a first computing device, which is being operated by a user;
assigning a first pro
[Truncated to input limit]