Determining user authentication requirements along a continuum based on a current state of the user and/or the attributes related to the function requiring authentication

Patent metadata

Field	Value
Publication number	US-10050962-B2
Application number	US-201514928312-A
Country	US
Kind code	B2
Filing date	Oct 30, 2015
Priority date	Feb 7, 2014
Publication date	Aug 14, 2018
Grant date	Aug 14, 2018

Abstract

Systems, apparatus, methods, and computer program products are provided for determining a user's authentication requirements/credentials for function requiring authentication based on determining a location along an authentication continuum. The location along the authentication continuum defines the degree of authentication/credentials required to access the function and is determined based on a current state of the user and/or function attributes. The more or less that is known about the current state of the user the more or less likely the user is the user that is attempting to access the function and, thus, the authentication requirements required to access the function can be adjusted according (increased or decreased).

First claim

What is claimed is:

1. A system for determining user authentication requirements, the system comprising:
a mobile communication device including a memory, at least one processor in communication with the memory, and a Global Positioning System (GPS) mechanism; and
an authentication requirements module stored in the memory, executable by the processor and configured to,
store a geographic area and a period of time associated with the geographic area, wherein the geographic area and the period of time are dynamically defined by the provider of a service,
receive, from the mobile communication device, a request for a user to access the service, wherein the service requires authentication prior to the user accessing the service,
in response to receiving the request, instruct the GPS mechanism to determine a current physical location of the mobile communication device and a time associated with the request, and
in response to determining that (i) the mobile communication device is currently located within the geographic area, and (ii) the current time is within the period of time, request the user to provide decreased authentication credentials, wherein the decreased authentication credentials include authentication that differ from standard authentication credentials, further comprising a service access module stored in the memory, executable by the processor and configured to determine a level of access available to the user of the service upon the user providing the determined authentication requirements, wherein the level of access defines functionality available to the user within the service based on the decreased authentication credentials required, wherein the level of access is granted to the user in response to the user providing the decreased authentication credentials,
wherein the authentication requirements module is further configured to, in response to determining at least one of (1) the apparatus is currently located outside of the geographic area, (2) the current time is outside of the period of time, determine a level of authentication required for the user to access the service based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein the level of authentication is from amongst a plurality of levels of authentication, wherein the user is provided access to the service in response to the user inputting the determined level of authentication required.

2. The system of claim 1 , wherein the authentication requirements module is further configured to determine the level of authentication required based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein each level of authentication is defined by at least one of a predetermined distance threshold from the geographic location or a predetermined time threshold from the period of time.

3. The system of claim 1 , wherein the authentication requirements module is further configured to determine a point along an authentication continuum based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein the point along the authentication continuum corresponds to predetermined authentication credentials.

Assignees

• Bank Of America

Inventors

• Grigg David M
• Bertanzetti Peter John
• Burrell Charles Jason
• Hanson Carrie Anne
• Johansen Joseph Neil
• Toth Michael E

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06F2221/2137

  Time limited access, e.g. to a computer or data · CPC title

• H04W12/68 Primary

  Gesture-dependent or behaviour-dependent · CPC title