The present invention relates to an entity access control system that allows or denies access by a person to a premises or gathering based upon the anonymous confirmation of an authenticated health state provided by a computing device associated of the person attempting to gain access. The health state is determined by an intermediary app executing on the computing device, where the device authenticates one or more health measurements for determining the authenticated health state, and where the one or more authenticated health measurements are determined by the computing device or in combination with an authenticated companion device.
The present invention is related to THEME PARK GAMIFICATION, GUEST TRACKING AND ACCESS CONTROL SYSTEM, Aman, U.S. Pat. No. 10,861,267, issued Dec. 8, 2020. The GUEST TRACKING AND ACCESS CONTROL SYSTEM taught a “smart ticket” comprising in one form a mobile device such as a smartphone executing a venue app. Using the smart ticket in combination with a venue's “confined Zone3” (herein also “geofence”) it was taught that that a ticketed guest could negotiate “confirmed” self-access to the venue, where confirmation included self-identification using a current biometric to compare with a prior biometric for example already “registered” to the ticket (herein referred to as “authentication”). The venue app was a tamperproof agent representing both parties, the guest, and the venue (“destination”). The solution maintains guest privacy and eliminates the need for a personal interaction with a destination agent, while also achieving the trust of the destination (i.e., that the ticket is only being used by a single biometrically confirmed/authenticated person). This prior teaching is generally referred to herein as a premises access control system implementing an anonymous, privately authenticated “right-to-access” using an “honest broker” (the venue app).
The present invention is also a continuation-in-part of GUEST TRACKING AND ACCESS CONTROL USING HEALTH METRICS, Aman et al., PCT/US2021/029186 filed on Apr. 26, 2021. This subsequent PCT application extended the prior U.S. Pat. No. 10,861,267 teachings to include means for assuring the destination of the acceptable present health state of the guest, referred to as “proof-of-health.” Within this PCT patent the prior “venue app” is also referred to as an “intermediary app” or “honest broker.” The honest broker app is shown to gain the “public trust” that a person desiring to access a premises or gathering has an acceptable health status, where this acceptable proof-of-health is privately determined and authenticated by the honest broker with respect to one or more public “regiments” specifying the conditions for proof.
Proof-of-health was shown to have at least three dimensions including: “level 1” (L1) personal symptom tracking, level 2 (L2) health kit test result(s), and level 3 (L3) healthcare administered services (such as vaccination(s)). All data supporting L1, L2 and L3 proof was shown to be collected and maintained by the honest broker remaining private to the person where only the net “regiment pass/fail” status is shared with the access control system. Thus, the system was shown to implement an anonymous, privately authenticated “right-to-access” with “proof-of-health” using the “honest broker.”
L1 symptom tracking was shown to require further adapted wellness devices (examples included a digital thermometer, pulse oximeter, a smartwatch, chest band, smart scale, patch, breath analyzer, etc.). While traditional wellness devices can be used in private by a person to collect health measurements indicative of their personal symptomatic (L1) health state, it was shown that these traditional measurements where not authenticated to be “of” the person, and therefore were not “publicly trustable.” Gaining public trust was shown to require authentication of each measurement by at least either of two methods referred to generally as “line-of-sight” and “non-line-of-sight.”
In line-of-sight authentication, the person holds their computing device with camera (e.g., smartphone) where the honest broker app (executing on or through the computing device) can simultaneously image the person's face along with the wellness device. While simultaneously viewing, the app: 1) confirms the person's identity using facial recognition, 2) sends electronic signals to the device for triggering a unique pattern of light flashes, where the device is adapted with an LED (or includes a light emitter) to blink a return signal, and 3) detects and confirms the return signal while the device simultaneously measures and communicates the person's symptom(s).
When line-of-sight is not possible, e.g., the person is wearing a chest band or an arm patch, the app: 1) confirms the person's identity using facial recognition, 2) using remote Photoplethysomography (rPPG) detects the person's heartbeat (H1), while the wellness device separately detects the person's heartbeat (H2), and 3) confirms that H1 sufficiently matches H2 while the device measures and communicates the person's symptom(s).
The PCT application taught means for determining that a wearable (such as a smartwatch or chest band) was affixed and clasped to the person's body, where authentication by either method was not substantiated until the wearable was determined to be “locked” and whereafter all measurements taken (presumably over minutes, hours and even days) remain “authenticated” until the wearable detects that it has been “unlocked” from the person's body.
The preceding background is not meant to completely teach or in any way limit the prior related and continued patents and the reader is directed to these patents and patents pending for a full understanding of their many teachings and various implementations of both apparatus and methods. For example, the PCT application taught extensively about anonymous, authenticated health kits allowing a person to privately collect and authenticate health samples (such as mucus or blood) for lab analysis, where the test results (L2) are associated with an anonymous token for retrieval by the honest broker from the lab's anonymous database. The PCT application also taught extensively about anonymous, authenticated health services (such as vaccinations) where the person uses the honest broker to privately authenticate and request a particular service. The honest broker was described as providing an anonymous service token to a healthcare service agent, whereafter a healthcare service is provided to the person and whereupon completion of the service a certificate is provided to the honest broker in association with the anonymous token, thus providing “proof-of-service” (L3).
The present invention especially extends the teachings of the PCT Application GUEST TRACKING AND ACCESS CONTROL USING HEALTH METRICS, Aman et al., PCT/US2021/029186 filed on Apr. 26, 2021, of which it is a continuation-in-part. Even more specifically, the present invention deals with additional teachings relating to the authentication of wellness devices, where additional novel authentication addresses teachings related to both apparatus and methods.
Teachings are provided that generally segregate wellness devices as being “primary,” “secondary,” or “tertiary.” Primary devices are differentiated by their ability to execute the honest broker app for determining, authenticating, maintaining, and communicating the on-going health state of a person. As taught in the related PCT application, the honest broker app authenticates and assesses the person's current health state in relation to one or more public regiments specifying rules and conditions for example referring to L1 “symptom tracking,” L2 “health kit testing,” and L3 “health services” (such as vaccinations), where for example the authenticated “regiment ABC pass/fail assessment” is anonymously communicated to an access control system within a geofence, and where the access control system allows or denies the person access to a premises or gathering based at least in part on the authenticated assessment/“proof-of-health.”
Primary and secondary devices are differentiated herein by their ability to determine at least one personally identifying biometric of the person, such as facial recognition, voice recognition, fingerprint, iris scans or heartbeat “ECG”/“EKG” pattern, where these personally identifying biometrics are referred to as “body ID patterns (a).” Hence, primary and secondary devices are said to be “self-authenticating.” A primary device is also shown to have the ability to pair and authenticate a companion device, for example a secondary or tertiary device, where the companion device is determining and providing one or more health measurement of the person to the primary device from use in determining the person's on-going heath state. In the case of pairing, both the primary device and the companion device determine a “comparison body pattern (b)” (such as the person's heartbeat), where then the primary device authenticates the companion device by comparing the pattern “b” captured by the companion device with the pattern “b” captured by the primary device.
Specific adaptations are provided for a smartwatch that include the use of a combined fingerprint reader/heartbeat detector. The adaptation is shown on the watch band and allows the watch to self-authenticate by in part comparing a simultaneous heartbeat captured from the finger (along with the fingerprint ID) with the heartbeat captured from the wrist underneath the watch itself. The self-authenticating smartwatch is shown as a primary device that is then capable of pairing with another primary device (such as a smartphone), a secondary device (such as an authenticating chest band) and a tertiary device (such as clothing with body sensors, body patches, smart scales and exercise equipment).
A method is discussed for establishing the authenticity of a person using a primary device, where the primary device is either a wearable or not a wearable, followed by the pairing, authenticating and health measurement data collection of the authenticated primary device with any of secondary or tertiary devices (where an otherwise primary device can also act as a secondary or tertiary device).
The authenticating smartwatch is also shown to include further adaptions taught in the PCT application in relation to a finger worn device, where the adaptations include skin temperature as well as galvanic response sensors, ambient sensors (for example to sense humidity, temperature and light), and an LED or otherwise light emitter for use in line-of-sight light signaling. The adaptations allow the smartwatch for example to function similar to the prior finger worn device for example to touch the person's forehead for measuring their temperature in combination with the electrical state of their skin and the surrounding ambient environmental conditions.
A new type of wellness device is taught that captures a person's heartbeat preferably from the upper lip by for example using either of transmissive or reflective photoplethysmography (“PPG”). This device is taught to couple with for example either of a breath analyzer or a digital thermometer, where the coupled combinations from at least tertiary devices, but possibly also secondary devices by the inclusion of a fingerprint/pulse detector.
Given the teachings of the prior referenced applications along with the state-of-the art in device electronics, health sensors, environment sensors, computer and communication systems and other arts as will be recognized within the present specification, it is now possible to implement primary, secondary and tertiary wellness devices as described herein and in alternative embodiments anticipated herein, all as will be apparent from a careful consideration of the present application.
Referring first to
Mobile devices such as smartphones often include what is referred to as a “home button” that includes a fingerprint reader. However, over the last several years, some manufactures such as Apple have done away with the home button (and with it fingerprint detection), shifting the full burden for personal identification to facial recognition. Furthermore, in a strict sense, even traditional mobile devices that include a fingerprint reader cannot conclusively confirm that the finger being scanned is both (1) of the same person being imaged for example using facial recognition, and (2) is a “live” finger as opposed to a forged or faked fingerprint.
Companies such as Qualcomm have produced mobile fingerprint/pulse sensors additionally capable of reading the fingerprint of person 10 while also detecting the presence of blood flow and a heartbeat within the finger of person 10, helping to address the “live” finger (2) problem.
The present invention teaches the use of a mobile fingerprint/pulse sensor 1-1-s in a mobile device such as 1-1 preferably combined with at least concurrent, or substantially concurrent facial recognition (as depicted in
Still referring to
Mobile device with honest broker app 1-1 can use additional forms of personal identification at least including audio/voice recognition and iris scan recognition, both technologies which currently exists in mobile devices such as smartphones. When doing audio/voice recognition, it is also preferred that the person 10 being authenticated is concurrently being imaged such that the personal ID comprises: 1) confirmation via facial recognition, 2) confirmation via voice recognition, and 3) matching of lip sync tracking between the facial images and the voice patterns. When doing iris scan recognition, it is also preferred that the image processing uses rPPG to determine the person 10's pulse from the iris or from the face surrounding the eyes, where then this iris pulse can for example be compared to any of the other body pulses such as the finger pulse 1-h2 being concurrently captured along with the fingerprint ID.
Still referring to
What is important to see is that there are many types (modalities) of body ID patterns (a) (again, face, finger, iris, voice, heartbeat) not limited to those presently discussed or even those currently known. Using substantially concurrent measurements of multiple modalities of body ID patterns (a), a single authenticating device such as mobile device 1-1 or wearable 1-2 increases the accuracy of person 10 authentication, both minimizing “FAR” (the “false acceptance rate” where two patterns (a) of the same modality are said to be of the same person 10 but are in fact of different individuals) while also minimizing “FRR” (the “false rejection rate” where two patterns (a) of the same modality are said to be of different individuals but are in fact of the same person 10). It is also important to see that two or more different devices can each be measuring a same or different modality of body ID pattern (a) for identification (such as face and/or finger), while also picking up a like modality comparison body pattern (b) for us in correlating IDs (a) (e.g., where (b) is a temporal pattern such as an on-going heartbeat that can be compared as a temporal beat that may be insufficient for uniquely identifying the person 10 as a pattern (a), but is sufficient for concluding that the two or more different devices are determining their ID patterns (a) of the same person 10). Furthermore, it is important to see that a primary device 1 can authenticate a person 10, such as by determining one or more IDs (a), but then can also determine a comparison pattern (b) (such as a heartbeat), while additional one or more other tertiary devices 3 are only capable of determining a comparison pattern (b) (such as a heartbeat), where the authentication of person 10 by determination of (a) by the primary device 1 is then extendable to authentication of health data collected by any of the one or more additional tertiary devices 3 by sufficient correlation of the common comparison pattern (b) (e.g., the heartbeat).
Still referring to
And finally with respect to
Referring next to
The related PCT application showed how these many variations of wearables such as 1-2 (or other non-wearable primary devices such as mobile device 1-1) that determine one or more health metrics/measurements, could be further adapted to function as authenticated health tracking devices useable in combination with a private health status tracking technology. The technology and teaching of the combined related patents showed a private system for authenticating personal right-of-access (e.g., biometrically registered, and biometrically confirmed, thus authenticated ticket ownership) and/or proof-of-health (e.g., a biometrically registered on-going regiment of biometrically confirmed health measurements indicating a health status according to a public protocol, thus an authenticated health status). These authenticated right-of-access and/or proof-of-health were shown to be combinable with an access control system allowing a person to gain publicly trustable self-access to a premises or gathering without requiring pre-registry with the access control system, the sharing of personal identity, biometrics or other related data other than confirmation of compliance as tracked by the honest broker operating on the person 10's (non-wearable or wearable) primary device 1, such as 1-1 or 1-2.
Still referring to
What is important to see is that wearable 1-2 can determine both ID patterns (a) and comparison patterns (b). As a careful reading of the present invention and prior related applications will show, wearable 1-2 can work both in conjunction with another primary device such as 1-1, or independently given the ability for self-authentication using at least one pattern (a) such as the fingerprint determined by sensor 1-2-s1. Many variations of fingerprint reader/pulse detector 1-2-s1 are anticipated, where companies such as Qualcomm provide at least one solution. Those familiar with wearables will understand that while incorporated into a wristband 1-2-b, detector 1-2-s1 can be electrically connected to smartwatch 1-2 for example to receive power, be activated/deactivated, and to communicate detected data including the fingerprint scan(s) and finger heartbeat 1-h2 and related data. Alternative power, computing and communication arrangements are possible, as will be understood by those familiar with wearable technology.
Other variations of wearable 1-2 are possible without departing from the true scope and spirit of the invention, as will be apparent from a careful consideration of the present teachings, especially in consideration of wearable 1-2's ability to “pair” and “authenticate” (see
In yet another possible variation of wearable 1-2, sensors 1-2-s2 for example can be further adapted to determine a heartbeat “ECG”/“EKG” signature of the person 10, where this heartbeat signature can serve as both a body ID pattern (a) and a confirmation body pattern (b). Current literature indicates that the heartbeat signature is accurate, but not as accurate as for example a fingerprint. None-the-less, this ECG/EKG technology may improve and otherwise the accuracy in some situations may be considered sufficient for then allowing the further adapted wearable to authenticate the person 10 using a heartbeat signature (a) captured by sensors 1-2-s2, rather than a fingerprint (a) captured by sensors 1-2-s1, (or a combination solution capturing both the heartbeat (a) and fingerprint (a) could be used to increase public trust and accuracy). Since a wearable such as a smartwatch 1-2 includes a user interface, it is also possible to accept a user password or similar, for combination with either or both the heartbeat (a) and the fingerprint (a) for personal authentication, after which heartbeat (b) can be used by the wearable 1-2 for pairing and authenticating with other companion devices (see
Referring next to
Still referring to
As with the discussion of advantages and uses for including sensor 2-1-s1 to preferably concurrently determine an body ID pattern (a) (such as a fingerprint) while substantially simultaneously determining a confirmation body pattern (b) (such as the finger heartbeat 2-h4), this further adaptation of the chest band 2-1 enables the band 2-1 to function as a secondary wellness device 2 (thus authenticating its own health measurements), and not just a tertiary wellness device 3 (for capturing health measurements with concurrent or pre-authenticated body patterns (b) but without ID patterns (a), all as will be well understood by a careful reading of the present invention and the related PCT application). Thus, further adapted chest band 2-1 is useful for both identification (a) of person 10 and the capturing and authentication of at least one health measurement relating to or “of” person 10, such as but not limited to resting heart rate, breathing patterns including shortness of breath, cough patterns, sleep patterns, etc.
Referring next collectively to tertiary wellness devices 3 as depicted in
Referring specifically to
As a careful consideration of the present application and the related PCT application will show, to function as extended-use tertiary devices 3, some wearable device 3's will require sensor means to confirm the state of “clasped,” “attached,” “affixed,” etc., versus the opposite state. As a careful consideration will also show, any wearable device 3 will need to determine a body pattern (b) (such as a heartbeat) for comparison with a like body pattern (b) preferably captured by a companion primary device 1 (see also
And finally, with respect to
Referring next to
In step 104, the primary device 1 (e.g., but not limited to 1-1, 1-2) uses any of many possible technologies and methods to determine at least one body pattern (a) for (ID), such as but not limited to facial recognition, fingerprint (both depicted), audio/voice recognition, or iris scan (all readily achievable using existing and well-known technology). Many additional body pattern (a) for (ID) technologies exist, such as but not limited to palm prints and heartbeat “signatures” (both readily achievable but not commonly implemented on devices such as 1-1 or 1-2). Regardless of the one or more methods chosen, where for example a smartphone 1-1 preferably determines a combination of body IDs (a) using facial recognition, voice recognition and fingerprint analysis (via sensor 1-1-s), and where for example the smartwatch 1-2 determines a body ID (a) via fingerprint analysis (via sensor 1-2-s1), the net result is that at least one “current” person 10 biometric (such as the face, finger, iris or voice pattern (a)) is captured for comparison to a “registered” person 10 biometric, all as discussed in the prior related applications. Upon sufficient matching of a current biometric with a prior captured and registered biometric, the person 10 is determined by the honest broker executing on the primary device 1 to be sufficiently authenticated (see prior related applications for a greater understanding).
Still referring to
As a careful consideration of the prior and current teachings will show, it is also desirable that the health measurement(s) taken in step 108 are taken from the body surface being used to confirm the body pattern (a) ID. As a contrary (“not publicly trustable”) example, a smartphone 1-1 captures one or more images of person 10 (using its front-facing “selfie” camera) for use in facial recognition (a) during step 104, while concurrently a person (perhaps 10 or not-10) places their finger over the back facing camera, for example to get a measurement of blood-pressure. As a careful consideration will show, the primary device 1-1 authenticating person 10 has no sufficient way to simultaneously confirm that the (health) measurement of blood pressure also relates to person 10. However, if primary device 1-1 or 1-2 is at least using a sensor such as 1-1-s or 1-2-s1, respectively, the device 1-1 or 1-2 can determine a body pattern for ID (a) off the person 10's fingertip while also determining a health metric (such as blood pressure, pulse, oxygenation levels and even body temperature (see upcoming
Still referring to
It is noted that the present invention anticipates a new use for sensors such as 1-1-s and 1-2-s1 that combine fingerprint detection with pulse detection, where the new use is to concurrently determine, from the same “publicly trustable” person 10 body surface, a body pattern ID (a) (i.e., the fingerprint), a body confirmation pattern (b) (i.e., the finger heartbeat 1-h2), and zero or more person 10 health measurements. There are other usable alternative fingerprint detection technologies (for example an ultrasonic “3D” fingerprint reader from Qualcomm) developed for determining the fingerprint from a location underneath a portion of the screen area on a device such as 1-1 or 1-2 (sometimes referred to as an “in-screen” fingerprint reader). The present application anticipates using a form of “in-screen” PPM combined with “in-screen” fingerprint detection, such that sensor 1-1-s or 1-2-s1 could located underneath the respective device 1-1, 1-2's screen.
Still referring to
In step 106-1, a primary device 1 electronically pairs with a secondary 2 or tertiary 3 wellness device, where communication pairing is well-known in the art. Either prior to or preferably after pairing, “companion” wellness devices 2 or 3 determines and makes known to the primary device 1 if the device 2 or 3 is a “lockable companion device?” in step 200, as well as other pertinent information such as but not including the type of device, types of health measurement(s), as well as the type(s) of confirmation body pattern (b) (such as a heartbeat 2-h4 or 3-h4) that the device 2 or 3 is capable of determining and providing. If the device 2 or 3 is lockable, for example it is a wearable such as a chest band 2-1, then either automatically or preferably under the request of the primary device 1 the person 10 is directed to lock the device 2 or 3 in step 202, resulting in the determining of an affirmative “set to locked state” being provided by device 2 or 3 to primary device 1 also in step 106-1.
In step 106-2 “determine pair confirmation pattern A,” primary device 1 then determines a confirmation (b) body pattern “A”, such as a face heartbeat 1-h1 using rPPG, or a finger heartbeat 1-h2 using PPG embedded in sensor such as 1-1-s or 1-2-s1. As taught in the prior related PCT application, and as will be understood from a careful consideration of the present teachings, it is also preferable that the confirmation (b) body pattern A, such as 1-h1 or 1-h2, be taken from a body surface that is concurrently being examined by the primary device for the determining of the body ID pattern (a), such as via facial recognition or fingerprint recognition, respectively. Also preferably concurrent, the paired companion device 2 or 3 in step 206-2 “determine pairing confirmation pattern B” determines and communicates to device 1 a confirmation (b) body pattern “B”, such as a finger heartbeat 2-h2 or a body heartbeat 2-h4 or 3-h4, where confirmation (b) body pattern B is of a type that is comparable to confirmation (b) body pattern A being captured by the primary device 1.
In step 106-3 “confirm pairing confirmation A/B match,” the primary device 1 compares confirmation (b) body pattern A captured by primary device 1 with confirmation (b) body pattern B captured by the companion device 2 or 3, whereupon sufficient correlation the companion device 2 or 3 is considered by primary device 1 to be “authenticated,” and hence any health measurements “taken and communicated” by the companion device 2 or 3, either substantially concurrently in step 208 because the companion devices is “not lockable,” or anytime in step 210 for a companion device that is “lockable” and remains locked (thus the measurements of step 210 are taken prior to the determination of being “set to unlocked state” in step 212).
And finally with reference to
Referring next to
Referring next to
By including a touch/skin thermometer 1-3-s3, alternative smartwatch 1-3 can then be used to accomplish at least some of the purposes taught with respect to a finger worn device such as 3-1-d9 in the related PCT application (in particular, the reading of personal body temperature off the forehead in relation to a public regiment, see also upcoming
Modified smartwatch 1-3 optionally includes a light emitting means such as an LED 1-3-led for use in the line-of-sight authentication process as described in the PCT application. However, as a careful consideration of the teachings provided herein regarding smartwatch 1-2 (see especially
Still referring to
Attempting to add a skin contact/personal temperature sensor (such as depicted in
However, adding a touch temperature sensor to a wrist wearable primary device 1 such as smartwatch 1-3 does not suffer either of these two disadvantages as will be more apparent from a careful consideration of upcoming
Regarding the sensing of body temperature, touch sensors currently have at least two key advantages over remote (non-touch) sensors, specifically: 1) by touching the skin the temperature reading will on average be more accurate, and 2) remote sensors typically rely upon IR imagers that are not easily integrated into smartphones (and thus are typically found as standalone devices/“IR temperature guns”). However, new research and development led by Dr. Won Jun Choi of the Center for Opto-Electronic Materials and Devices in the Korea Institute of Science and Technology (KIST) is demonstrating that it is possible to create a thermal-imaging sensor that overcomes the problems (such as heat buildup, device costs) currently restricting the use of thermal imaging sensors in smartphones (such as used in device 1-1).
The present invention anticipates that primary devices 1 will at some future date be able to accomplish the combination of 1) determining body pattern ID (a) for example using facial recognition, 2) determining confirmation body pattern (b) such as a facial heartbeat 1-h1 using rPPG, and 3) determining an accurate body temperature for example from the forehead, all using spatially collocated data (i.e., a single image or stream of images) from one or more image sensors, where if multiple sensors the fields-of-view of the sensors are substantially and sufficiently overlapping. As will be understood by those familiar with the necessary arts and smartphone imaging sensors, (1) and (2) above are already available as is (3) to some less reliable extent. Hence (3), determining an accurate body temperature using a smartphone embedded imaging sensor is expected to be better enabled in the future by the new types imaging sensors being developed as prior mentioned. Thus, providing a touch-based spatially collocated sensor capable of determining (1), (2) and (3), such as substantially spatially collocated sensors 1-3-s1 and 1-3-s3 offers the novel ability to determine a bio-ID (a) (in this case a fingerprint), a bio-pattern (b) (in this case a finger heartbeat) and a bio-health-metric (in this case the finger temperature) over substantially simultaneous same duration of time. Those familiar with the accuracy of sensing body temperatures will recognize that the finger temperature is not as accurate a measure of the core body temperature as the forehead, let alone other even more internal areas of the body (such as the mouth, see
Referring now to
Still referring to
In this combination use of 1-1 with 1-3, light emitter 1-3-led can also be used to engage with line-of-sight light-signaling between smartphone 1-1 and smartwatch 1-3, thus providing another form of authentication (as compared to body pattern (b) confirmation between 1-h1 and 1-h4). Thus, the careful reader will see that there are several possible variations of alternative smartwatch 3-1, for use alone or in combination with smartphone 1-1, each variation providing different advantages and tradeoffs, and as such the present application should not be limited to the exemplary depictions (such as the present
Referring next to
Referring next to
Referring next to
Referring next to
In the present depiction, lip pulse sensor 3-5-s1 for (1) determining the current lip heartbeat 3-h4 is shown as situated on a vertically aligned portion of the mouthpiece 3-5-mp that is expected to come into contact with the upper lip of person 10 during use. As will be understood by those familiar with PPG sensors and the human mouth, many possible arrangements for either preferred PPG sensor 10-ppg2 (reflective type) or sensor 10-ppg1 (transmission type) are possible, and therefore the present invention should not be unnecessarily limited to the present exemplary depiction. What is important to see is the lip pulse detector 3-5 includes means for and is constructed to enable the capturing of a current confirmation body pattern (b), such as the lip heartbeat 3-h4.
In the present depiction, coupling means 3-5-c are portrayed as a cavity within mouthpiece 3-5-mp through which the companion device (such as 2-2ba or 2-3dt) may be inserted and withdrawn (i.e., in some fashion engaged, coupled, aligned or otherwise properly situated for accomplishing the intentions described herein, where many variations are possible), where electronic physical-contact means (not depicted) are preferably provided within the cavity for supporting communication (2) between the lip pulse detector 3-5 and the companion device, such as 2-2ba or 2-3dt. Many such electronic physical-contact means are known in the art, where it is also possible to use electronic non-contact means, for example where detector 3-5 communicates wirelessly with the companion device such as 2-2ba or 2-3dt, and therefore the present invention should not be unnecessarily limited to the present exemplary depiction and preferred description.
It is even possible that no direct means for communication (2) between the lip pulse detector 3-5 and a companion device (such as 2-2ba or 2-3dt) are provided, where for example both detector 3-5 and any companion device instead individually communicate (3) with a primary device 1, where then the primary device 1 relays any information or signaling between device 3-5 and a companion (such as 2-2ba or 2-3dt) that would be necessary, all as will be well understood by those familiar with electronic devices and communication and control between electronic devices. What is important to see is that lip pulse detector 3-5 can minimally determine and provide a current confirmation body pattern (b) such as lip heartbeat 3-h4 for use by any one of or any combination of a companion health device such as 2-2ba or 2-3dt or a primary device such as 1-1, 1-2 or 1-3.
What is also important to understand is that while the current teachings provide for a modular design that separates lip pulse detection into a single physical unit 3-5 for coordination with other possible distinct devices for making health measurements such as breath analysis (device 2-2ba) or oral temperature (device 2-3dt), it is also possible to create a single integrated unit that for example analyzes the breath of person 10 while also determining a current heartbeat such as lip pulse 3-h4 (preferably from the outside or inside mouth region), when then further also preferably, but not necessarily or at least not necessarily in real-time, communicating with a primary wellness device 1, as many arrangements are possible without departing from the true spirit and teachings provided herein.
Referring next to
As a careful reading of the present invention as well as the related PCT application will show, there are many ways of providing authentication ensuring that any of health measurements sampled, sensed, or otherwise determined by an oral cavity examination device such as breath analyzer 2-2ba are “of” a person 10. An oral examination device such as 2-2ba senses and determines one or more breath detectable characteristics of person 10, where other variations of an oral examination device might alternatively or in combination process a saliva sample or body temperature to determine at least one health measurement. Any of authenticated health measurement(s) determined and authenticated by the combination of at least lip pulse detector 3-5 and breath analyzer 2-2ba, in any of many possible configurations including as an single device, with or without the concurrent interaction of a primary device 1, can then be associated with the health data and any zero or more health regiments being processed by the intermediary (“honest broker”) app executing on a primary wellness device 1 such as 1-1, 1-2 or 1-3 (see
As depicted, in one configuration breath analyzer 2-2ba is further adapted with a fingerprint/heartbeat sensor 2-2-s1 (like sensors 1-1-s, 1-2-s1, 2-1-s1 and 1-3-s1) such that person 10 is preferably identified by a body ID pattern (a) (fingerprint) while substantially simultaneously at least one health measurement is determined based at least in part upon breath from person 10 being input by the analyzer 2-2ba, while also substantially simultaneously a first (A) confirmation body pattern (b) (finger heartbeat 2-h2) is determined by the analyzer 2-2ba while a second (B) confirmation body pattern (b) (lip heartbeat 3-h4) is determined by the analyzer lip pulse detector 3-5, whereupon sufficient correlation of patterns (A) and (B), the substantially concurrent health measurement(s) of analyzer 2-2ba are deemed as authenticated to be “of” person 10.
Still referring to
Referring next to
Referring next to
As a careful reading of the present invention as well as the related PCT application will show, there are many ways of providing authentication ensuring that any of health measurements sampled, sensed, or otherwise determined by an oral cavity examination device such as thermometer 2-3dt are “of” a person 10. An oral examination device such as 2-3dt senses and determines the body temperature of person 10, where other variations of an oral examination device might alternatively or in combination process a saliva sample to determine at least one health measurement. Any of authenticated health measurement(s) determined and authenticated by the combination of at least lip pulse detector 3-5 and thermometer 2-3dt, in any of many possible configurations including as a single device, with or without the concurrent interaction of a primary device 1, can then be associated with the health data and any zero or more health regiments being processed by the intermediary (“honest broker”) app executing on a primary wellness device 1 such as 1-1, 1-2 or 1-3.
As depicted, in one configuration thermometer 2-3dt is further adapted with a fingerprint/heartbeat sensor 2-3-s1 (like sensors 1-1-s, 1-2-s1, 2-1-s1, 1-3-s1 and 2-2-s1) such that person 10 is preferably identified by a body pattern (a) (fingerprint) while substantially simultaneously at least one health measurement is determined based at least in part upon the oral cavity temperature being sensed the thermometer 2-3dt, while also substantially simultaneously a first (A) confirmation body pattern (b) (finger heartbeat 2-h2) is determined by the thermometer 2-3dt while a second (B) confirmation body pattern (b) (lip heartbeat 3-h4) is determined by the analyzer lip pulse detector 3-5, whereupon sufficient correlation of patterns (A) and (B), the substantially concurrent health measurement(s) of thermometer 2-3dt are deemed as authenticated to be “of” person 10.
Still referring to
A careful understanding of the present teachings considering the prior two related applications will show that a traditional wearable such as a smartwatch, “activity tracker,” or similar can be further adapted to operate as a primary wellness device capable of both self-authentication and of paring with and authenticating any other primary, secondary, or tertiary wellness device. This novel ability greatly increases the amount of authenticated health measurements available to the primary device for use in monitoring a person according to one or more public health regiments or protocols.
There are known devices in the marketplace, such as manufactured by Nymi, that are wearables capturing at least a body ID pattern (a) that is a fingerprint, and a body ID pattern (a) that is a heartbeat signature. Nymi recognizes the fingerprint to be more accurate for identification of a person than the heartbeat signature and uses the conjunction of IDs to increase the veracity of initial personal authentication. A constraint of the Nymi solution is that a person must register with a system outside of their personal control, often referred to as a “centralized system,” where registering implies providing personal information for association with at least one biometric, or data derived from at least one biometric, for example a “mathematical template” derived from a fingerprint. The centralized-solutions then allow a person streamlined access through a controlled gateway, where streamlined implies a minimal effort with minimal time to ideally become “fully transparent” to the person, and hence for example the person simply taps an NFC reader with their wearable to unlock a door, authenticate a lab result or open a secure document on their computer. The Nymi solution implements a necessarily non-anonymous method of communication with the physical or virtual access gateway to the premises or document, respectively, where the gateway is associated with a system that maintains information about the person that is confirmed by the wearable.
In the prior related and present teachings, the person's identifying information is not revealed to the access gateway but rather the gateway is assured by communication with the primary device that the person that is attempting to gain access has an authenticate honest broker app on their primary device, where the honest broker app is verifiable to the gateway but otherwise not associated with the person. The honest broker in this sense is acting like as an escort that is both known to and trusted by the premises and known to and trusted by the person, even though the premises and the person are not “known” to each other. It is up to the premises to recognize and trust the honest broker, and the honest broker to recognize and trust the person.
In the prior related applications, the honest broker requires the person to registration one or more personal biometrics that can at any time be used to authenticate the person via correlation with current biometric(s), and in this sense the person becomes recognized by the honest broker.
The related PCT application as well as the present teachings add to this “person recognition” the concept of recognizing that a current health measurement is being made “of the recognized person,” hence “authenticated health measurements.” These authenticated health measurements are then used to derive an authenticated current health status for the recognized person. At some point, when a person desires access to a premises or gathering, all that is necessary is that they identify themselves to the honest broker (using one or more current biometrics) in a manor trustable to the premises, for example (but not limited to) when standing within a premises geofence (see the prior related applications). Once re-identified within for example a premises geofence, the honest broker assures the premises gateway (access control system) that the person the honest broker recognizes has followed and currently complies with a health protocol (“regiment”) recognized by the premises, and hence the health status of the person (whose identity remains unknown to the premises) is “vouched for” by the honest broker.
The present and prior related applications teach the novel use of body ID patterns (a) (e.g., face, finger, voice, iris) and confirmation patterns (b) (e.g., heartbeat) for the authentication of health measurements determined by companion devices, where the diversity of the types of measurements made available by various companion devices (e.g., wearables, patches, smart scales, exercise equipment, breath analyzers, and body fluid analyzers) greatly increases the veracity of the authenticated health status derived by the primary device from the authenticated health measurements “of” the person.
While the present application is taught with respect to a heartbeat determined by a companion wellness device and used as a confirmation body pattern (b), where the confirmation process compares two substantially concurrent heartbeats (b) captured by two electronically paired devices, it is possible that for example that the companion wellness device captures one or more health measurements while concurrently determining as related data the person's current heartbeat/ECG/EKG signature as a body ID pattern (a). Hence, the companion device can work “off-line” to collect health measurements, ensuring that each health measurement determined by the companion device is associated with a substantially concurrently determined heartbeat signature (a). Each health measurement(s) is thus paired with a heartbeat (a) signature, the data of which can then be transmitted at a later time to the primary device for authentication.
In this arrangement, it is also possible that the companion device as a wearable omits sensors for determining a “locked” or “attached to body” state confirmation. Each time the companion wellness device collects a health measurement being naturally “of” a body, what is minimally needed is that the wellness device concurrently determines a body ID pattern (a) (such as a heartbeat signature) using the same “proximal body” “of” the person. This functionality is accomplished for example if the sensed data used at least in part to determine the health measurement is also repurposed at least in part for determining the body ID pattern (a).
Examples are skin contact sensors that determine body measurements while also detecting the ECG/EKG heartbeat signature (a), or a camera that uses image analysis to measure a wound while also detecting a heartbeat signature (a). Given a wearable with multiple sensors (such as a smartwatch or chest band), it is also possible that one set of sensors is responsible for determining the body ID pattern (a) (such as the heartbeat signature), while at the same time other distinct sensors, not necessarily collocated with respect to the person's body but otherwise assured to be measuring the person's body, concurrently capture other health measurements. In this case each distinct health measurement, from multiple possibly non collocated sensors, is validated by a substantially concurrent measurement of a body ID pattern (a) such as the heartbeat signature.
To increase veracity, each non-collocated sensor on the same wellness device can also determine a confirmation body pattern (b) (e.g., the person's current heartbeat), such that the same wellness device uses a first ID sensor that is capturing the body ID pattern (a) (heart ECG/EKG signature) to also determines a pattern (b) (current heartbeat) for authenticating each non-collocated (non-ID) sensor on the same wellness device, where after authenticating the sensed data from each non-ID sensor using pattern (b), the same wellness device can store and later transmit all pattern (b) verified health measurements (from any authenticated non-collocated non-ID sensor) to a companion primary device along with a pattern (a) captured concurrently by the same wellness device's ID sensor.
For example, a chest band wearable, with no locking sensors, is affixed to a person and uses multiple sensors spaced throughout the chest band to sense data about the person every 15 minutes. Each separately spaced/non-collocated sensor (x) determines a current confirmation heartbeat pattern (b)-(x) at the time of measurement (m)-(x), where at least one sensor is an ID-sensor capable of also determining a body ID pattern (a) (such as the heartbeat ECG/EKG signature). A computing element on the chest band or in communication with the chest band aggregates each measurement (m)-(x) with its current pattern (b)-(x) along with one associated pattern (a)-(b) also concurrently captured by the wellness device, where the computing element verifies that each measurement with confirmation pattern (m)-(b)-(x) correlates with the concurrent ID and confirmation (a)-(b) and stores the multiple measurements as (m)-(a), preferably with a time stamp, for later use and sharing with another primary wellness device.
A careful understanding of the present invention will show a system for use in private that is able to determine and otherwise collect multiple on-going health measurements from a multiplicity of connected wellness devices, where this large and varied set of authenticated health data forms a valuable on-going assessment of a person's current health state. This data can for example be used to establish important norms, such as body temperatures at different times of the day, or a person's resting heart rate. Using these norms, it is possible to implement what is referred to in the art as “pre-symptomatic” detection of an infection disease, such as COVID-19 (see “Pre-symptomatic detection of COVID-19 from smartwatch data,” published Nov. 18, 2020, in the journal of Nature Biomedical Engineering, authored by Mishra, et al.). Pre-symptomatic detection of an infectious disease is greatly advantaged by capturing multiple on-going systems, often from multiple/disparate devices, all of which is made “publicly trustable” by the teaching of the prior applications and new teachings provided herein.
The present invention and prior related applications discuss many uses of tracking an authenticated health status, where some uses are for controlling/governing access to a premises or gathering, but other uses are for tracking a verifiable health status of a person, where verifiability is useful for at least insurance and law enforcement purposes. The present invention is also anticipated to have value to the person for tracking their on-going multi-symptom state, which for example can help with disease tracking (see “The wearable device that could help to detect cancer” published Oct. 8, 2021, in Nature).
Those familiar with wellness devices will recognize that significant effort is being expended to create new and better sensors and especially wearable sensors (see “Graphene made with lasers for wearable health devices” published Sep. 3, 2021, on Phys.org). Most of these current and future anticipated devices will be in contact with the skin or under the skin of a person and as such are expected to be able to readily determine a current heartbeat confirmation body pattern (b), and as such with each new advancement in sensor and wearable technology, the present and prior teachings provide an extensible general platform for tracking a personal and publicly trustable health state, where for example a person's smartwatch as a primary wellness device serves as an authenticated health data aggregator and also communicates with their smartphone primary wellness device for providing an alternate user interface and additional authentication methods.
Those familiar with the current state of smartwatches will recognize that there is a wide range in features and cost, where very low-cost devices such as provided by Xiaomi do not include full “watch-like” functionality as compared to an Apple watch, and where “activity trackers” such as the Fitbit offer some form of visual user interface but more minimal watch functionality. As a careful consideration will show, any of these various implementations of wrist wearables, as well as other types of wearables, can all be further adapted as taught in the present and related applications to implement any of primary, secondary, or tertiary wellness devices. As will also be well understood by those familiar with smartwatches, it is also possible to include a camera in the smartwatch to at least perform facial recognition functions as taught herein with respect to the smartphone implementation of a primary device.
The prior PCT application also taught a new form of contact tracing that extended the dataset determined using current contract tracing techniques to include as contact relevant data the current health status of any two or more person's deemed to be coming into contact. These PCT teachings remain applicable with the new primary wellness device teachings provided herein, including the prior PCT teachings for contact tracing and social distance tracking with respect to a novel “active mask” technology. Hence, the present invention's primary devices, both wearable and non-wearable, are anticipated to perform contact tracking with other wearable or non-wearable primary devices as well as the prior taught “active mask” technology.
The present provisional application is a continuation-in-part of the PCT Non-Provisional Application No. PCT/US2021/029186 entitled GUEST TRACKING AND ACCESS CONTROL USING HEALTH METRICS filed on Apr. 26, 2021. This application claims the benefit of U.S. Provisional Application No. 63/271,360 entitled MEASUREMENT AUTHENTICATING WELLNESS DEVICES filed on Oct. 25, 2021.
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/US2022/047511 | 10/23/2022 | WO |
Number | Date | Country | |
---|---|---|---|
63271360 | Oct 2021 | US |