Telefonaktiebolaget Lm Ericsson (publ)

Assa Abloy Global Solutions Ab

Tascent, Inc.

Sunny Y Wang

Timothy John Lynch

Srikanth Chavali

Sudhakar Chunduru

Keith W Hartman

Sudhagar Chinnaswamy

Lars Martin

Samvid S Shah

Dan Potter

Francois Lemarchand

Joel L Wittenberg

Satyanarayana Madem

Weifang Yang

Chandra Shekhar

Stephen Daniel Connor

A multi-factor authentication access control system is described for permitting access to secured locations. Types of authentication factors include property or physical-based items and biometric-based information. Optionally, the biometric information presented by the person is evaluated for being a presentation attack. Exemplary embodiments are directed to controlling door access.

Multi-factor authentication door access control system

A fast face capture system and process for identifying an individual as the individual walks through a designated area is described. A set of raw images is streamed from at least one camera for detecting individuals entering the designated area. The images are searched for a face. If a face is detected, a tracking ID is assigned; and a timer and face tracking is commenced to obtain a sequence of candidate images for each individual as the individual walks through the designated area. A maximum quality image is selected from the sequence of candidate images for each individual based on at least one quality metric, the elapsed time, and the quality select count in the sequence of the candidate images. The maximum quality image is submitted for matching with a verified image of the person. The invention has particular application to security check points for quickly matching the face of the moving person with a previously acquired and verified identity.

Fast face image capture system

A network element implements a method to support a plurality of network services between a computing device and the network element over non-channelized media using a single subscriber session. The method includes receiving from a computing device a request for a first network service that includes a Media Access Control (MAC) address of the computing device, retrieving a user record from a database server based on the MAC address of the computing device, determining from the user record whether the computing device supports the first network service and a second network service, and upon determining that the computing device supports the first network service and the second network service, creating a single dual-stack session that combines the first network service and the second network service. The method further includes enabling the computing device to access the first network service and the second network service where the first network service and the second network service are managed by the single dual-stack session.

IPoE dual-stack subscriber for bridged residential gateway configuration

Embodiments of the present disclosure include methods and apparatus for providing virtual channelization of un-channelized media. A parent circuit is configured to expect dynamic IPoE CLIPS clients. Traffic having a source address is received from an access point. A circuit lookup is performed based on the source address. Upon a determination from the circuit lookup that a circuit corresponding to the traffic from the source address does not exist, the parent circuit determines whether the source address of the traffic falls within a predefined range of addresses and notifies a control plane of the parent circuit that a new IP address has been detected for dynamic IPoE CLIPS.

Dynamic IPoE clips subscriber method and apparatus

Methods and apparatus for dynamically configuring a parent circuit through a subscriber record on an authentication, authorization, and accounting (AAA) server responsive to an authorization event for the subscriber session on the network element. According to one embodiment of the invention, the AAA server accesses the subscriber record for a subscriber session on the network element. Based on this subscriber record, a set of one or more attributes for a subscriber circuit and a set of one or more attributes for a parent circuit of the subscriber circuit are determined. The network element applies the set of subscriber circuit attributes to the subscriber circuit and the set of parent circuit attributes to the parent circuit.

Dynamically configuring attributes of a parent circuit on a network element

Service groups are dynamically created and members are dynamically assigned. A network element receives a request for a subscriber session and transmits an authentication request to a AAA server. The network element receives an authentication reply from the AAA server that includes dynamic service group configuration information that indicates that the subscriber session should be part of a service group and defines the criteria for the network element to dynamically create and join that subscriber session to a service group if an appropriate service group does not exist or dynamically join that subscriber session to an existing service group. The network element derives a dynamic service group identifier from attributes of the subscriber session based on instructions in the dynamic service group configuration information. Based on that dynamic service group identifier and service group attribute information in the configuration information, the network element dynamically creates and joins the subscriber session to a service group if an appropriate service group does not exist or dynamically joins the subscriber session to an existing appropriate service group.

Dynamic service groups based on session attributes

Growing community of inventors

Palo Alto, CA, United States of America

Sunny Y Wang