US 10,771,458 B1Granted

Proximity-based user authentication

AssigneeMicoStrategy Incorporated

InventorsFeng Xia, Siamak Ziraknejad, Liang Chen, Quan Jia

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, for automatically providing a user with access to a secured resource. In some implementations, a client device detects that a second device that has been designated as an authentication for a user is within a predetermined level of proximity to the client device. The client device sends data indicating that the second device is within the predetermined level of proximity of the client device to a server system. The client device receives data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device. The client device sends an authentication request to the server system. The client device receives data indicating approval of the authentication request and provides access to the resource.

Claims20

Dependent claims

A method comprising:

detecting, by a client device, a change in a proximity status of a second device that has been designated as an authentication token for a user, wherein the change in the proximity status indicates that the second device has entered a predetermined level of proximity of the client device after previously being outside the predetermined level of proximity;
in response to detecting the change in proximity status indicating that the second device has entered the predetermined level of proximity to the client device, sending, by the client device and to a server system, a proximity status change message indicating that the proximity status has changed such that the second device has entered the predetermined level of proximity of the client device;
after sending the proximity status change message indicating that the second device entered the predetermined level of proximity of the client device, determining, by the client device, that the proximity status of the second device is maintained based on detecting the second device remaining within the predetermined level of proximity of the client device;
after determining that the proximity status of the second device is maintained, receiving, by the client device, data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device;
in response to receiving the data indicating the attempt to access the resource, sending, by the client device, an authentication request to the server system;
receiving, by the client device and from the server system, data indicating approval of the authentication request determined based on the proximity status of the second device that the client device determined before the attempt to access the resource;
and
providing, by the client device, access to the resource based on receiving the data indicating approval of the authentication request.

5 more elements

A system comprising:

one or more computers;
and
one or more storage devices storing instructions that, when executed by the one or more computers, cause the one or more computers to perform operations comprising:
detecting, by a client device, a change in a proximity status of a second device that has been designated as an authentication token for a user, wherein the change in the proximity status indicates that the second device has entered a predetermined level of proximity of the client device after previously being outside the predetermined level of proximity;
in response to detecting the change in proximity status indicating that the second device has entered the predetermined level of proximity to the client device, sending, by the client device and to a server system, a proximity status change message indicating that the proximity status has changed such that the second device has entered the predetermined level of proximity of the client device;
after sending the proximity status change message indicating that the second device entered the predetermined level of proximity of the client device, determining, by the client device, that the proximity status of the second device is maintained based on detecting the second device remaining within the predetermined level of proximity of the client device;
and
after determining that the proximity status of the second device is maintained, receiving, by the client device, data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device;
in response to receiving the data indicating the attempt to access the resource, sending, by the client device, an authentication request to the server system;
receiving, by the client device and from the server system, data indicating approval of the authentication request determined based on the proximity status of the second device that the client device determined before the attempt to access the resource;
and
providing, by the client device, access to the resource based on receiving the data indicating approval of the authentication request.

9 more elements

One or more non-transitory computer-readable devices encoded with computer program instructions that, when executed by one or more computers, cause the one or more computers to perform operations comprising:

detecting, by a client device, a change in a proximity status of a second device that has been designated as an authentication token for a user, wherein the change in the proximity status indicates that the second device has entered a predetermined level of proximity of the client device after previously being outside the predetermined level of proximity;
in response to detecting the change in proximity status indicating that the second device has entered the predetermined level of proximity to the client device, sending, by the client device and to a server system, a proximity status change message indicating that the proximity status has changed such that the second device has entered the predetermined level of proximity of the client device;
after sending the proximity status change message indicating that the second device entered the predetermined level of proximity of the client device, determining, by the client device, that the proximity status of the second device is maintained based on detecting the second device remaining within the predetermined level of proximity of the client device;
after determining that the proximity status of the second device is maintained, receiving, by the client device, data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device;
in response to receiving the data indicating the attempt to access the resource, sending, by the client device, an authentication request to the server system;
receiving, by the client device and from the server system, data indicating approval of the authentication request determined based on the proximity status of the second device that the client device determined before the attempt to access the resource;
and
providing, by the client device, access to the resource based on receiving the data indicating approval of the authentication request.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/955,277Filed 17 Apr 2018 · us provisional application
Priority: 17 Apr 2017
Granted: 8 Sep 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
H04L 63/107
For controlling access to devices or network resources: wherein the security policies are location-dependent, e.g. entities privileges depend on…
H04L 67/52
Network services: specially adapted for the location of the user terminal
H04W 4/02
Services specially adapted for wireless communication networks; Facilities therefor: services making use of location information

Family

Application62/486,321Us provisional application · filed 17 Apr 2017
US 10,771,458 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key