Patent ID: 12250216

FIG.1schematically shows a user equipment UE of the type to which the present invention is applied as an embodiment. It represents a simple approach where the user equipment UE is equipped with an authentication engine AE, in particular based on machine learning techniques.

The user equipment is any type of device for carrying out any kind of task, including smartphones, tablets, smartwatches, music players, sport/fitness gear accessories, game consoles, smart remote controls, asset tracker, navigation devices or anything like that, where a user authentication is applicable.

The authentication engine is configured for carrying out an authentication of a user, in particular for accessing the user equipment.

The exemplifying user equipment is further equipped with a first sensor SE1and a second sensor SE2, as well as a user interface UI. From such sensors and user interfaces an input is generated and made available to the user equipment, which is called behaviour indication BI.

Such behavioural indications are supposed to be used by machine learning engines ML1, ML2, ML3to train the local authentication model AM. Such machine learning is in particular processed through the machine learning engines in order to create an authentication factor that is stored in local the authentication model AM.

With that local authentication model the user equipment UE is capable to carry out an authentication of the user and eventually to give the eligible user access to the user equipment, e.g. by unlocking the user interface UI screen. Preferably the user equipment resp. its local authentication model is trained by user behaviour every time, the user is already successfully authenticated. In the first days of usage this requires preferably a common authentication method, e.g. PIN or password entering, biometric authentication or the like. When this is done, the local authentication model is enhanced by considering the user behaviour. When the local authentication model is mature enough, then through user behaviour alone, without the common methods mentioned above, the user gets access to the user equipment again.

InFIG.2another preferred embodiment of the user equipment UE is presented. Here it is further taken into account the dynamic usage of authentication factors AF. Generally the setup is alike the one shown inFIG.1. Additionally now the Machine learning engines ML1and ML3take into account validity indications P1, P2relating to validity periods of the respective authentication factor, which lead to the dynamic models DM1and DM2.

In particular dynamic model DM1relates to the passive learning mode, by means of sensors SE1, SE2, while dynamic model DM2relates to active learning mode through the user interface UI.

In regular intervals the dynamic model DM1provides its ephemeral authentication factors AF to the local authentication model AM, taking into account the validity period of the stored validity indication P1, P2. That means, when the validity period of an authentication factor is active, the dynamic authentication factor is provided to the authentication model. Once the validity period expires, the update from the dynamic model DM1to the local authentication model AM indicates to delete said dynamic authentication factor, as it is not to be considered anymore by the authentication engine AE. Through the user interface e.g. an question is answered relating to the day, e.g. “what did you eat today”. The answer may be stored as authentication factor AF in the local authentication model AM, but through the dynamic model

DM2this is enhanced with a validity indication P2. In this case the validity period of this question is through the context valid until the end of the day. When for getting access to the user equipment a user is asked to enter what he ate that day, he could give an answer. If the answer is correct can only be checked against the previously stored authentication factor at the same day. The check results in an authentication result AR, which has basically the different outcomes: “Yes” and “No”.

The authentication factor is not supposed to be valid anymore at the next day. Hence through a regular update from the dynamic model it would be deleted from the authentication model. This authentication model is hence called an ephemeral model. Asking the same question again and getting the same answer again would at the following day consequently not lead to a successful authentication. Preferably however the question is only asked for authentication when an authentication factor with that information for the current day is present.

Generally the same happens with the passive learning mode where the sensor SE1delivers behaviour input which is enhanced with a validity indication P1from dynamic model DM1. This relates in particular to a time limited sensorial detectable behaviour, like the way the user walks, while his broken leg is in a cast, through at least one of the sensors SE1, SE2.

The authentication factor with a validity indication is likewise stored in the authentication model and can be used to retrieve an authentication results AR.FIG.3shows the situation of a first user equipment UE1of a user who owns one or more other user equipment UE2, where he wants to get access to in the same way. The user equipments UE1, UE2in this example do not differ in their inner structure, however they can be differently, like smartphones, tablets, fitness gear etc.

The user equipments UE1, UE2are further equipped with communication means in this exemplifying figure indicated by the antenna AN. With the help of this antenna—and of course more communication circuitry (not shown)—the user equipment is capable to establish a communication channel via a wireless network CN and the Internet WWW to a central server CS which holds a central authentication model CAM. The wireless network may in particular be a cellular network, a Wi-Fi hotspot/network, usage of Wimax, NFC, Bluetooth, LoraWan etc.

With each enhancement of the local authentication model AM by adding an authentication factor AF, if equipped with a validity indication or not, the user equipment sends through the communication channel a model update message MU1to the central server.

The central server is configured to process this model update message MU1and enhances its central authentication model CAM. The central authentication model is in particular a replication of the local authentication model AM of the user equipment UE1.

As a result of the enhancement of the central authentication model CAM, the central server CS triggers a transmission of a second model update message MU2to another user equipment UE2, which likewise is configured to establish a communication channel to the central server. This user equipment belongs to the set of user equipment belonging to the same user. The authentication factor, which triggered the first model update message is also initiated by a user interaction of the same user.

Hence the central server CS only causes an update on the local authentication models assigned to that user for those user equipments owned by the user.

Should the same user equipment be used by a different user, then a separate local authentication model AM is available, either in the same data structure or separately.

Eventually the local authentication model of the first user equipment UE1has the same content as the local authentication model of the second user equipment UE2for the same user, hence the user can get access to both user equipments by the same way. Preferably a learning step at the second user equipment UE2would cause the same procedure in the other direction in order to synchronize the local authentication model AM of both user equipments UE1, UE2again.

This propagation of authentication model data is shown in a sequence diagram ofFIG.4. It covers the two user equipments UE1and UE2of the same user and the central server CS holding a central authentication model CAM for that user. User equipment UE1and UE2are communicatively coupled with the central server and thus able to exchange signalling messages.

The exemplifying method starts with the first user equipment UE1, which is supposed to check its local authentication model in step S1. The user equipment comprises in particular a dynamic model, which is equipped with a validity indication P1, which might lead to a change of the local authentication model once the validity period expires.

The second user equipment UE2belongs to the same user. For making this known to the central server CS it sends a register message S2, indicating the user it belongs to the central server. Preferably this is part of the initialization of the user equipment carried out by the user.

The central server memorizes this information locally in a user equipment register in conjunction with some user data, like an identifier. After receiving the register message in step S2, the central server has a relationship of user equipment UE1and user equipment UE2with that specific user.

When the local authentication model of user equipment UE1is enhanced by at least one authentication factor AF it is send with a first model update message in step S3to the central server CS. The model update message at least comprises a user identification, and information relating to the changed at least one authentication factor. Preferably also an indication of the user equipment UE1itself, e.g. a IMEI or any other permanent identifier is also provided.

Preferably all communication between the user equipments UE1, UE2and the central server is secured e.g. by signature with a certificate issued by the central server.

The central server CS in response to receiving the first model update message handles the content of the received message in step S4and carries out an update of the central authentication model.

Further it checks in conjunction with this update if another user equipment is supposed to be informed by this change. For this the user equipment register of the central server is monitored. If at least one user equipment different from the sending user equipment is stored in the register, then the central server is supposed to send a second model update message to this at least one user equipment.

As this is the case in this situation, in step S5the second model update message is sent to the user equipment UE2. The second model update message at least comprises information relating to the changed authentication factor.

The user equipment UE2handles in step S6the received second model update message and carries out an update on its local authentication model. Preferably the central server also sends a second model message to the first user equipment UE1as well. In this case this is done by sending another model update message in step S7. This is sufficient for the user equipment to consider the first model update message sent in step S3as acknowledged. After a given period P1, at the user equipment UE1it is branched in step S8again to check if a change of the local authentication model took place, in order to decide if another model update message is about to be sent (step S1again). This decision also takes into account if a validity period of an authentication factor did expire. This would according toFIG.3lead to an update of the local authentication model from one of the dynamic models. Hence the change of local authentication model triggers sending another model update message.

In the above detailed description, reference is made to the accompanying drawings that show, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It is to be understood that the various embodiments of the invention, although different, are not necessarily mutually exclusive. For example, a particular feature, structure, or characteristic described herein in connection with one embodiment may be implemented within other embodiments without departing from the scope of the invention. In addition, it is to be understood that the location or arrangement of individual elements within each disclosed embodiment may be modified without departing from the scope of the invention. The above detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is defined only by the appended claims, appropriately interpreted, along with the full range of equivalents to which the claims are entitled.