APPARATUSES AND METHODS FOR FACILITATING DYNAMIC BADGES AND IDENTITIES

Aspects of the subject disclosure may include, for example, authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. Other embodiments are disclosed.

FIELD OF THE DISCLOSURE

The instant disclosure pertains to apparatuses and methods for facilitating dynamic badges and identities.

BACKGROUND

The world changes every day, and humans often need to be able to adapt in response thereto. For example, humans may need to be able to change to suit the day; such a change may pertain to: appearances, roles, use of pronouns, use of names, or the ways humans present themselves. In some environments, proof of identity may be required even when that identity may change over time. For example, there may be a need to access materials (e.g., sensitive materials) and/or areas (e.g., secure areas) that are appropriate for a role one is working in over a given timeframe or period.

Physical badges are a common part of life in corporate environments (and increasingly frequently in schools as well). Conventionally, those badges are a fixed asset which only get updated every few years (such as, for example, to capture a more current picture or image of a person). And, even then, the information contained therein is typically very basic (e.g., name and picture) and quickly becomes stale/stagnant.

DETAILED DESCRIPTION

The subject disclosure describes, among other things, illustrative embodiments for supporting an update to a badge or an identity that is associated with a user, and conditionally granting access to information and resources. Other embodiments are described in the subject disclosure.

One or more aspects of the subject disclosure include, in whole or in part, authenticating a credential of a first user of a first device; based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device; based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge; and based on the obtaining of the selection, transferring an identification of the selected badge to the first device.

One or more aspects of the subject disclosure include, in whole or in part, obtaining a selection of a first identity from a plurality of identities associated with a first user; transmitting an indication of the selection to a network device; based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity; and processing the first data to display a code or a link associated with the first identity.

One or more aspects of the subject disclosure include, in whole or in part, scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system; detecting, by the first processing system and based on the scanning, the code or the link; transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system; obtaining, by the first processing system and based on the transmitting, the data; and presenting, by the first processing system and based on the obtaining, the data.

Referring now toFIG.1, a block diagram is shown illustrating an example, non-limiting embodiment of a system100in accordance with various aspects described herein. For example, system100can facilitate in whole or in part authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. System100can facilitate in whole or in part obtaining a selection of a first identity from a plurality of identities associated with a first user, transmitting an indication of the selection to a network device, based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity, and processing the first data to display a code or a link associated with the first identity. System100can facilitate in whole or in part scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system, detecting, by the first processing system and based on the scanning, the code or the link, transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system, obtaining, by the first processing system and based on the transmitting, the data, and presenting, by the first processing system and based on the obtaining, the data.

Referring now toFIG.2A, a block diagram illustrating an example, non-limiting embodiment of a device200ain accordance with various aspects described herein is shown. In some embodiments, the device200amay function within, or may be operatively overlaid upon, one or more portions of the system100ofFIG.1. The device200amay correspond to a communication device, such as a client device or user equipment. In some embodiments, the device200amay include a wireless communication device, such as a smartphone, a tablet, a laptop, or the like.

The device200amay include one or more components as would be appreciated by one of skill in the art. For example, the device200amay include a user interface, such as a display screen204a. The display screen204amay be used to present first information or outputs and/or more be used to receive second information or inputs. The display screen204amay be configured to facilitate an electronic-ink (or e-ink) capability.

The device200amay include a charging port208a. The charging port208amay facilitate charging a battery (not shown) included in the device200aand/or communicating with an external device or entity. In some embodiments, the charging port208amay adhere to one or more protocols or standards, such as for example Universal Serial Bus (USB) as maintained by the USB Implementers Forum (USB-IF).

The device200amay include a(n embedded) wireless communication chip212a. In some embodiments, the chip212amay be configured to support near-field communication (NFC) with another device or entity.

As shown inFIG.2B, a device200b(which may correspond to the device200aofFIG.2A) may display a quick response (QR) code that may include or reference information or data that is potentially of interest. While depicted as a QR code, in some embodiments a link (e.g., a Uniform Resource Locator [URL]) may be used in conjunction withFIG.2B.

The QR code, the link, or the like may be representative of information or data associated with a badge of a first user of the device200b. In particular, the information/data may be selectable by the first user, such that the first user can effectively change the contents of the badge in real-time or on-the-fly. To facilitate such a change, the first user may have an ability to select a specific block in a split leger (e.g., a Blockchain-based database structure), and the badge that is active on the device200bmay be updated (via, e.g., USB or NFC communications) in accordance with the selection. Stated differently, each block (or a set of blocks) of a plurality of blocks in the split ledger may be representative of one of a plurality of badges that the first user can choose from.

A second user (as represented by augmented reality or virtual/visual computing glasses214binFIG.2B) may be able to access at least some of the information/data associated with the selected badge of the first user. For example, and by way of a device as illustratively represented by the glasses214b, the second user may be able to “click” or select the QR code, the link, or the like presented by the device200b, which in turn may cause the device214bto read the information/data associated with the badge/block selected by the first user (or, analogously, the badge currently in-force on the device200b) and/or a first hash value. The second user's device214bmay determine a host of the split ledger to request the specific block's hash from a hash ledger of a trusted third-party—e.g., a company or other entity that issued the badge to the first user. The device214bmay compare a value returned from the hash ledger (based on the request) with the first hash value to validate the contents of the badge.

FIG.2Cdepicts a device200c, which may correspond to the device200bofFIG.2Bafter the validation of the contents of the badge described above, as observed via the device/glasses214b. For example, and as observed via the device214b, the second user may be presented with information/data associated with the first user as would customarily be found on a badge in a workplace environment. The information/data may include, without limitation, one or more of: a picture or image of the first user, a name (e.g., “Jane Doe”) or other identifier (e.g., employee ID) of the first user, a role (e.g., “Technician”) of the first user, an identification of a job or task (e.g., “repair or replace router at 123 Your Pl, Apt 4A”) that the first user is to perform, etc. Other types/kinds of information may be included in some embodiments. For example, biometric data of the first user (e.g., a fingerprint, a retinal scan, etc.) may be included, which may utilized for uniquely identifying the first user.

In some embodiments, to protect the first user from disclosing excess or unnecessary information to, e.g., the second user, a block address that is used for a badge may be a hash location, such that an attacker would not, as a practical matter, be able to find any particular block by chance. As yet another layer of security, a block that is requested by the second user (or, analogously, the device214b) may be associated with a key such that the second user can only get access to that block of the first user (and not other blocks that may be associated with the first user). In some embodiments, the second user may be required to register or login to a service administered by an issuer of a badge to obtain access to the information/data associated with that badge.

Aspects of the technology described herein may provide security in respect of the second user described above. For example, and in order to prove the identity of the first user holding the badge described above, there may be a handshake to append a new block to the passed ledger. The handshake may include data specified by the second user or second device, such as an identification of a start time of the task and/or a signature of the second user, for example. If the first user (or, analogously, a device (200a,200b,200c) of the first user) is able to retrieve or obtain any updates (including any values specified within the data) then the second user may know that the first user is able to successfully authenticate himself/herself/themselves to the issuer of the badge (e.g., a company associated with the badge) at the time that the badge is presented to the second user. In this manner, the second user may be able to more readily distinguish/differentiate authentic users/badges from copies of authentic users/valid badges.

Referring now toFIG.2D, an illustrative embodiment of a method200din accordance with various aspects described herein is shown. The method200dmay be implemented or executed, in whole or in part, in conjunction with one or more systems, devices, and/or components, such as for example the systems, devices, and components set forth herein. Various operations of the method200dare described below in relation to the blocks ofFIG.2D. In some embodiments, the blocks or operations may be embodied as instructions that may be stored by/in a memory, a computer-readable storage medium, or the like. The instructions may be executed by one or more processing systems to facilitate the operations; each processing system may include one or more processors.

In block204da first user may authenticate to a network via a first device. The authentication of block204dmay include the first user submitting a username and password, a personal identification number (PIN), a biometric credential (e.g., a fingerprint, a retinal scan), or the like. The network may be associated with an issuer of one or more badges. For example, and in an employment context/setting, the issuer may correspond to an employer of the first user.

Assuming that the first user successfully authenticates to the network, in block208dthe first user may be provided with an option to select a badge from a plurality of different badges. Block208dmay include a presentation of an interface (e.g., a menu-driven interface) from which the first user can select a particular badge from the plurality of badges.

In block212dan identification of the badge selected as part of block208dmay be transferred (e.g., transmitted) to the first device. The identification of block212dmay include sufficient information/data to enable the first device to present a code (e.g., a QR code), a link, or the like associated with the selected badge as part of block216d.

In block220d, a second device associated with a second user may scan or read the code, the link, or the like presented by the first device as part of block216d. Based on such scanning/reading, the second device may transmit a request (and a network device, such as a server, may obtain/receive the request) to access contents of the referenced/selected badge.

In block224d, and based on the request of block220d, the contents of the referenced/selected badge may be transferred (e.g., transmitted) to the second device. The transfer of the contents of the referenced/selected badge in block224dmay be conditioned on hash validation and/or security considerations as described above. The contents associated with the badge may be presented at/by the second device as part of block224d.

Referring now toFIG.2E, a device200eis shown. The device200emay correspond to one or more of the devices200a-200cofFIG.2A-2C, respectively. The device200emay display/present information associated with a baseline identity as described above. The device200emay display/present an overlay, such as a grid202e. The grid202emight not obscure the information associated with the identity that is presented; rather, the grid202emay only be observable/detectable to a smart device, such as the glasses214b(e.g., the grid202emay be unobservable to a human eye). The grid202emay be operated upon by the glasses214bto supplement the information that is presented in conjunction with the baseline identity. For example, the grid202emay enable a presentation of information to the second user that identifies how long the first user (going by the name “Jane Doe”) has been a Technician.

Aspects of this disclosure may be implemented as part of a distributed ledger. For example, aspects of, or information/data associated with, an identity or badge may be included as part of one or more blocks of a blockchain.

As set forth herein, aspects of this disclosure may be integrated as part of one or more practical applications. For example, aspects of this disclosure may be used to facilitate a presentation of an identity of a first person/user to a second person/user. The identity of the first person/user may be dynamic in nature, enabling the first person/user to transform a presentation of himself/herself/themselves with a given, selectable identity at any given point in time. Protections are provided for the second person/user in the form of security techniques, validation/verification measures, and the like. Aspects of this disclosure are adaptive to changing times and customs, with such adaptations occurring over real-time and in near-real-time time frames. In brief, aspects of this disclosure represent substantial improvements relative to conventional technologies/techniques.

Aspects of this disclosure may enable identities to change to suit a particular role or lifestyle in a given day. For example, and in relation to transitioning or gender-fluid persons, he/she/they may feel that he/she/they need to present outwardly differently from who he/she/they was/were the day he/she/their badge picture was initially taken. For many to be true to themselves, they may wish to have multiple badge picture/name pairs that each correspond to how they choose to present his/her/their authentic self to the world at a given time. In brief, aspects of this disclosure may enable a person to present as a male, female, or non-binary.

Still further, in a professional environment or setting, many personnel engage in a multitude of different tasks that may require a presentation of various different roles at different points in time. For example, a manager of a project may wish to look professional when in an office environment or setting (and thus, may wish for a badge to present a first picture in professional business attire—e.g., a suit and tie), but may wish to appear more blue-collar/workman-like when out in the field (and thus, may wish for a badge to present a second picture in working gear—e.g., a toolbelt and overalls). Aspects of this disclosure may facilitate an adaptation of user appearance or identity based on, e.g., location, time of day or day of week, presence amongst others, etc.

In some embodiments, a permissions-based approach may be used to selectively grant or deny access to one or more resources. To demonstrate, and continuing the above example of the manager potentially taking on a plurality of roles, when the manager is scheduled to be at the office on a first day the manager may be given access to a secured conference room and may be denied access to a secured tool room. Conversely, on a second day that the manager is scheduled to be out in the field, the manager may be given access to the secured tool room and may be denied access to the secured conference room. The permissions that are selectively granted/denied may be attached to the block associated with the badge in question.

Aspects of this disclosure may be tied to specifically or specially programmed machines or apparatuses to obtain the results set forth herein. As set forth above, aspects of this disclosure may enable a person to transform an identity presented in connection with a badge from a first identity to a second identity that is different from the first identity. Suffice it to say, aspects of this disclosure are not directed to abstract ideas. To the contrary, aspects of this disclosure are directed to, and encompass, significantly more than any abstract idea standing alone.

Referring now toFIG.3, a block diagram300is shown illustrating an example, non-limiting embodiment of a virtualized communication network in accordance with various aspects described herein. In particular a virtualized communication network is presented that can be used to implement some or all of the subsystems and functions of system100, the subsystems and functions of devices200a,200b,200c, and200e, and method200dpresented inFIGS.1and2A-2D. For example, virtualized communication network300can facilitate in whole or in part authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. Virtualized communication network300can facilitate in whole or in part obtaining a selection of a first identity from a plurality of identities associated with a first user, transmitting an indication of the selection to a network device, based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity, and processing the first data to display a code or a link associated with the first identity. Virtualized communication network300can facilitate in whole or in part scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system, detecting, by the first processing system and based on the scanning, the code or the link, transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system, obtaining, by the first processing system and based on the transmitting, the data, and presenting, by the first processing system and based on the obtaining, the data.

Turning now toFIG.4, there is illustrated a block diagram of a computing environment in accordance with various aspects described herein. In order to provide additional context for various embodiments of the embodiments described herein,FIG.4and the following discussion are intended to provide a brief, general description of a suitable computing environment400in which the various embodiments of the subject disclosure can be implemented. In particular, computing environment400can be used in the implementation of network elements150,152,154,156, access terminal112, base station or access point122, switching device132, media terminal142, and/or VNEs330,332,334, etc. Each of these devices can be implemented via computer-executable instructions that can run on one or more computers, and/or in combination with other program modules and/or as a combination of hardware and software. For example, computing environment400can facilitate in whole or in part authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. Computing environment400can facilitate in whole or in part obtaining a selection of a first identity from a plurality of identities associated with a first user, transmitting an indication of the selection to a network device, based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity, and processing the first data to display a code or a link associated with the first identity. Computing environment400can facilitate in whole or in part scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system, detecting, by the first processing system and based on the scanning, the code or the link, transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system, obtaining, by the first processing system and based on the transmitting, the data, and presenting, by the first processing system and based on the obtaining, the data.

Turning now toFIG.5, an embodiment500of a mobile network platform510is shown that is an example of network elements150,152,154,156, and/or VNEs330,332,334, etc. For example, platform510can facilitate in whole or in part authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. Platform510can facilitate in whole or in part obtaining a selection of a first identity from a plurality of identities associated with a first user, transmitting an indication of the selection to a network device, based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity, and processing the first data to display a code or a link associated with the first identity. Platform510can facilitate in whole or in part scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system, detecting, by the first processing system and based on the scanning, the code or the link, transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system, obtaining, by the first processing system and based on the transmitting, the data, and presenting, by the first processing system and based on the obtaining, the data.

Turning now toFIG.6, an illustrative embodiment of a communication device600is shown. The communication device600can serve as an illustrative embodiment of devices such as data terminals114, mobile devices124, vehicle126, display devices144or other client devices for communication via either communications network125. For example, computing device600can facilitate in whole or in part authenticating a credential of a first user of a first device, based on the authenticating, providing the first user with an option to select a badge from a plurality of badges via the first device, based on the providing of the option, obtaining a selection of a first badge included in the plurality of badges from the first device, resulting in a selected badge, and based on the obtaining of the selection, transferring an identification of the selected badge to the first device. Computing device600can facilitate in whole or in part obtaining a selection of a first identity from a plurality of identities associated with a first user, transmitting an indication of the selection to a network device, based on the transmitting of the indication of the selection, obtaining, from the network device, first data representative of the first identity, and processing the first data to display a code or a link associated with the first identity. Computing device600can facilitate in whole or in part scanning, by a first processing system including a first processor, for a code or a link presented by a second processing system, detecting, by the first processing system and based on the scanning, the code or the link, transmitting, by the first processing system and based on the detecting, a request for data associated with a badge of a user of the second processing system, obtaining, by the first processing system and based on the transmitting, the data, and presenting, by the first processing system and based on the obtaining, the data.