Systems and methods of multi-factor authentication utilizing a vehicle

Patent metadata

Field	Value
Publication number	US-11533614-B1
Application number	US-202016933542-A
Country	US
Kind code	B1
Filing date	Jul 20, 2020
Priority date	Jul 31, 2019
Publication date	Dec 20, 2022
Grant date	Dec 20, 2022

Abstract

Embodiments disclosed herein describe vehicle-based authentication protocols. An illustrative authentication server may receive a request to authenticate a user connected from a mobile device. The authentication server may transmit a request to the mobile device to transmit geolocation data of the mobile device. In response, the mobile device may transmit a stream of its geolocation data. Based upon the received geolocation data stream, the authentication server may determine that the mobile device in a motion and select a vehicle-based authentication protocol to request geolocation data of a trusted vehicle. The authentication server may compare the mobile device geolocation data stream and the vehicle geolocation data stream to determine a similarity score. If the similarity score is above a threshold, the authentications server may authenticate the user. In some cases, the authentication server may authenticate the user if the mobile device is connected to the trusted vehicle.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a computer, a first request via a phone call from a mobile device, wherein the phone call is configured to initiate an authentication process for a user;
transmitting, by the computer, a second request to an application on the mobile device to stream geolocation data of the mobile device in response to receiving the first request;
receiving, by the computer, a first stream of geolocation data associated with the mobile device from the application in response to transmitting the second request;
determining, by the computer, that the mobile device is in motion based on the first stream of geolocation data; and
authenticating, by the computer, the user based on a vehicle-based authentication protocol in response to determining that the mobile device is in motion, wherein the vehicle-based authentication protocol is configured to cause the computer to:
query a database to identify a vehicle associated with the user based on a phone number that corresponds to the phone call;
transmit a third request to the application on the mobile device to retrieve a second stream of geolocation data from a vehicle system associated with the vehicle;
receive the second stream of geolocation data from the application, wherein the application is configured to receive the second stream of geolocation data from the vehicle system; and
compare the first stream of geolocation data to the second stream of geolocation data.

2. The method of claim 1 , wherein the second stream of geolocation data is received from one or more sensors disposed on the vehicle and wherein authenticating the user comprises:
comparing, by the computer, the first stream of geolocation data and the second stream of geolocation data to determine a similarity score; and
authenticating, by the computer, the user in response to the computer determining that the similarity score exceeds a predetermined threshold.

3. The method of claim 2 , wherein the one or more sensors are part of a vehicle dashboard system.

4. The method of claim 3 , comprising authenticating the user based on the vehicle-based authentication protocol in response to determining that the mobile device is communicatively coupled to the vehicle dashboard system.

5. The method of claim 4 , wherein the mobile device is communicatively coupled to the vehicle dashboard system via Bluetooth.

6. A system, comprising:
a vehicle dashboard system disposed within a vehicle;
a computing device associated with a user; and
a server system comprising at least one processor configured to perform operations comprising:
receiving a first request via a phone call from a computing device, wherein the phone call is configured to initiate an authentication process for a user;
transmitting a second request to an application on the computing device to stream geolocation data of the computing device in response to receiving the first request;
receiving a first stream of geolocation data associated with the computing device from the application in response to transmitting the second request;
determining that the computing device is in motion based on the first stream of geolocation data; and
authenticating the user based on a vehicle-based authentication protocol in response to determining that the computing device is in motion by:
querying a database to identify registration data indicative of an association between the vehicle and a phone number that corresponds to the phone call;
transmitting a third request to the application to retrieve a second stream of geolocation data from the vehicle dashboard system;
receiving the second stream of geolocation data from the application, wherein the application is configured to receive the second stream of geolocation data from the vehicle dashboard system; and
comparing the first stream of geolocation data to the second stream of geolocation data.

7. The system of claim 6 , wherein the vehicle dashboard system comprises a display, a microphone, one or more speakers, one or more buttons, one or more processors, or any combination thereof.

8. The system of claim 7 , wherein
the second stream of geolocation data is received from one or more sensors that are part of the vehicle dashboard system, and wherein the at least one processor is configured to authenticate the user by:
comparing the first stream of geolocation data and the second stream of geolocation data to determine a similarity score; and
authenticating the user in response to determining that the similarity score exceeds a predetermined threshold.

9. The system of claim 7 , wherein the phone call is received via a packet-switching network.

10. The system of claim 7 , wherein the at least one processor is configured to determine that the computing device is in motion based on a plurality of geolocations and a plurality of times associated with the computing device, wherein the plurality of geolocations and the plurality of times are part of the first stream of geolocation data.

11. The system of claim 7 , wherein the at least one processor is configured to authenticate the user based on the vehicle-based authentication protocol in response to determining that the computing device is communicatively coupled to the vehicle dashboard system.

12. The system of claim 11 , wherein the computing device is communicatively coupled to the vehicle dashboard system via Bluetooth.

13. A non-transitory computer-readable medium comprising computer-executable instructions that, when executed, are configured to cause one or more processors to perform operations comprising:
receiving a first request via a phone call from a computing device, wherein the phone call is configured to initiate an authentication process for a user;
transmitting a second request to an application on the computing device to stream geolocation data of the computing device in response to receiving the first request;
receiving a first stream of geolocation data associated with the computing device from the application in response to transmitting the second request;
determining that the computing device is in motion based on the first stream of geolocation data; and
authenticating the user based on a vehicle-based authentication protocol in response to determining that the computing device is in motion, wherein the vehicle-based authentication protocol is configured to cause the one or more processors to perform the operations comprising:
querying a database to identify a vehicle associated with the user based on a phone number that corresponds to the phone call;
transmitting a third request to the application on the computing device to retrieve a second stream of geolocation data from a vehicle system associated with the vehicle;
receiving the second stream of geolocation data from the application, wherein the application is configured to receive the second stream of geolocation data from the vehicle system; and
comparing the first stream of geolocation data to the second stream of geolocation data.

14. The non-transitory computer-readable medium of claim 13 , wherein the computer-executable instructions that, when executed, are configured to cause one or more processors to determine that the computing device is in motion based on a plurality of geolocations and a plurality of times associated with the computing device, wherein the plurality of geolocations and the plurality of times are part of the first stream of geolocation data.

15. The non-transitory computer-readable medium of claim 13 , wherein the computer-executable instructions that, when executed, are configured

Assignees

• Uipco Llc
• Usaa

Inventors

• Russell Ryan
• Dziuk Janelle
• Yarbrough Gregory
• Osterkamp Bryan J

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/065

  Continuous authentication · CPC title

• H04W4/02

  Services making use of location information · CPC title

• G06F18/22 Primary

  Matching criteria, e.g. proximity measures · CPC title

• H04W4/70

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title