Patent Description:
<CIT> discloses a system and method for authenticating a user and creating and applying a user profile, which may include authenticating an administrator via an administrator identification. A user identification, distinct from the administrator identification may be received, as well as a set of selected features associated with the user. A profile may be created and may include the user identification and the set of selected features. The profile may be applied in response to authenticating a user based on the user identification.

<CIT> discloses a multistage vehicle security system that includes a transceiver that receives a first signal sent from a transponder and a controller that processes the first signal. The controller activates low level operational features of the vehicle if the signal is associated with an authorized transponder. The system also includes an entry sensor that detects the physical presence of a user. The transponder sends a second signal to the transceiver when the presence of the user is detected. The controller processes the second signal and activates midlevel operational features of the vehicle if the second signal is associated with the authorized transponder. Once the user is inside the vehicle, a sensor detects a biometric characteristic of the user. The user obtains access to one or more high level operational features of the vehicle if the detected biometric characteristic matches that of an authorized user.

<CIT> discloses a vehicle driver identification device that identifies a vehicle driver. A signal generation device generates a signal specific to the vehicle driver identified with the vehicle driver identification device. The disclosure further provides for a transmitter usable to emit the signal specific to the vehicle driver. The vehicle driver can be identified by use of an electronic vehicle key at the vehicle driver identification device. Alternatively or additionally, the driver may also be identified based on a biometric sensor which senses a fingerprint, a face and/or an iris structure. As a result of the inclusion of the identification device, it becomes difficult for third parties to be identified as a different vehicle driver in the motor vehicle without permission.

In one aspect of the present disclosure, an authentication system for a vehicle is disclosed. The authentication system comprises a first scanning apparatus, a second scanning apparatus, and a controller. The first scanning apparatus is configured to capture first scanning data. The first scanning apparatus is accessible from an exterior of the vehicle. The second scanning apparatus is configured to capture second scanning data. The second scanning apparatus is accessible from an interior of the vehicle. The controller is in communication with the scanning apparatuses.

The controller is configured to receive a request for vehicle entry and capture the first scanning data with the first scanning apparatus in response to the request for vehicle entry and grant access to a passenger cabin of the vehicle based on the first scanning data indicating an authorized occupant. The controller is also configured to capture the second scanning data with the second scanning apparatus and activate a privilege level for an identification profile of the authorized occupant based on the second scanning data. The privilege level defines a level control of one or more systems of the vehicle.

In another aspect of the present disclosure, a method for authorizing a use of a vehicle is disclosed. The method comprises receiving a request entry of the vehicle and capturing a first scanning data in response to the request. The method further comprises processing the first scanning data in the first comparison to a first authentication data and granting access to a passenger cabin based on the comparison indicating an authorized occupant. The method further comprises capturing a second scanning data in response to the access to the passenger cabin and processing a second comparison of the second scanning data to the second authentication data. The method may continue by controlling a privilege level for the identification profile of the authorized occupant based on the second scanning data and activating one or more systems of the vehicle for use in response to the privilege level.

In yet another aspect of the present disclosure, an authentication system for a vehicle is disclosed. The system comprises a communication circuit configured to communicate with a remote server. The system further comprises a first scanning apparatus, a second scanning apparatus, and a controller in communication with the communication circuit and the scanning apparatuses. The first scanning apparatus is configured to capture first scanning data and is accessible from an exterior of the vehicle. The second scanning apparatus is configured to capture second scanning data and is accessible from an interior of the vehicle.

The controller is configured to process a first scanning data in response to a request for vehicle entry, access a first authentication data via the remote server, and grant access to a passenger cabin of the vehicle based on the first scanning data indicating an authorized occupant. The controller is further configured to capture the second scanning data with the second scanning apparatus, access a second authentication data via the remote server, and activate a privilege level for the identification profile based on the second scanning data. The privilege level defines a level control of one or more systems of the vehicle.

These and other features, advantages, and objects of the present device will be further understood and appreciated by those skilled in the art upon studying the following specification, claims, and appended drawings.

For purposes of description herein the terms "upper," "lower," "right," "left," "rear," "front," "vertical," "horizontal," and derivatives thereof shall relate to the device as oriented in <FIG>. However, it is to be understood that the device may assume various alternative orientations and step sequences, except where expressly specified to the contrary. It is also to be understood that the specific devices and processes illustrated in the attached drawings, and described in the following specification, are simply exemplary embodiments of the inventive concepts defined in the appended claims.

In various embodiments, the disclosure provides for an authentication system for a vehicle. The authentication system may be configured to capture identifying information for an occupant in order to authorize specific vehicle functions or operations. For example, in some embodiments, the disclosure may provide for a scanning apparatus configured to detect one or more identifying characteristics of an occupant or potential occupant attempting to enter the vehicle. The scanning apparatus may be incorporated in one or more vehicle systems as further provided in the following detailed description.

Referring to <FIG>, a projected view of a vehicle <NUM> comprising an authentication system <NUM> is shown. The vehicle <NUM> may correspond to a conventional passenger vehicle, an autonomous vehicle, or a wide variety of automotive vehicles. The authentication system <NUM> may comprise a scanning apparatus <NUM> incorporated on an exterior portion <NUM> and/or disposed within an interior cabin <NUM> of the vehicle <NUM>. Accordingly, the scanning apparatus <NUM> may be flexibly configured to provide for a collection or capture of scanning data or biometric data to support an identity authentication for the authentication system <NUM>. In some embodiments, the authentication system <NUM> may be in communication with a vehicle control system <NUM>, which may be configured to control a variety of systems and subsystems of the vehicle <NUM> (e.g. an engine control unit, a navigation system, a vehicle guidance system, a cabin control module, etc.).

The scanning apparatus <NUM> may correspond to a biometric scanner configured to capture biometric data or scanning data of an occupant <NUM> or a potential occupant of the vehicle <NUM>. For example, the scanning apparatus <NUM> may correspond to an iris imager or scanner, fingerprint scanner, face imager or scanner, voice scanner/recorder, or various other scanning devices. The scanning data captured by and/or associated with the scanning apparatus <NUM> may be saved in a local memory or remote cloud server that may be accessible via a wireless communication interface. In this way, the authentication system <NUM> may access the local memory or a remote server to search and match scanning data or biometric data to an identification profile to identify the occupant <NUM>. For clarity, a passenger, rider, and operator of the vehicle <NUM> will all be referred to as the occupant <NUM> of the vehicle <NUM>.

As discussed herein, the terms identification and authentication may generally refer to an analysis completed by the authentication system <NUM> configured to identify the occupant <NUM> or a potential occupant of the vehicle <NUM>. The disclosure provides for various embodiments configured to provide at least one authentication routine configured to securely indicate an identity of the occupant <NUM>. Accordingly, the authentication may provide for an identification of an authenticated or registered occupant and grant access and/or privileges to modify or control various features of the vehicle <NUM>. In some embodiments, the system <NUM> may similarly be configured to access an identification profile configured to provide for the authentication of the occupant <NUM>.

Based on the identification profile, the authentication system <NUM> may access and/or update a variety of preferences and/or operational parameters of the vehicle <NUM>. For example, the authentication system <NUM> may be configured to authenticate the occupant <NUM> and communicate the authentication to the vehicle control system <NUM>. In response to the authentication of the occupant <NUM>, the authentication system <NUM> may be configured to receive or identify a plurality of occupant parameters associated with the occupant <NUM> and the identification profile. The occupant parameters may include, but are not limited to, one or more of the following settings or preferences: a seat position, preset configurations (e.g. radio stations, media channels, light/display settings), themes, colors, control preferences, and various additional configurable attributes of the vehicle <NUM>. The occupant parameters may also include information identifying a payment account, an authorization to apply a charge to the payment account, and a predetermined spending limit indicated for the payment account.

For example, in an exemplary embodiment, radio station presets may be changed or set according to the profile of the occupant <NUM>. The occupant <NUM> may then access and update the radio station presets on a media interface <NUM> or any suitable display or user interface. Additionally, navigation and/or map display settings of a navigation system may be updated or configured according to a profile comprising occupant parameters for the occupant <NUM>. In such implementations, the profile may load a variety of preestablished navigation or display preferences, commonly visited locations, preferred travel routes, etc., in response to the authentication of the identity of the occupant <NUM>. As further discussed herein, the identification profile, control preferences, and administrative privileges designated for the occupant <NUM> may be stored locally and/or accessed on a remote server.

In some embodiments, the authentication system <NUM> may be configured to access and control various home automation services based on the identification profile of the occupant <NUM>. For example, the authentication system <NUM> may correspond to or be in communication with a trainable wireless accessory configured to control a remote electronic system or device. In this way, the authentication system <NUM> may be operable to access encoding and/or security information from or associated with the identification profile of the occupant <NUM>. In this way, the authentication system <NUM> may access and load programming instructions for a trainable wireless accessory to control a variety of remote devices based on the authentication of the occupant <NUM>. Remote devices may include, but are not limited to, motorized barriers, locks, lights, and a variety of so-called "smart-home" devices. In an exemplary embodiment, the security accessory may correspond to a Homelink® trainable transceiver and may be constructed according to one or more embodiments disclosed in<CIT>; <CIT> or<CIT>.

In some embodiments, the vehicle <NUM> may correspond to an autonomous vehicle and/or ride-share vehicle. The vehicle <NUM> may comprise one or more sensors (e.g. cameras, ultrasonic devices, capacitive sensors, etc.) some of which may be utilized as scanning apparatuses <NUM> as discussed herein. In such applications, the authentication of the occupant <NUM> may be advantageous to provide access and/or control a level of operation or administration of one or more operational controls of the vehicle <NUM>. In an exemplary embodiment, the authentication system <NUM> may be configured to capture first scanning data with a first scanning apparatus 14a. The first scanning apparatus 14a may be located on an exterior portion <NUM> outside the vehicle <NUM> or may be portable as exemplified by a mobile device <NUM>. In this way, the first scanning apparatus 14a may capture the first scanning data such that the authentication system <NUM> may provide for a first authentication to authorize entry into the vehicle <NUM> and/or load a custom profile including occupant parameters for the occupant <NUM>.

In various embodiments, the mobile device <NUM> may be utilized to scan or capture scanning data or biometric data as discussed herein. The mobile device <NUM> may correspond to a portable computer, smartphone, personal data assistant (PDA), cellular telephone, or a variety of electronic devices. In such embodiments, the mobile device <NUM> may be configured to serve as a scanning apparatus <NUM>. In this way, the authentication system <NUM> may provide for authentication from a variety of devices, which may be incorporated with the vehicle <NUM> and/or in communication with the vehicle <NUM>. Further detailed discussion of the mobile device <NUM> is provided in reference to <FIG>.

In embodiments utilized by a variety of operators or passengers (e.g. a ride share, taxi, autonomous vehicle, etc.), it may not be viable to maintain authentication data for all potential users. Accordingly, the authentication system <NUM> and the mobile device <NUM> may be in communication with a remote server. The remote server may be configured to store identification profiles, operational privileges and/or administrative privileges, or any other information related to the operation of the vehicle <NUM> and/or the authentication system <NUM>. Additionally, the remote server may be configured to process and scan biometric data or scanning data to communicate identifications, authentications, validations of authorization to the authentication system <NUM> and/or the mobile device <NUM>. Accordingly, the authentication system <NUM> and/or the mobile device <NUM> may access one or more identification or authentication databases remotely via communication circuits in communication with the remote server.

<FIG> demonstrates a passenger cabin <NUM> of the vehicle <NUM>. Referring now to <FIG> and <FIG>, in some embodiments, a second scanning apparatus 14b may be disposed within the passenger cabin <NUM> of the vehicle <NUM>. In some embodiments, a second scanning apparatus 14b may be in communication with the authentication system <NUM> and configured to capture second scanning data. The second scanning data may be processed by the authentication system <NUM> to identify a privilege level associated with the occupant <NUM> indicating a variety of authorized operational privileges and/or administrative privileges available to the occupant <NUM>. The second scanning apparatus 14b may be incorporated as a component in one or more of an interior rearview mirror 32a, an exterior rearview mirror 32b, a heads-up display 32c, an interior console 32d, a dash 32e, or other locations of the passenger cabin <NUM>. In this way, the authentication system <NUM> may provide various levels of security and operating privileges to ensure that the occupant <NUM> is authorized to access and utilize various features of the vehicle <NUM>. Accordingly, the disclosure may provide for a variety of solutions that may be applied to improve secure access and operation of the vehicle <NUM>.

In various embodiments, the authentication system <NUM> may be configured to utilize one or more communication circuits <NUM> to transmit or receive data from one or more remote servers or other devices. For example, in some embodiments, a controller of the authentication system <NUM> may be operable to send authentication data, biometric or scanning data, and various other forms of data to a remote server that may be configured to process the data to authenticate or identify an identification profile as discussed herein. Additionally, the controller may be operable to receive an authentication of the occupant <NUM>, an identification profile, operating parameters or operational privileges for the vehicle <NUM>, a software update or various information related to one or more systems from the remote server. Additionally, in some embodiments, the authentication system <NUM> may be in communication with the mobile device <NUM>, which may be utilized alone or in combination with the scanning apparatuses <NUM> to capture the biometric and/or scanning data.

The biometric and/or scanning data may correspond to various forms of data, which may be configured to capture one or more unique or identifying characteristics of the occupant <NUM>. The biometric data may correspond to image data, audio data, or various forms of sensory data. Such data may be utilized by the controller of the authentication system <NUM> and/or the remote server to process an iris recognition, fingerprint recognition, voice recognition, face recognition, gesture recognition or various forms of biometric processing that may be captured by the scanning apparatus(es) <NUM>. Accordingly, the authentication system <NUM> may be configured to authenticate an identity of the occupant <NUM> in a variety of ways to suit a desired application.

In implementations that utilize the one or more communication circuits <NUM> to communicate with the mobile device <NUM> and/or the remote server, the authentication system <NUM> may be in communication with a communication network operable to connect to a server, the internet, and/or a portal configured to securely communicate information. For example, the authentication system <NUM> and/or the mobile device <NUM> may comprise one or more communication circuits <NUM> configured to communicate with a private server (e.g. a security provider). Further details describing the authentication system <NUM>, the mobile device <NUM>, and the remote server are discussed in reference to <FIG>.

Referring now to <FIG>, an exemplary embodiment of the scanning apparatus <NUM>, 14a is shown. As discussed herein, the scanning apparatus <NUM>, 14a may be operable to perform an identification or authentication function. In an exemplary embodiment, the scanning apparatus <NUM> is shown incorporated in an interior rearview mirror assembly <NUM>. The mirror assembly <NUM> may correspond to an electro-optic assembly <NUM> having an electrochromic (EC) mirror element. The identification function may correspond to an eye-scan-identification function. In this configuration, the scanning apparatus <NUM> may provide for an interior rearview mirror assembly <NUM> configured to authenticate an identity of the occupant <NUM> based on an eye-scan identification function.

A scanning operation of the scanning apparatus <NUM> may be initiated by activating an icon representing an "eye," which may be displayed on a display screen <NUM>. The display of the icon may alert the occupant <NUM> to initiate an identification by positioning his or her face in a particular position. The eye-scan-identification function may utilize an infrared illumination emitted toward an eye of the occupant <NUM> from one or more emitters <NUM> to illuminate the eye for the identification. Such illumination may be optimized in conditions allowing for a high optical transmittance in the near infrared (NIR) range. In some embodiments, the disclosure may provide for an electrochromic (EC) stack of the electro-optic assembly <NUM> that may have a high light transmittance in the NIR range, for example wavelengths of light ranging from <NUM> to <NUM>. Additionally, in some implementations, the electro-optic assembly <NUM> may comprise a plurality of light sources configured to illuminate at least one iris of the occupant <NUM> of the vehicle <NUM>.

To provide for the eye-scan-identification function of the authentication system <NUM>, an image sensor <NUM> may be disposed proximate a rear surface of the electro-optic assembly <NUM>. The image sensor <NUM> may correspond to, for example, a digital charge-coupled device (CCD) or complementary metal-oxide-semiconductor (CMOS) active pixel sensor, although may not be limited to these exemplary devices. The image sensor <NUM> may be in communication with the at least one emitter <NUM>. The emitter <NUM> may correspond to a plurality of infrared emitter banks configured to output an emission <NUM> in the NIR range. Each of the infrared emitter banks may comprise a plurality of light emitting diodes, which may be grouped in a matrix or otherwise grouped and disposed behind a rear surface of the electro-optic device. In this configuration, the scanning apparatus <NUM> may be configured to illuminate the eyes of the occupant <NUM> such that the image sensor <NUM> may capture image data including details of the irises of the eyes.

The display <NUM> may be disposed in the mirror assembly <NUM> and may be operable to display the image data received from the image sensor <NUM> such that the occupant may view the image data. In this configuration, the occupant <NUM> may adjust a position of the eyes shown on the display <NUM> to position the eyes such that the scanning data or biometric data may include the necessary features required to identify the occupant. In an exemplary embodiment, the features required to identify the occupant <NUM> of the vehicle <NUM> may correspond to features of one or more of the eyes of the occupant <NUM> (e.g. the irises).

The display <NUM> may correspond to a partial or full display mirror configured to display an image data through at least a portion of the mirror assembly <NUM>. The display <NUM> may be constructed utilizing various technologies, for example LCD, LED, OLED, plasma, digital light processing (DLP) or other display technology. Examples of display assemblies that may be utilized with the disclosure may include <CIT> entitled "Rearview display mirror," <CIT> entitled "Vehicular rearview mirror assembly including integrated backlighting for a liquid crystal display (LCD)," <CIT> entitled "Multi-display mirror system and method for expanded view around a vehicle," and <CIT> entitled "Vehicle rearview mirror assembly including a high intensity display".

The scanning apparatus <NUM> may further comprise an indicator <NUM> in the mirror assembly <NUM>. The indicator <NUM> may be in communication with the controller and configured to output a signal to identify a state of the scanning apparatus <NUM> and/or a rearview camera. The indicator <NUM> may correspond to a light source that may be operable to flash and/or change colors to communicate a state of the scanning apparatus <NUM>. The indicator <NUM> may correspond to a light emitting diode (LED), and in an exemplary embodiment, the indicator <NUM> may correspond to a red, green, and blue (RGB) LED operable to identify the state of the scanning apparatus <NUM> by outputting one or more colored emissions of light.

The various components of the electro-optic assembly <NUM> and the scanning apparatus <NUM> may be contained within a housing <NUM> of the mirror assembly <NUM>. In this way, the various components discussed herein may be substantially hidden from a view of the occupant <NUM>. Accordingly, the disclosure may provide for various advanced functions from the electro-optic assembly <NUM> and the scanning apparatus <NUM> while maintaining an appearance of a conventional rearview mirror.

Referring to <FIG>, a method <NUM> for authenticating an identity of the occupant <NUM> of the vehicle <NUM> is shown. The method <NUM> may begin by initiating a vehicle access routine and/or security authorization in response to an entry requested by the occupant <NUM> (<NUM>). The request may comprise an input into the mobile device <NUM>, a detection of an input to a handle or input device of the vehicle <NUM> or a variety of control inputs. In response to the request, a controller of the authentication system <NUM> may activate a first scanning apparatus 14a to capture first scanning data (<NUM>). The first scanning apparatus 14a may be located on an exterior portion <NUM> outside the vehicle <NUM> or may be portable as exemplified by a mobile device <NUM>. In this way, the first scanning apparatus 14a may capture the first scanning data such that the authentication system <NUM> may provide for a first authentication to authorize entry into the vehicle <NUM> and/or load a custom profile including occupant parameters for the occupant <NUM>.

Upon receipt of the first scanning data, the controller may process the data and determine a first authentication for the occupant (<NUM>). The first authentication may correspond to voice recognition, face recognition, palm or fingerprint identification and/or a variety biometric scanning and authentication techniques as discussed herein. In an exemplary embodiment, the first scanning data may correspond to data that may be readily captured by one or more video, touch, or audio sensors during a variety of environmental conditions that may be associated with an operating environment of the vehicle <NUM>. In this way, the first authentication may provide for access to the occupant <NUM> based on a first level of security. The first level of security may be reduced in comparison to a second level of security as later described in favor of ensuring effective access into the vehicle <NUM> upon authentication.

An authentication may be considered successful if the controller of the authentication system <NUM> or the remote server identify that the occupant <NUM> is authorized to enter the vehicle <NUM>. The authorization for the occupant <NUM> may be identified by processing the first scanning data and matching identifying characteristics of the occupant <NUM> with an identification profile. If the identification profile includes user privileges to enter the vehicle <NUM>, the authentication system <NUM> may grant access to the occupant. If the first authentication is successful in step <NUM>, the authentication system <NUM> may communicate with the vehicle control system <NUM> to grant access to the passenger cabin <NUM> of the vehicle <NUM> (<NUM>). If the occupant is not identified as an authorized user in step <NUM>, the controller may return to step <NUM>. After a predetermined number of failed attempts (e.g. n failed attempts), the controller also may lock the authentication process and halt the method <NUM> and/or prevent entry to the vehicle <NUM> (<NUM>).

Once inside the vehicle <NUM>, the occupant <NUM> may further be prompted to submit to an additional authentication. Accordingly, the method <NUM> may continue to capture second scanning data with the second scanning apparatus 14b (<NUM>). The second scanning data may be processed by the authentication system <NUM> to identify a privilege level associated with the occupant <NUM> (<NUM>). If successful, the second authentication may access an identification profile for the occupant indicating a variety of authorized operational privileges and/or administrative privileges.

The second scanning data may be processed by the authentication system <NUM> at a second security level that may be higher than that applied to the first scan data. In this way, the authentication system <NUM> may be operable to identify a security authorization or privilege level associated with the occupant <NUM> indicating a variety of authorized operational privileges and/or administrative privileges. As previously discussed, the second scanning apparatus 14b may be incorporated as a component in one or more of an interior rearview mirror 32a, an exterior rearview mirror 32b, a heads-up display 32c, an interior console 32d, a dash 32e, or other locations of the passenger cabin <NUM>. In this way, the authentication system <NUM> may provide various levels of security and operating privileges to ensure that the occupant <NUM> is authorized to utilize various features and vehicle controls once the passenger cabin <NUM> is accessed.

If the second authentication is successful in step <NUM>, the authentication system <NUM> may activate the privilege level and associated features and vehicle controls authorized for the occupant (<NUM>). As discussed herein, the privileges and features activated for the vehicle <NUM> may include a variety of operating parameters and settings as well as operational or administrative privileges. If the occupant is not identified as an authorized user in step <NUM>, the controller may return to step <NUM>. After a predetermined number of failed attempts (e.g. n failed attempts), the controller also may lock the authentication process and halt the method <NUM> and/or prevent entry to the vehicle <NUM> (<NUM>).

Upon authorization in step <NUM>, the method <NUM> may continue to step <NUM>. In step <NUM>, the authentication system <NUM> may complete the authorization routine by granting access, loading settings, or otherwise controlling use of one or more systems of the vehicle <NUM> in conformance with the settings and privileges identified in the profile or account authenticated for occupant <NUM> (<NUM>). Accordingly, the method may provide for a tiered authentication process configured to first grant access to the vehicle at a first security level and then activate vehicle features, settings, and/or privileges and administrative controls at second security level.

The method <NUM> may be applied to set a wide variety of preference settings. For example, the authentication system <NUM> may be in communication with various vehicle systems configured to control one or more of the following settings or occupant parameter: a seat position, preset configurations (e.g. stations, light/display settings), themes, colors, control preferences, and various additional configurable attributes of the vehicle <NUM>. The systems configured to control these settings as well as others discussed herein may be in communication with the authentication system <NUM> via the vehicle control system <NUM>, which may be configured to control the systems via the vehicle bus as illustrated in <FIG>. In this way, the authentication system <NUM> may provide for the occupant parameters to be automatically activated, configured, and/or loaded in response to the profile or account authenticated for occupant <NUM>.

Additionally, the method <NUM> may be configured to control a privilege level identifying various features, controls, and/or functions of the vehicle <NUM>. For example, a privilege level may indicate whether the occupant <NUM> is authorized to modify or control various features of the vehicle <NUM>. Functions that may be controlled by the authentication system <NUM> may include, but are not limited to, a software update routine privilege, a vehicle operation privilege, an identification training routine privilege, a user preset control privilege, an operational speed control setting privilege, a geographic travel restriction privilege, and various other operational controls that may be associated with the vehicle <NUM>.

Referring now to <FIG>, a block diagram of the authentication system <NUM> is shown in communication with a remote server <NUM> or database in accordance with the disclosure. The authentication system <NUM> may incorporate or be in communication with various input devices, transducers, and/or sensors. Such devices may be commonly referred herein as scanning apparatuses <NUM> for clarity. The scanning apparatuses <NUM> may be configured to capture data and/or receive inputs from various vehicle systems and/or be configured to capture and communicate data with the authentication system <NUM>. The authentication system <NUM> may then authenticate and determine an identity of the occupant <NUM> or potential occupant of the vehicle <NUM> to control or access preference settings, operating parameters, and/or administrative or operational privileges for the vehicle <NUM>.

In an exemplary embodiment, the authentication system <NUM> may comprise the one or more communication circuits <NUM> that may be configured to communicate with the mobile device <NUM>, a remote server <NUM>, and/or any device connected via a compatible communication network <NUM> or interface. The communication network <NUM> may correspond to various forms of wireless communication, for example Bluetooth, Bluetooth Low-energy (BT-LE), Near Field Communication (NFC), and/or the like. Examples of standards related to NFC include ISO <NUM>-<NUM>, ISO <NUM>, and the like, and examples of standards related to BT-LE include IEEE <NUM>. <NUM>, and the like. Additionally, the communication network <NUM> may be configured to operate using one or more of a plurality of radio access technologies including one or more of the following: Long Term Evolution (LTE), wireless local area network (WLAN) technology, such as <NUM><NUM> WiFi, and the like, and other radio technologies as well.

In implementations that utilize the mobile device <NUM> as a scanning apparatus <NUM> in an authentication process, the mobile device <NUM> may be operable to connect to a server, the internet, and/or a portal configured to receive an authentication. For example, the mobile device <NUM> may comprise one or more communication circuits <NUM> similar to those discussed herein to communicate with the remote server <NUM> to process or perform one or more of the authentication task or routines based on an identification profile. In various embodiments, the identification profile may be stored on the mobile device <NUM> and/or the remote server <NUM>. In this configuration, the mobile device <NUM> may process or complete one or more of the authentication routines or methods discussed herein and communicate an authentication or identification profile to the authentication system <NUM> to identify the occupant <NUM>.

The remote server <NUM> may comprise one or more identification or authentication databases. The databases may be accessible remotely by the authentication system <NUM> and/or the mobile device <NUM> via the communication circuits <NUM>, <NUM> in communication with the remote server <NUM>. The databases stored on the remote server <NUM> may be configured to store identification profiles, operational privileges and/or administrative privileges, or any other information related to the operation of the vehicle <NUM> and/or the authentication system <NUM>. Additionally, the remote server <NUM> may be configured to process and scan biometric data or scanning data to communicate identifications, authentications, validations of authorization to the authentication system <NUM> and/or the mobile device <NUM>. Accordingly, the authentication system <NUM> and/or the mobile device <NUM> may access one or more identification or authentication databases remotely via communication circuits <NUM>, <NUM> in communication with the remote server <NUM>.

In some embodiments, the authentication system <NUM> may be configured to compare and/or process the data received from the scanning apparatuses <NUM> to authenticate or identify a security confidence corresponding to a percent likelihood that an identity of a party to a transaction is authentic. Based on the confidence determination, the authentication system <NUM> may require an additional authentication which may be completed utilizing a different scanning apparatus <NUM> or scanning technology. For example, if a voice recognition authentication returned a low authentication confidence, the authentication system <NUM> may request a secondary authentication with an iris scanning device (e.g. the scanning apparatus <NUM> of the mirror assembly <NUM>). In this way, the authentication system <NUM> may ensure a minimum confidence for the authentication.

The authentication system <NUM> may comprise a controller <NUM> configured to control various components and/or integrated circuits of the system <NUM>. The controller <NUM> may include various types of control circuitry, digital and/or analog, and may include a microprocessor, microcontroller, application-specific integrated circuit (ASIC), or other circuitry configured to perform various input/output, control, analysis, and other functions to be described herein. The controller <NUM> may be in communication with a memory <NUM> configured to store one or more routines as discussed herein. The memory <NUM> may comprise a variety of volatile and non-volatile memory formats.

The controller <NUM> may be coupled to an input device <NUM>, which may comprise one or more switches, but may, alternatively, include other user input devices, such as, switches, knobs, dials, alpha or numeric input devices, etc. Additionally, the authentication system <NUM> may comprise various data devices including, but not limited to, the input device <NUM>, one or more imagers <NUM>, a microphone <NUM>, and various other sensors or inputs that may be implemented in the vehicle <NUM>. Data received by each of the sensors or scanning apparatuses <NUM> may be processed by the controller <NUM> or the remote server <NUM> to identify or authenticate the occupant <NUM>.

As discussed herein, the authentication system <NUM> may be in communication with a variety of vehicle systems. For example, the authentication system <NUM> is shown in communication with the vehicle control system <NUM> via a communication bus <NUM>. Additionally, the controller <NUM> may be in communication with a plurality of vehicle systems via one or more input-output (I/O) circuits <NUM>. For example, the authentication system <NUM> may be in communication with a cabin control module <NUM> configured to adjust a seat position, comfort setting, and/or window setting corresponding to a control preference or setting of the occupant <NUM>.

Still referring to <FIG>, in some embodiments, the control system <NUM> may be in communication with one or more additional systems of the vehicle <NUM> via the I/O circuits <NUM>. The I/O circuits <NUM> may be in communication with various devices or vehicle accessories. For example, the I/O circuits <NUM> may be in communication with a navigation system <NUM>, one or more scanning apparatuses <NUM> and any other form of vehicle accessory or device incorporated in the vehicle <NUM>. The controller <NUM> may receive location data from a Global Positioning System (GPS) module incorporated in the navigation system <NUM>. Though described as a navigation system, the system may correspond to a radio, infotainment system, HMI, or a variety of guidance or entertainment systems that may be implemented in the vehicle <NUM>. Accordingly, the authentication system <NUM> may be operable to update various settings to customize various presets, themes, and settings that may be associated with various vehicle accessories as discussed herein.

It will be understood that any described processes or steps within described processes may be combined with other disclosed processes or steps to form structures within the scope of the present device. The exemplary structures and processes disclosed herein are for illustrative purposes and are not to be construed as limiting.

It is also to be understood that variations and modifications can be made on the aforementioned structures and methods without departing from the concepts of the present device, and further it is to be understood that such concepts are intended to be covered by the following claims unless these claims by their language expressly state otherwise.

Claim 1:
An authentication system (<NUM>) in communication with a vehicle control system (<NUM>), the authentication system (<NUM>) of a vehicle (<NUM>) and a first scanning apparatus (14a) configured to capture first scanning data, the first scanning apparatus (14a) accessible from an exterior of the vehicle, wherein the first scanning apparatus (14a) is a mobile device (<NUM>) in communication with a remote server (<NUM>) and the authentication system (<NUM>) via a wireless communication interface, the authentication system (<NUM>) comprising:
a second scanning apparatus (14b) configured to capture second scanning data, the second scanning apparatus (14b) accessible from within a passenger cabin (<NUM>) of the vehicle (<NUM>); and
a controller (<NUM>) in communication with the scanning apparatuses (14a, 14b), wherein the controller (<NUM>) is configured to:
receive a request for entry into the vehicle (<NUM>);
in response to the request, receive a first authentication of an occupant based on the first scanning data from the remote server (<NUM>);
grant access to the passenger cabin (<NUM>) of the vehicle (<NUM>) based on the first scanning data indicating an authorized occupant;
capture the second scanning data with the second scanning apparatus (14b) in response to the access to the passenger cabin and receive a second authentication of the occupant based on the second scanning data from the remote server (<NUM>);
compare the first scanning data and the second scanning data from the scanning apparatuses (14a, 14b) to identify a security confidence indicating a likelihood that an identity of the occupant is authentic;
based on the security confidence, determine whether additional authentication is required to ensure a minimum confidence; and
based on the second scanning data, activate a privilege level for an identification profile of the authorized occupant, wherein the privilege level defines a level control of one or more systems of the vehicle (<NUM>).