Mutli-factor authentication systems and methods

Patent metadata

Field	Value
Publication number	US-11329979-B1
Application number	US-202016830634-A
Country	US
Kind code	B1
Filing date	Mar 26, 2020
Priority date	Dec 2, 2015
Publication date	May 10, 2022
Grant date	May 10, 2022

Abstract

Systems and methods are provided for secure access to data actions. In one embodiment, secondary device data is associated with a user profile, such that the secondary device data may be subsequently used to authenticate a user associated with the user profile.

First claim

The invention claimed is:

1. A tangible, non-transitory, computer-readable medium, comprising computer-readable instructions that, when executed by one or more processors of a computer, cause the computer to:
automatically identify one or more secondary devices communicatively coupled to, but different than, a client system that will access a secured remote computer system, by:
polling, via a client device, for an indication of one or more electronic devices communicatively coupled to the client device;
identifying the one or more electronic devices as the one or more secondary devices;

generate secondary authentication information based upon one or more attributes of the one or more secondary devices; and
associate the secondary authentication information with a user identifier, such that user identifier can be subsequently authenticated based upon the secondary authentication information.

2. The computer-readable medium of claim 1 , comprising computer-readable instructions that, when executed by the one or more processors of the computer, cause the computer to:
provide a graphical user interface that requests identification of the one or more secondary devices should be associated with the user identifier via a user input;
receive the user input, wherein the user input indicates that a subset of the one or more secondary devices that should not be associated with the user identifier; and
in response to receiving the user input, generate the secondary authentication information, wherein the secondary authentication information comprises identification information for one or more secondary devices other than the subset of the one or more secondary devices.

3. The computer-readable medium of claim 1 , wherein the one or more electronic devices are coupled via Bluetooth communications, Wi-fi communications, near field communications (NFC), universal serial bus (USB) communications, or any combination thereof.

4. The computer-readable medium of claim 1 , wherein the one or more attributes of the one or more secondary devices, comprises a media access control (MAC) address of the one or more secondary devices.

5. The computer-readable medium of claim 1 , wherein the one or more attributes of the one or more secondary devices, comprises an indication of software on the one or more secondary devices.

6. The computer-readable medium of claim 1 , wherein the one or more attributes of the one or more secondary devices, comprises a serial number of the one or more secondary devices.

7. The computer-readable medium of claim 1 , wherein the one or more attributes of the one or more secondary devices, comprises a reference to a cookie or token stored on the one or more secondary devices.

8. The computer-readable medium of claim 1 , comprising computer-readable instructions that, when executed by the one or more processors of the computer, cause the computer to:
identify a paired set of one or more devices communicatively coupled to, but different than, the one or more secondary devices; and
generate secondary authentication information based upon one or more attributes of the paired set of one or more devices.

9. The computer-readable medium of claim 8 , comprising computer-readable instructions that, when executed by the one or more processors of the computer, cause the computer to:
identify the paired set of one or more devices by recursively polling for paired electronic devices.

10. A computer-implemented method, comprising:
automatically identifying one or more secondary devices communicatively coupled to, but different than, a client system that will access a secured remote computer system, by:
polling, via a client device, for an indication of one or more electronic devices communicatively coupled to the client device;
identifying the one or more electronic devices as the one or more secondary devices;

generating secondary authentication information based upon one or more attributes of the one or more secondary devices; and
associating the secondary authentication information with a user identifier, such that user identifier can be subsequently authenticated based upon the secondary authentication information.

11. The computer-implemented method of claim 10 , comprising:
providing a graphical user interface that requests identification of the one or more secondary devices should be associated with the user identifier via a user input;
receiving the user input, wherein the user input indicates that a subset of the one or more secondary devices that should not be associated with the user identifier; and
in response to receiving the user input, generating the secondary authentication information, wherein the secondary authentication information comprises identification information for one or more secondary devices other than the subset of the one or more secondary devices.

12. The computer-implemented method of claim 10 , wherein the one or more electronic devices are coupled via Bluetooth communications, Wi-fi communications, near field communications (NFC), universal serial bus (USB) communications, or any combination thereof.

13. The computer-implemented method of claim 10 , wherein the one or more attributes of the one or more secondary devices, comprises a media access control (MAC) address of the one or more secondary devices, an indication of software on the one or more secondary devices, a serial number of the one or more secondary devices, a reference to a cookie or token stored on the one or more secondary devices, or any combination thereof.

14. The computer-implemented method of claim 10 , comprising:
identifying a paired set of one or more devices communicatively coupled to, but different than, the one or more secondary devices; and
generating the secondary authentication information based upon one or more attributes of the paired set of one or more devices.

15. The computer-implemented method of claim 14 , comprising:
identifying the paired set of one or more devices by recursively polling for paired electronic devices.

16. A system, comprising:
a secured computer system;
a client system, configured to access the secured computer system;
one or more secondary devices communicatively coupled to, but different than, the client system;
wherein the client system is configured to:
automatically identify the one or more secondary devices, by
polling, via the client system, for an indication of one or more electronic devices communicatively coupled to the client system; and
identifying the one or more electronic devices as the one or more secondary devices; and

generate secondary authentication information based upon one or more attributes of the one or more secondary devices; and

wherein the secured computer system is configured to:
receive the secondary authentication information from the client system; and
associate the secondary authentication information with a user identifier, such that user identifier can be subsequently authenticated based upon the secondary authentication information.

17. The system of claim 16 , comprising:
a paired set of one or more devices communicatively coupled to, but different than, the one or more secondary devices;
wherein the client system is configured to identify the paired set of one or more devices; and
generate the secondary authentication information based upon one or more attributes of the paired set of one or more devices.

Assignees

• Usaa

Inventors

• Prasad Bharat
• Oakes Iii Charles Lee
• Vijayvergia Gunjan C
• Jayapalan Vijay
• Buckingham Thomas Bret

Classifications

• H04L63/0442

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• H04L9/50 Primary

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title