Patent ID: 12189731

DETAILED DESCRIPTION

A system, method, and computer readable medium are disclosed for authenticating users to a particular information handling system (i.e., device) through their biometric information, heartbeat pattern and heart rate. In certain implementations, the information handling system is accessed through a combination of a user's unique biometric information and regular or normalized heartbeat pattern and heart rate information.

Individuals can have a unique heartbeat pattern, as well as a range of normal heart rate. During instances when an individual is place in conditions of stress or danger, that heart rate can change and increase. In certain implementations, the normal heart rate, including a user's normalized heartbeat pattern are recorded and associated with a device or system. The recording can take place during an initial biometric service enrollment and referred to later during user authentication process. The implementation of the user's normalized heartbeat pattern and heart rate is used along with along with biometric information recognition.

During user authentication, if the user's heartbeat pattern and heart rate has abnormally deviated from the recorded normalized heartbeat pattern and heart rate range, the user is not granted access to the device. Various implementations of biometric recognition can be provided. For example, an implementation can be provided using a fingerprint reader. A fingerprint reader can be combined with a heart rate monitor. When a user presents his or her finger to the fingerprint reader, the user's heartbeat pattern and heart rate can also be detected and recorded. Implementations with ultrasound fingerprint technology can provide for a fingerprint and heart rate to be acquired with a single sensor.

Implementations can provide for an iris (retina) scan on a device, including augmented reality/virtual reality (AR/VR) devices. User facing cameras can be implemented on devices in order to perform an iris (retina) scan. Implementations can provide for heartbeat pattern and heart rate of the user to be concurrently recorded along with the iris (retina) scan.

Acquiring heartbeat pattern and heart rate of the user can be implemented using various methods, including a dedicated heart rate monitor on the device, a heart rate monitor attached to the device that is connected to the user (e.g., contact with user temple area), a user facing camera that monitors veins of a retina of the user, an infrared camera (IR) that monitors heat variation and heartbeat of the user, etc. When user biometric information is taken, user heartbeat pattern and heart rate can also be taken and considered when granting device access.

If the acquired heartbeat pattern and heart rate abnormally deviate from the recorded heartbeat pattern and heart rate, or if no heartbeat pattern or heart rate is acquired, access is not granted, even if biometric information is acquired and verified to match a user. In certain implementations, an alert can be provided to an administrator(s), security, etc., if multiple failed access attempts take place. Implementations can also provide for monitoring or occasionally polling/accessing a user's heartbeat pattern and heat rate, and possibly locking out a user if an abnormal increase or sudden decrease in heart rate is detected. An increase in heart rate can correlate to a stress or threat condition and a decrease in heart rate can correlate to non-use of the device or a serious medical condition occurring with the user.

For purposes of this disclosure, a device or an information handling system may include any instrumentality or aggregate of instrumentalities operable to compute, classify, process, transmit, receive, retrieve, originate, switch, store, display, manifest, detect, record, reproduce, handle, or utilize any form of information, intelligence, or data for business, scientific, control, or other purposes. For example, an information handling system may be a personal computer, a network storage device, or any other suitable device and may vary in size, shape, performance, functionality, and price. The information handling system may include random access memory (RAM), one or more processing resources such as a central processing unit (CPU) or hardware or software control logic, ROM, and/or other types of nonvolatile memory. Additional components of the information handling system may include one or more disk drives, one or more network ports for communicating with external devices as well as various input and output (I/O) devices, such as a keyboard, a mouse, and a video display. The information handling system may also include one or more buses operable to transmit communications between the various hardware components.

FIG.1illustrates an information handling system100that can be used to implement the system and method of the present invention. The information handling system100includes one or more processors (e.g., central processor unit or “CPU,” embedded controller, etc.)102, input/output (I/O) devices104, such as a display, a keyboard, a mouse, and associated controllers, a hard drive or disk storage106, and various other subsystems108. Other subsystems108can include sensors (fingerprint reader, iris (retina) scanner, heartbeat monitor, etc.).

Implementations can provide for the one or more processors (e.g., CPU)102to include a dedicated manageability engine110that can be used in matching acquired biometric information, heartbeat pattern, and heart rate with stored verified related data. Certain implementations provide for hard drive or disk storage106to include a secure control vault112with verified related data, particularly user biometric information, heartbeat pattern and heart rate information. In various embodiments, the information handling system100also includes network port114operable to connect to a network140, which is likewise accessible by a service provider server142. The network140may be a public network, such as the Internet, a physical private network, a wireless network, a virtual private network (VPN), or any combination thereof. Skilled practitioners of the art will recognize that many such embodiments are possible, and the foregoing is not intended to limit the spirit, scope or intent of the invention.

The information handling system100likewise includes system memory116, which is interconnected to the foregoing via one or more buses118. Examples of buses118include I2C, USB, etc. System memory116further includes an operating system (OS)120and applications122. In certain embodiments, applications118are provided as a service from the service provider server142. Implementations can provide for applications122to include a biometric, heartbeat, heartrate authentication application124.

FIG.2is a simplified block diagram of a system for authenticating users to a particular information handling system biometric information, heartbeat pattern and heart rate. The system200includes the information handing system100as described above in reference toFIG.1. As discussed, various implementations provide for the information handling system includes manageability engine110, control vault112and a biometric, heartbeat, heartrate authentication application124. The heartrate authentication application124can be used to initiate and perform the methods described herein. Information handling system100is connected to network140as described above in reference toFIG.1.

The information handling system100can be accessed by a user202. Various embodiments provide for the information handling system100to include or be configured with a fingerprint reader204, a fingerprint and heart rate reader206, a heart rate monitor208, an iris (retina) scanner210, and a facial recognition camera212, which are used to acquire user202biometric information, heartbeat pattern and heart rate as described herein. It is to be understood that the described elements can be combined and other such biometric, heartbeat and heat rate acquiring elements (i.e., devices) can be implemented.

It is to be understood that various implementations of biometric recognition can be provided. For example, an implementation can be provided using a fingerprint reader204. A fingerprint reader can be combined with a heart rate reader or monitor, such as a fingerprint and heart rate reader206. When the user202presents his or her finger to the fingerprint reader204or fingerprint and heart rate reader206, the user202heartbeat pattern and heart rate can also be detected and recorded. Implementations with ultrasound fingerprint technology can provide for a fingerprint and heart rate to be acquired with a single sensor.

Implementations can provide for an iris (retina) scan on a device, which can be provided through iris (retina) scanner210. In various implementations, the information handling system100can be a configured as an augmented reality/virtual reality (AR/VR) device, where the iris (retina) scanner210as part of the AR/VR device.

In certain implementations, iris (retina) scanner210can be implemented to perform concurrent iris (retina) scan and heart rate monitoring of the user202. Therefore, it is to be understood that acquiring heartbeat pattern and heart rate of the user can be implemented using various methods, including a dedicated heart rate monitor208, a heart rate monitor208attached to the information handling system100(i.e., device) connected to the user202(e.g., contact with user202temple area), iris (retina) scanner210that monitors veins of a retina of the user, an infrared camera (IR) (not shown) that monitors heat variation and heartbeat of the user, etc. Biometric information of the user202can also include varying facial expressions of the user202that indicate a particular condition, including a stressful condition. The facial recognition camera212can record and monitor such facial expressions of the user202.

When user202biometric information is taken, user heartbeat pattern and heart rate can also be taken and considered when granting device access. As discussed, the user202can have a unique heartbeat pattern, as well as a range of normal heart rate. Various implementations can provide acquiring the normal heart rate, including a normalized heartbeat pattern and recording and associating with a device such as information handling system100. The recording can take place during an initial biometric service enrollment and referred to later during user authentication process. User202recorded and verified biometric information, heartbeat pattern and heart rate can be stored in a verified biometric, heartbeat pattern and heart rate data store214. In addition, verified data can also be stored in control vault112.

Various implementations provide for system200to include an administrative system216that is accessible by an administrator218. The administrative system216can be configured to monitor access to the information handling system100, including monitoring access and use by user202. In certain implementations, an alert can be provided to an administrator216, where administrator can be part of security, etc., if multiple failed access attempts take place. Implementations can also provide for monitoring or occasionally polling/accessing a user202heartbeat pattern and heat rate, and possibly locking out the user202if an abnormal increase or sudden decrease in heart rate is detected. An increase in heart rate can correlate to a stress or threat condition and a decrease in heart rate can correlate to non-use of the device or a serious medical condition occurring with the user202.

FIG.3shows biometric information, heartbeat pattern, and heart rate. A heartbeat pattern300is acquired by the elements described inFIG.2(e.g., fingerprint and HR reader206, HR monitor208, iris (retina) scanner210). The heartbeat pattern300can include waves having patterns that are unique to an individual (i.e., user202). The waves can include a P wave302, a QRS complex304, a T wave306, and a U wave (not shown). The P wave302represents atrial depolarization. The QRS complex304represents ventricular depolarization. The T wave306represents ventricular repolarization. The U wave (not shown) represents papillary muscle repolarization. Changes in the structure of the heart and its surroundings (including blood composition) change the pattern of the waves. PR interval308is measured from the beginning of the P wave302to the beginning of the QRS complex304. The PR segment310represents the time delay between atrial and ventricular activation. The ST segment312connects the QRS complex304and the T wave306and represents the period when the ventricles are depolarized. The QT interval314is measured from the beginning of the QRS complex304to the end of the T wave306. Waves have a period or cycle. Therefore user202heartbeat pattern and heart rate that is normalized has particular range of period or cycles.

Fingerprint image316is biometric fingerprint information that can be acquired using fingerprint reader204, fingerprint and HR reader206described in reference toFIG.2. Iris or retinal image318is biometric iris (retina) information that can be acquired using iris (retina) scanner210described in reference toFIG.2. For various implementations, facial recognition camera212described in reference toFIG.2captures facial images320of user202. A facial image can correspond to a particular condition of the user202. For example, image322can indicate a “happy” emotional condition of user202, image324a “neutral” emotional condition of user202, and image326can indicate a “stressed” condition of user202. For various implementations, facial recognition can further provide additional security in allowing access of information handling system100to user202. For example, if a facial image326is acquired showing “stressed condition” of user202, access to the information handling system100can be denied. Facial image recognition and correlation to particular conditions can be provided in or included in biometric, heartbeat, heartrate authentication application124, provided through service provider server142, or other service that matches known facial images to particular conditions.

FIG.4is a generalized flowchart400for acquiring and setting user biometric information, heartbeat pattern, and heart rate. In particular, the process400can be used to perform an initial acquisition or calibrating of a user202normalized biometric information, heartbeat pattern and heart rate. The order in which the method is described is not intended to be construed as a limitation, and any number of the described method blocks may be combined in any order to implement the method, or alternate method. Additionally, individual blocks may be deleted from the method without departing from the spirit and scope of the subject matter described herein. Furthermore, the method may be implemented in any suitable hardware, software, firmware, or a combination thereof, without departing from the scope of the invention.

At step402, the process400starts. At step404, a user enters a “password” on an information handling system100or device. The password provides an initial access to the information handling system100and activates biometric authentication, including registering or setting a normalized biometric information (e.g., fingerprint, iris), heartbeat pattern, heart rate of user202. At step406, a determination is made if the entered password is correct.

If the password is not correct, following the “No” branch of step406, at step408, the process ends. If the password correct, following the “Yes” branch of step406, at step410, acquiring initial biometric information (data) is performed. The biometric information can include fingerprints, iris (retina), and in certain implementations facial images. In various implementations, a fingerprint reader204, a fingerprint and heart rate reader206, an iris (retina) scanner210, and a facial recognition camera212can be used to acquire the biometric information. The biometric information is associated with normalized heartbeat pattern and heart rate of the user202.

At step412, heartbeat pattern and heart rate are monitored. As discussed, this can be performed using devices or elements described above in reference toFIG.2, for example fingerprint and HR reader206, HR monitor208, iris (retina) scanner210.

At step414, the monitored normalized heartbeat pattern and heart rate are calculated. This normalized heartbeat pattern and heart rate are used to verify the user202for future access to the information handling system100.

At step416, the normalized user202normalized biometric information heartbeat pattern, heart rate of user202are registered or stored. In various implementations, the registering or storing can be performed at the control vault102and/or verified biometric, heartbeat pattern and heart rate data store214. At step408, the process400ends.

FIG.5is a generalized flowchart500for reacquiring and resetting user biometric information, heartbeat pattern, and heart rate. In particular, the process400can be used to perform a reacquisition or recalibrating of a user202normalized biometric information, heartbeat pattern and heart rate. The order in which the method is described is not intended to be construed as a limitation, and any number of the described method blocks may be combined in any order to implement the method, or alternate method. Additionally, individual blocks may be deleted from the method without departing from the spirit and scope of the subject matter described herein. Furthermore, the method may be implemented in any suitable hardware, software, firmware, or a combination thereof, without departing from the scope of the invention.

At step502, the process500starts. At step504, a user202presents biometric information. In various implementations, a fingerprint reader204, a fingerprint and heart rate reader206, an iris (retina) scanner210, and a facial recognition camera212can be used to acquire the biometric information.

At step506, a determination is made if the presented biometric information is correct as compared to stored and verified user202biometric information. If the biometric information is incorrect, following the “No” branch of step506, at step508, the login attempt is rejected. At step510, the process500ends.

If the biometric information is correct, following the “Yes” branch of step506, at step512, a determination is made as to a number of maximum authentication attempts can be made by user202. The number of authentication attempts can be predetermined. In certain implementations, the number is set by an administrative system216(administrator218). At step514, monitoring heartbeat pattern and heart rate is performed. For example, step514can be performed by fingerprint and HR reader206, HR monitor208, iris (retina) scanner210.

At step516, a determination is made if the number of attempts is greater than zero. If the number of attempts is not greater than zero, following the “No” branch of step of step516, at step508, the login attempt is rejected. At step510, the process500ends.

If the number of attempts is greater than zero, then following the “Yes” branch of step of step516, at step518, a determination is made if the acquired heartbeat pattern and heart rate are within the normal range of the verified user202heartbeat pattern and heart rate. If the acquired heartbeat pattern and heart rate are not within the normal range of the verified user202, following the “No” branch of step518, at step520an attempt is subtracted from the remaining attempts, and step514follows.

If the acquired heartbeat pattern and heart rate are within the normal range of the verified user202, following the “Yes” branch of step518, at step522, access is granted to the information handling system or device. At step524, normalized heartbeat pattern and heart rate range can be updated based on the acquired accepted values. At step510the process ends.

FIG.6is a generalized flowchart600for keeping the user security session on by continuously confirming normalized heartbeat pattern and heart rate. In particular, the process600can be used to continuously update security during session of a user202, and to log off the user202if anomalies are determined. The order in which the method is described is not intended to be construed as a limitation, and any number of the described method blocks may be combined in any order to implement the method, or alternate method. Additionally, individual blocks may be deleted from the method without departing from the spirit and scope of the subject matter described herein. Furthermore, the method may be implemented in any suitable hardware, software, firmware, or a combination thereof, without departing from the scope of the invention.

At step602, the process600starts. At step604, a determination is made as to a number of maximum authentication attempts can be made by user202. The number of authentication attempts can be predetermined. In certain implementations, the number is set by an administrative system216(administrator218).

At step606, a poll is performed as to the user heartbeat pattern and heart rate. Polling can be performed at a predetermine interval, where heartbeat pattern and heart rate are acquired. Heartbeat pattern and heart rate can be acquired by fingerprint and HR reader206, HR monitor208, iris (retina) scanner210.

At step608, a determination is made if the number of attempts is greater than zero. If the number of attempts is not greater than zero, following the “No” branch of step of step608, at step610, the user202is locked out or no longer provided access to the information handling system or device. At step612, the process600ends.

If the number of attempts is greater than zero, then following the “Yes” branch of step of step608, at step614, a determination is made if the acquired heartbeat pattern and heart rate are within the normal range of the verified user202heartbeat pattern and heart rate as monitored and calculated. If the acquired heartbeat pattern and heart rate are not within the normal range of the verified user202, following the “No” branch of step614, at step616an attempt is subtracted from the remaining attempts, and step606follows.

If the acquired heartbeat pattern and heart rate are within the normal range of the verified user202, following the “Yes” branch of step614, at step618, the current session is kept on (continues), and step604follows.

FIG.7is a generalized flowchart700for authenticating users through biometrics, heartbeat pattern, and heart rate to a particular information handling system. The order in which the method is described is not intended to be construed as a limitation, and any number of the described method blocks may be combined in any order to implement the method, or alternate method. Additionally, individual blocks may be deleted from the method without departing from the spirit and scope of the subject matter described herein. Furthermore, the method may be implemented in any suitable hardware, software, firmware, or a combination thereof, without departing from the scope of the invention.

At step702, the process700starts. At step704, registering or setting up user202biometric, heart beat pattern, and heart rate information is performed. For example, the steps as described in process400can be implemented.

At step706, validating access to an information handling system (HIS) is performed to user202. For example, the steps as described in process500can be implemented.

At step708, reacquiring and/or recalibrating of user biometric, heartbeat pattern, and heart rate information is performed. For example, the steps as described in process500can be implemented.

At step710, polling of heartbeat pattern and heart rate of user202is performed. For example, the steps as described in process600can be implemented.

As will be appreciated by one skilled in the art, the present invention can be embodied as a method, system, or computer program product. Accordingly, embodiments of the invention can be implemented entirely in hardware, entirely in software (including firmware, resident software, micro-code, etc.) or in an embodiment combining software and hardware. These various embodiments can all generally be referred to herein as a “circuit,” “module,” or “system.” Furthermore, the present invention can take the form of a computer program product on a computer-usable storage medium having computer-usable program code embodied in the medium.

Any suitable computer usable or computer readable medium can be utilized. The computer-usable or computer-readable medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device. More specific examples (a non-exhaustive list) of the computer-readable medium would include the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, or a magnetic storage device. In the context of this document, a computer-usable or computer-readable medium can be any medium that can contain, store, communicate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device.

Computer program code for carrying out operations of the present invention can be written in an object oriented programming language such as JAVA, SMALLTALK, C++ or the like. However, the computer program code for carrying out operations of the present invention can also be written in conventional procedural programming languages, such as the “C” programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

Embodiments of the invention are described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.

These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function/act specified in the flowchart and/or block diagram block or blocks.

The computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.

The present invention is well adapted to attain the advantages mentioned as well as others inherent therein. While the present invention has been depicted, described, and is defined by reference to particular embodiments of the invention, such references do not imply a limitation on the invention, and no such limitation is to be inferred. The invention is capable of considerable modification, alteration, and equivalents in form and function, as will occur to those ordinarily skilled in the pertinent arts. The depicted and described embodiments are examples only and are not exhaustive of the scope of the invention.

Consequently, the invention is intended to be limited only by the spirit and scope of the appended claims, giving full cognizance to equivalents in all respects.