Event-based biometric authentication using mobile device

摘要

Event-based biometric authentication is provided using a mobile device of a user. A user attempting to access a protected resource is authenticated by receiving a request to access the protected resource; collecting biometric information from the user in response to the request using a mobile device of the user; performing biometric authentication of the user using the collected biometric information; and granting access to the protected resource based on the biometric authentication. The authentication optionally comprises an event-based authentication. The mobile device does not have to contain token generating material.

主权项

1. A method for authentication of a user attempting to access a protected resource, comprising the steps of:
receiving a request to access said protected resource, wherein said protected resource comprises a resource requiring use of a token code generated by a one-time passcode generating device to obtain access; collecting biometric information from said user in response to said request using a mobile device of said user; collecting one or more of biographical information of said user, a geographic location of said user, a geographic location of said mobile device, additional mobile device data and adaptive authentication information; performing biometric authentication of said user using said collected biometric information and at least one additional authentication of said user using said one or more of said biographical information of said user, said geographic location of said user, said geographic location of said mobile device, said additional mobile device data and said adaptive authentication information, wherein one or more of said biometric authentication and said at least one additional authentication comprise an event-based authentication; and providing a given token code to said mobile device granting access of said mobile device to said protected resource, wherein said given token code is provided based on an outcome of said biometric authentication and said at least one additional authentication.