Out of band authentication with user device

Patent metadata

Field	Value
Publication number	US-9706404-B2
Application number	US-201615091502-A
Country	US
Kind code	B2
Filing date	Apr 5, 2016
Priority date	Apr 7, 2015
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

A user utilizing a first user device can request to be authenticated to a web site. The first user device may send an authentication request to the server operating the web site. The server may then send a first signal to a second user device associated with the user. A second signal can be generated based on reading the first signal. The second user device may send the second signal to the server. The server can compare the first signal and second signal and may authenticate the user if the signals match.

First claim

What is claimed:

1. A method comprising:
receiving, by a server computer, an authentication request from a first user device associated with a user;
transmitting, by the server computer, a first signal to a second user device associated with the user, the first signal comprising data representing a vibration pattern;
receiving, by the server computer, a second signal from the second user device that comprises the data representing the vibration pattern, wherein the second signal is generated using a motor based on the second user device detecting the first signal by one or more of an accelerometer associated with the second user device and a microphone associated with the second user device;
determining, by the server computer, that the second signal is valid based on the transmitted first signal; and
authenticating, by the server computer, the user based on the determination that the second signal is valid.

2. The method of claim 1 , further comprising:
transmitting, by the server computer, a request for a password to the first user device associated with the user; and
receiving, by the server computer, input from the first user device that includes the requested password.

3. The method of claim 2 , wherein authenticating the user is further based on the input from the first user device.

4. The method of claim 1 , further comprising maintaining, by the server computer, enrollment information identifying the second user device associated with the user for use in authenticating the user.

5. The method of claim 4 , wherein authenticating the user is further based on validating the second user device utilizing the enrollment information.

6. The method of claim 1 , further comprising further comprising maintaining, by the server computer, network information identifying a home area network associated with the user for use in authenticating the user.

7. The method of claim 6 , wherein the second signal is generated further based on the second user device reading the first signal and identifying that the second user device is connected to the home area network associated with the user.

8. The method of claim 6 , further comprising appending an identifier for the home area network to the second signal after generation of the second signal by the second user device.

9. The method of claim 8 , wherein authenticating the user is further based on the identifier for the home area network and the network information associated with the user.

10. The method of claim 1 , further comprising maintaining geo-fence information associated with the user.

11. The method of claim 10 , wherein the second signal is generated further based on the second user device reading the first signal and identifying that a location of the second user device is within a geo-fence identified by the geo-fence information associated with the user.

12. The method of claim 10 , wherein authenticating the user is further based on the geo-fence information associated with the user.

13. The method of claim 1 , further comprising maintaining threshold information that identifies a certain threshold associated with authenticating the user utilizing the second signal.

14. The method of claim 13 , wherein authenticating the user is further based on a comparison of the first signal and the second signal exceeding a particular threshold identified by the threshold information.

15. A server computer comprising:
a processor; and
a memory element including instructions that, when executed with the processor, cause the system to, at least:
receive an authentication request from a first user device associated with a user;
transmit a first signal to a second user device associated with the user, the first signal comprising data representing a vibration pattern;
receive a second signal from the second user device that comprises the data representing the vibration pattern, wherein the second signal is generated sing a motor based on the second user device detecting the first signal by one or more of an accelerometer associated with the second user device and a microphone associated with the second user device;
determine that the second signal is valid based on the transmitted first signal; and
authenticate the user based on the determination that the second signal is valid.

16. The server of claim 15 , wherein the first signal is an audio signal.

17. A user device comprising:
a processor; and
a memory element including instructions that, when executed with the processor, cause the user device to, at least:
receive, from a server computer, a first signal based on an authentication request associated with a user, the first signal comprising data representing a vibration pattern;
generate, using a motor associated with the user device, a second signal that comprises the data representing the vibration pattern based on detecting the first signal by one or more of an accelerometer associated with the user device and a microphone associated with the user device;
transmit, to the server computer, the second signal, wherein the user is authenticated based on validating the second signal, the second signal validated using the first signal.

Assignees

• Visa Int Service Ass

Inventors

• Bansal Parveen

Classifications

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W4/021

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title