Authentication system

Patent metadata

Field	Value
Publication number	US-10776479-B2
Application number	US-201715431718-A
Country	US
Kind code	B2
Filing date	Feb 13, 2017
Priority date	Aug 28, 2013
Publication date	Sep 15, 2020
Grant date	Sep 15, 2020

Abstract

Systems and methods for providing authentication include receiving an authentication passcode input through an input device of a user device from a first user. The first user is authenticated in response to the authentication passcode input matching at least one user authentication passcode in a database, and an authentication time period is associated with the authentication of the first user and allows the first user access to at least one application on the user device. A plurality of authentication factors are then detected using the user device, and plurality of authentication factors are not an authentication passcode input received through the input device. The plurality of authentication factors are then determined to match the at least one authentication profile in the database and, in response, the authentication time period is extended such that the first user is allowed continued access to the at least one application on the user device.

First claim

What is claimed is:

1. A device comprising:
a non-transitory memory storing instructions; and
one or more hardware processors coupled to the non-transitory memory and configured to read the instructions from the non-transitory memory to cause the device to perform operations comprising:
receiving an authentication code that enables an authentication of a plurality of applications on the device;
determining the authentication code matches a stored authentication code associated with the plurality of applications on the device, the stored authentication code stored in an application profile;
in response to the determination that the authentication code matches the stored authentication code, authenticating a user of the device for a first application and a second application of the plurality of applications, wherein the second application comprises a payment application associated with an online payment provider, and wherein the authenticating the user for the second application comprises enabling a usage of a payment account with the online payment provider at a first spending limit within the second application;
determining a timeout of an authentication of the user for the first application and the second application from the authenticating;
receiving an authentication factor at the device after the timeout of the authentication, wherein the authentication factor comprises a first touch input on a display of the device;
determining a first user profile for the device based on the first touch input matching a stored first authentication factor saved in the first user profile, wherein the stored first authentication factor is associated with a previous use of the device;
determining the authentication factor matches a stored first authentication factor, wherein the stored first authentication factor is saved in a first user profile;
allowing a continued access to the first application based in part on the determination that the authentication factor received matches the stored first authentication factor; and
restricting an access to the second application on the device based on the first user profile and the determination that the authentication factor received matches the stored first authentication factor, wherein the access to the second application is restricted while the continued access to the first application is allowed, and wherein the restricting the access comprises enabling usage of the payment account at a second spending limit less than the first spending limit within the second application.

2. The device of claim 1 , wherein the operations further comprise:
determining if the authentication factor further matches a stored second authentication factor, wherein the stored second authentication factor is stored in a second user profile; and
determining whether to extend the continued access to the first application based in part on if the authentication factor matches the stored second authentication factor.

3. The device of claim 2 , wherein the operations further comprise:
requesting the authentication code if the authentication factor does not match the stored second authentication factor.

4. The device of claim 2 , wherein the authentication factor further comprises a second touch input received on the display of the device and the second touch input is associated with the second user profile.

5. The device of claim 1 , wherein the first user profile has a first restriction level for the first application and a second restriction level for the second application.

6. The device of claim 1 , wherein the authentication factor further comprises at least one of a voice sample or an image.

7. The device of claim 2 , wherein the stored first authentication factor is associated with a first user and the stored second authentication factor is associated with a second user.

8. The device of claim 1 , wherein the authentication factor further comprises a detected wireless environment, and wherein the detected wireless environment matches a stored wireless environment in a wireless authentication profile associated with the first user profile.

9. A method for providing authentication, comprising
receiving an authentication code that enables an authentication of a plurality of applications on a device;
determining the authentication code matches a stored authentication code associated with the plurality of applications on the device, the stored authentication code stored in an application profile;
in response to the determining that the authentication code matches the stored authentication code, authenticating a user of the device for a first application and a second application of the plurality of applications, wherein the second application comprises a payment application associated with an online payment provider, and wherein the authenticating the user for the second application comprises enabling a usage of a payment account with the online payment provider at a first spending limit within the second application;
determining a timeout of an authentication of the user for the first application and the second application from the authenticating;
receiving an authentication factor at the device, wherein the authentication factor comprises at least one of a voice sample or an image;
determining a first user profile for the device based on the at least one of the voice sample or the image matching a stored first authentication factor saved in the first user profile, wherein the stored first authentication factor is associated with a previous use of the device;
determining if the authentication factor matches a stored first authentication factor stored in a first user profile;
allowing a continued access to the first application based in part on determining that the authentication factor received matches the stored first authentication factor; and
restricting an access to the second application on the device based on the first user profile and the determining that the authentication factor received matches the stored first authentication factor, wherein the access to the second application is restricted while the continued access to the first application is allowed, and wherein the restricting the access comprises enabling a usage of the payment account at a second spending limit less than the first spending limit within the second application.

10. The method of claim 9 , further comprising:
determining if the authentication factor further matches a stored second authentication factor, wherein the stored second authentication factor is stored in a second user profile; and
determining whether to extend the continued access to the first application based in part on the determining if the authentication factor matches the stored second authentication factor.

11. The method of claim 10 , further comprising:
requesting the authentication code if the authentication factor does not match the stored second authentication factor.

12. The method of claim 9 , wherein the authentication factor further comprises a first touch input received on a display of the device and the first touch input is associated with the first user profile.

13. The method of claim 10 , wherein the first user profile has a first restriction level for the first application and a second restriction level for the second application.

14. The method of claim 9 , wherein the authentication factor further comprises a detected wireless environment, and wherein the detected wireless environment matches a stored wireless environment in a wireless authentication profile associated with the first user profile.

15. A non-transitory machi

Assignees

• Paypal Inc

Inventors

• Chatterton Geoffrey W
• Khanna Ramaneek
• Nichols Timothy C

Classifications

• G06Q20/40 Primary

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• G06Q20/42

  Confirmation, e.g. check or permission by the legal debtor of payment · CPC title

• G06Q20/40145

  Biometric identity checks · CPC title

• G06Q20/3224

  Transactions dependent on location of M-devices · CPC title