Location identification in multi-factor authentication

Patent metadata

Field	Value
Publication number	US-11743267-B2
Application number	US-202217662760-A
Country	US
Kind code	B2
Filing date	May 10, 2022
Priority date	Sep 9, 2019
Publication date	Aug 29, 2023
Grant date	Aug 29, 2023

Abstract

Disclosed herein are system, method, and device embodiments for implementing location identification in multi-factor authentication (MFA). In an example embodiment, a user service may present a geographic map based on a MFA process, and receive an authentication attempt including a geographic indicator and interaction information. Further, the system may determine whether the authentication attempt was made by a human based at least in part on the interaction information, determine whether the geographic indicator matches an expected response, and send, to an electronic device, an authentication result indicating whether geographic information was determined to be selected by a human and the geographic indicator was determined to match the expected response.

First claim

What is claimed is:

1. A computer-implemented method for authenticating an electronic device, the method comprising:
(a) presenting, via the electronic device, a geographic map with a challenge based on a multi-factor authentication (MFA) process to log into an account, the challenge requiring a user to provide authentication input via the geographic map by marking a particular geographic location on the geographic map;
(b) receiving, from the electronic device, a geographic indicator marking the particular geographic location selected by the user;
(c) authenticating the electronic device based on the geographic indicator matching an expected response based on the geographic indicator being within a dynamic threshold that is based on a magnification level; and
wherein the dynamic threshold is a computer-implemented geofence around the expected response.

2. The computer-implemented method of claim 1 , further comprising setting the dynamic threshold based on the magnification level selected by the user.

3. The computer-implemented method of claim 2 , wherein the magnification level is set by the user via a graphical user interface (GUI) presented on the electronic device.

4. The computer-implemented method of claim 3 , further comprising applying a further dynamic threshold based on an increased magnification level.

5. The computer-implemented method of claim 1 , wherein the matching in (c) is based on a distance between coordinates corresponding to the expected response and the geographic indicator being within the dynamic threshold.

6. The computer-implemented method of claim 1 , wherein the geofence is smaller when the magnification level is increased.

7. A non-transitory computer readable medium including instructions for authenticating an electronic device that when processed by a computing system cause the computing system to perform operations comprising:
(a) presenting, via the electronic device, a geographic map with a challenge based on a multi-factor authentication (MFA) process to log into an account, the challenge requiring a user to provide authentication input via the geographic map by marking a particular geographic location on the geographic map;
(b) receiving, from the electronic device, a geographic indicator marking the particular geographic location selected by the user;
(c) authenticating the electronic device based on the geographic indicator matching an expected response based on the geographic indicator being within a dynamic threshold that is based on a magnification level;
wherein the dynamic threshold is a computer-implemented geofence around the expected response.

8. The non-transitory computer readable medium of claim 7 , wherein the operations further comprise setting the dynamic threshold based on the magnification level selected by the user.

9. The non-transitory computer readable medium of claim 8 , wherein the magnification level is set by the user via a graphical user interface (GUI) presented on the electronic device.

10. The non-transitory computer readable medium of claim 9 , wherein the operations further comprise applying a further dynamic threshold based on an increased magnification level.

11. The non-transitory computer readable medium of claim 7 , wherein the matching in (c) is based on a distance between coordinates corresponding to the expected response and the geographic indicator being within the dynamic threshold.

12. The non-transitory computer readable medium of claim 7 , wherein the geofence is smaller when the magnification level is increased.

13. A computing system for authenticating an electronic device comprising:
a memory configured to store instructions;
a processor, coupled to the memory, configured to processed the stored instructions to:
(a) present, via the electronic device, a geographic map with a challenge based on a multi-factor authentication (MFA) process to log into an account, the challenge requiring a user to provide authentication input via the geographic map by marking a particular geographic location on the geographic map;
(b) receive, from the electronic device, a geographic indicator marking the particular geographic location selected by the user;
(c) authenticate the electronic device based on the geographic indicator matching an expected response based on the geographic indicator being within a dynamic threshold that is based on a magnification level;
wherein the dynamic threshold is a computer-implemented geofence around the expected response.

14. The computing system of claim 13 , wherein the processor is further configured to set the dynamic threshold based on the magnification level selected by the user.

15. The computing system of claim 14 , wherein the magnification level is set by the user via a graphical user interface (GUI) presented on the electronic device.

16. The computing system of claim 15 , wherein the processor is further configured to apply a further dynamic threshold based on an increased magnification level.

17. The computing system of claim 13 , wherein the matching in (c) is based on a distance between coordinates corresponding to the expected response and the geographic indicator being within the dynamic threshold.

18. The computing system of claim 13 , wherein:
the geofence is smaller when the magnification level is increased.

Assignees

• Capital One Services Llc

Inventors

• Cuan Lukiih
• Loucks Eric
• Edwards Joshua

Classifications

• H04L63/107 Primary

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L9/3271

  using challenge-response · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title