Ncr Corporation

Ncr Voyix Corporation

Stavros Antonakakis

Erick Christian Kobres

Ravi Prakash Mishra

Suman Kumar Bhowmick

Ajay Gordhandas Mulani

Bradley William Corrion

Erick C Kobres

Bradley Corrion

Data is automatically collected; the data relevant to user attributes. That data is provided as factors for passive authenticating the user for access to a device and/or a resource. In an embodiment, the data is used to establish a profile or a pattern for the user.

Methods and system for passive authentication through user attributes

Sensors provide sensor data continuously from a device. The sensor data is continuously processed as factors to generate a confidence value for authentication. The confidence value is compared to a predetermined threshold value or predetermined range of values to determine whether a user is to be authenticated for access to one or more of: a device, a resource, and a transaction operation for a transaction.

Methods and a system for continuous automated authentication

Two endpoint devices communicate with one another in a secure session using a secure protocol. Trusted control messages are passed upstream from one of the endpoint devices through one or more additional secure sessions to a centralized managing server. Additionally, trusted control messages are passed downstream from the centralized manager server through secure sessions to one or more of the endpoint devices. Each endpoint device is integrated into a terminal device.

Trusted device control messages

Resource attributes for resources are continuously and regularly collected from hardware and software resources of one or more devices. The resource attributes are continuously fed to one or more confidence calculators. At any given point in time, a single confidence value is provided to an authentication for making a decision as to whether to authenticate a user for access to a particular resource.

Methods and a system for passive authentication

A scanner is enabled for communication with a Secure Input/Output (I/O) Module (SIOM) using a secure communication protocol. The SIOM is provisioned with a manifest, and the manifest defines encryption for use over the secure communication protocol. Communication to and from the scanner occurs over secure communication sessions with the SIOM using the secure communication protocol.

Scanner enabled with a secure input/output (I/O) module (SIOM)

A Secure Input/Output (I/O) Module (SIOM) is networked-enabled providing secure communications with terminals and peripherals integrated into the terminals. Communications between devices are securely made through encrypted communication sessions provisioned, defined, and managed through a secure protocol using the network-based SIOM. In an embodiment, a single-tenant network-based SIOM is provided. In an embodiment, a hybrid dual single-tenant and multi-tenant network-based SIOM is provided. In an embodiment, a multi-tenant network-based SIOM is provided. In an embodiment, a cloud-based SIOM is provided.

Network-based secure input/output (I/O) module (SIOM)

Events are securely packaged and transmitted from peripherals of terminals and from secure input/out modules (SIOMs) of terminals. The events are collected and mined in real time for security risk patterns and dynamic remedial actions are pushed back down to the terminals, peripherals, and SIOMs.

Enterprise intrusion detection and remediation

Two endpoint devices communicate with one another in a secure session by negotiating encrypted communications at initial establishment of the session. Each endpoint device communicates its available security profiles to the other endpoint. A specific security profile is then selected that defines the data encryption and authentication used during the secure session between the two endpoint devices.

Cryptographic security profiles

Input streams are automatically and continuously evaluated in a passive manner from sensors and resources of a device. The streams are weighted and aggregated to produce single confidence values. A current single confidence value is used to passively authenticate a user for access to the device or to one or more resources of the device when the user attempts access.

Growing community of inventors

Lake Mary, FL, United States of America

Stavros Antonakakis