Systems and methods for location-based authentication

Patent metadata

Field	Value
Publication number	US-9525972-B2
Application number	US-201414201248-A
Country	US
Kind code	B2
Filing date	Mar 7, 2014
Priority date	Mar 7, 2014
Publication date	Dec 20, 2016
Grant date	Dec 20, 2016

Abstract

Systems and methods are disclosed for performing location-based authentication using location-aware devices. One method includes: receiving an access request comprising authentication credentials and a first location from a first location-aware device; receiving a second location from a second location-aware device associated with the authentication credentials; and upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials.

First claim

What is claimed is:

1. A method, comprising:
receiving an access request comprising authentication credentials, a first timestamp, and a first location from a first location-aware user device;
receiving a second timestamp and a second location from a second location-aware user device associated with the authentication credentials;
upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials;
upon determining that the first location and second location are not within a pre-determined distance, requesting and receiving a third timestamp and third location from the first location-aware user device, and a fourth timestamp and fourth location from the second location-aware user device;
using the first timestamp, first location, third timestamp, and third location to determine a first speed and direction of movement of the first location-aware user device;
using the second timestamp, second location, fourth timestamp, and fourth location to determine a second speed and direction of movement of the second location-aware user device;
upon determining that the first speed and direction of movement of the first location-aware user device are within pre-determined thresholds of the second speed and direction of movement of the second location-aware user device, authenticating the authentication credentials.

2. The method of claim 1 , further comprising:
in response to determining that a number of successful authentications of the authentication credentials within a pre-determined distance of the first location is above a pre-determined threshold, automatically designating the first location, and a pre-determined distance therefrom, as a trusted location.

3. The method of claim 1 , wherein authenticating the authentication credentials further comprises:
upon determining that the first location is not a trusted location, sending an acknowledgement request to the second location-aware device.

4. The method of claim 3 , further comprising:
upon receiving a confirmation of the acknowledgement request from the second location-aware device, determining whether the first location and second location are within a pre-determined distance from each other; and
upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials.

5. The method of claim 3 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware device, denying the access request.

6. The method of claim 3 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware device, disallowing further access requests from the first location-aware device.

7. A system for performing location-based authentication, the system including:
a storage device storing instructions for managing location-based authentication; and
a processor configured to execute the instructions to perform a method including:
receiving an access request comprising authentication credentials, a first timestamp, and a first location from a first location-aware user device;
receiving a second timestamp and a second location from a second location-aware user device associated with the authentication credentials;
upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials;
upon determining that the first location and second location are not within a pre-determined distance, requesting and receiving a third timestamp and third location from the first location-aware user device, and a fourth timestamp and fourth location from the second location-aware user device;
using the first timestamp, first location, third timestamp, and third location to determine a first speed and direction of movement of the first location-aware user device;
using the second timestamp, second location, fourth timestamp, and fourth location to determine a second speed and direction of movement of the second location-aware user device; and
upon determining that the first speed and direction of movement of the first location-aware user device are within pre-determined thresholds of the second speed and direction of movement of the second location-aware user device, authenticating the authentication credentials.

8. The system of claim 7 , further comprising:
in response to determining that a number of successful authentications of the authentication credentials within a pre-determined distance of the first location is above a pre-determined threshold, automatically designating the first location, and a pre-determined distance therefrom, as a trusted location.

9. The system of claim 7 , wherein authenticating the authentication credential comprises, upon determining that the first location is not a trusted location, sending an acknowledgement request to the second location-aware device.

10. The system of claim 9 , further comprising:
upon receiving a confirmation of the acknowledgement request from the second location-aware device, determining whether the first location and second location are within a pre-determined distance from each other; and
upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials.

11. The system of claim 9 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware device, denying the access request.

12. The system of claim 9 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware device, disallowing further access requests from the first location-aware device.

13. A non-transitory computer-readable medium that, when executed by a computer system, cause the computer system to perform a method for performing location-based authentication, the method including:
receiving an access request comprising authentication credentials, a first timestamp, and a first location from a first location-aware user device;
receiving a second timestamp and a second location from a second location-aware user device associated with the authentication credentials;
upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials;
upon determining that the first location and second location are not within a pre-determined distance, requesting and receiving a third timestamp and third location from the first location-aware user device, and a fourth timestamp and fourth location from the second location-aware user device;
using the first timestamp, first location, third timestamp, and third location to determine a first speed and direction of movement of the first location-aware user device;
using the second timestamp, second location, fourth timestamp, and fourth location to determine a second speed and direction of movement of the second location-aware user device; and
upon determining that the first speed and direction of movement of the first location-aware user device are within pre-determined thresholds of the second speed and direction of movement of the second location-aware user device, authenticating the authentication credentials.

14. The non-transitory computer-readable medium of claim 13 , the method further comprising:
in response to determining that a number of successful authentications of the authentication credentials within a pre-determined distance of the first location

Assignees

• Aol Inc

Inventors

• Raounak El-Amine M

Classifications

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W4/029

  Location-based management or tracking services · CPC title

• H04L43/106

  using time related information in packets, e.g. by adding timestamps · CPC title

• H04W4/025

  using location based information parameters · CPC title