# US 10,873,576 B2 · Authenticating a user device via a monitoring device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,873,576 B2 - Document ID: US10873576B2 - Status: Granted - Kind: B2 - Application number: 16/534,270 - Filed: 2019-08-07 - Published: 2020-07-16 - Granted: 2020-12-22 - Earliest claimed: 2019-01-16 - Assignees: Capital One Services, LLC - Applicants: Capital One Services LLC - Inventors: Joshua Edwards; Adam Vukich; Abdelkadar M'Hamed Benkreira - Web page: https://patentgrep.com/patent/US10873576B2 ## CPC - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 61/5007: Internet protocol [IP] addresses - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/101: {Access control lists [ACL]} - H04W 12/06: Authentication - H04W 12/63: Location-dependent; Proximity-dependent - G06F 40/00: Handling natural language data (speech analysis or synthesis, speech recognition G10L) - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A server device receives, from a user device, a session initiation request and information identifying a location of the user device, and receives, from a monitoring device that is separate from the user device, an authentication request and information identifying a location of the monitoring device. The server device processes the session initiation request and the authentication request to authenticate a user of the user device, and determines, based on the location of the user device and the location of the monitoring device, that the user device and the monitoring device are collocated. The server device creates, after authenticating the user of the user device and determining that user device and the monitoring device are collocated, a session token, and sends the session token to the user device to enable the user device to access at least one resource of the server device. ## Claims ### Claim 1 A method, comprising: receiving, by a server device and from a user device, a session initiation request and a location associated with the user device; receiving, by the server device and from a monitoring device, an authentication request and a location associated with the monitoring device, the authentication request being generated based on an audible command or gesture command received from a user associated with the user device; processing, by the server device, the session initiation request to determine the user associated with the user device; determining, by the server device and based on determining the user associated with the user device, profile information associated with the user, the profile information including one or more of: an audio profile of the user, a video profile of the user, or biometric profile of the user; processing, by the server device, the authentication request to determine identification information included in the authentication request; authenticating, by the server device, the user associated with the user device based on comparing the profile information to the identification information to determine that the profile information of the user matches one or more characteristics of the identification information within a particular threshold; determining, by the server device, that the user device and the monitoring device are collocated based on the location associated with the user device and the location associated with the monitoring device; creating, by the server device and after determining that the user device and the monitoring device are collocated, a session token; and sending, by the server device, the session token to the user device to permit the user device to access at least one resource associated with the server device. ### Claim 2 (depends on 1) The method of claim 1, wherein determining the profile information associated with the user comprises: performing a lookup concerning user information stored in a storage device to determine the profile information associated with the user. ### Claim 3 (depends on 1) The method of claim 1, wherein processing the authentication request comprises: parsing the identification information to identify one or more of: audio data, video data, or biometric data. ### Claim 4 (depends on 1) The method of claim 1, wherein determining that the user device and the monitoring device are collocated comprises: sending an instruction to the user device to cause the user device to display the instruction on a display of the user device, wherein the instruction instructs the user associated with the user device to utter a response concerning the instruction than can be detected by the monitoring device; receiving, from the monitoring device, the response concerning the instruction; and determining, based on the response concerning the instruction, that the user device and the monitoring device are collocated. ### Claim 5 (depends on 1) The method of claim 1, wherein determining that the user device and the monitoring device are collocated comprises: sending a message to the monitoring device to cause the monitoring device to ask a question via a speaker of the monitoring device, wherein the question instructs the user of the user device to enter a response to the question via a user interface of the user device; receiving, from the user device, the response; and determining, based on the response, that the user device and the monitoring device are collocated. ### Claim 6 A non-transitory computer-readable medium storing instructions, the instructions comprising: one or more instructions, when executed by one or more processors, cause the one or more processors of a server device to: receive a session initiation request from a user device; receive an authentication request from a monitoring device, wherein the authentication request is generated based on an audible command or gesture command received from a user associated with the user device; process the session initiation request and the authentication request to authenticate the user associated with the user device; determine that the user device and the monitoring device are collocated; create, based on authenticating the user associated with the user device and determining that the user device and the monitoring device are collocated, a session token; and send the session token to the user device to enable the user device to access at least one resource of the server device. ### Claim 7 (depends on 1) The method of claim 1, wherein the session initiation request includes a username of the user of the user device, wherein the authentication request includes a password, and wherein authenticating the user of the user device comprises: determining that the password is associated with the username. ### Claim 8 (depends on 6) The non-transitory computer-readable medium of claim 6, wherein the one or more instructions, that cause the one or more processors to process the session initiation request and the authentication request to authenticate the user associated with the user device, cause the one or more processors to: determine, based on the session initiation request, the user of the user device; receive biometric data associated with the user; process the biometric data using a biometric identification technique to identify at least one biometric characteristic; and authenticate, based on the at least one biometric characteristic, the user of the user device. ### Claim 9 (depends on 6) The non-transitory computer-readable medium of claim 6, wherein the one or more instructions, that cause the one or more processors to process the authentication request, cause the one or more processors to: process the authentication request to determine identification information included in the authentication request; and parse the identification information to identify one or more of: audio data, video data, or biometric data. ### Claim 10 (depends on 9) The non-transitory computer-readable medium of claim 9, wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to: determine profile information associated with the user; and authenticate the user associated with the user device based on comparing the profile information to the identification information to determine that the profile information of the user matches one or more characteristics of the identification information within a particular threshold. ### Claim 11 (depends on 6) The non-transitory computer-readable medium of claim 6, wherein the one or more instructions, that cause the one or more processors to determine that the user device and the monitoring device are collocated, cause the one or more processors to: send a message to the monitoring device to cause the monitoring device to ask a question via a speaker of the monitoring device, wherein the question instructs the user of the user device to enter a response to the question via a user interface of the user device; receive, from the user device, the response; and determine, based on the response, that the user device and the monitoring device are collocated. ### Claim 12 (depends on 6) The non-transitory computer-readable medium of claim 6, wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to: determine a location of the user device and a location of the monitoring device; and determine that the user device and the monitoring device are collocated based on comparing the location of the user device and the location of the monitoring device. ### Claim 13 (depends on 6) The non-transitory computer-readable medium of claim 6, wherein the one or more instructions, that cause the one or more processors to determine that the user device and the monitoring device are collocated, cause the one or more processors to: send an instruction to the user device to cause the user device to display the instruction on a display of the user device, wherein the instruction instructs the user associated with the user device to utter a response concerning the instruction than can be detected by the monitoring device; receive, from the monitoring device, the response concerning the instruction; and determine, based on the response concerning the instruction, that the user device and the monitoring device are collocated. ### Claim 14 A server device, comprising: one or more memories; and one or more processors, communicatively coupled to the one or more memories, to: receive a session initiation request from a user device; receive an authentication request from a monitoring device, wherein the authentication request is generated based on an audible command or gesture command received from a user associated with the user device; process the session initiation request and the authentication request to authenticate the user associated with the user device; determine that the user device and the monitoring device are collocated; create, based on authenticating the user associated with the user device and determining that the user device and the monitoring device are collocated, a session token; and send the session token to the user device to enable the user device to access at least one resource of the server device. ### Claim 15 (depends on 14) The server device of claim 14, wherein the authentication request includes audio data, wherein the audio data includes the audible command, and wherein the one or more processors, when processing the session initiation request and the authentication request to authenticate the user associated with the user device, are to: process the audible command using a natural language processing technique to authenticate the user associated with the user device. ### Claim 16 (depends on 14) The server device of claim 14, wherein the authentication request includes audio data, wherein the audio data includes the audible command, and wherein the one or more processors, when processing the session initiation request and the authentication request to authenticate the user associated with the user device, are to: process the audible command to determine voice characteristics of the audible command; obtain, based on the session initiation request, a voice profile concerning the user from a storage device; and determine that the voice profile concerning the user matches the voice characteristics of the audible command. ### Claim 17 (depends on 14) The server device of claim 14, wherein the authentication request includes audio data, wherein the audio data includes the audible command, and wherein the one or more processors, when processing the session initiation request and the authentication request to authenticate the user associated with the user device, are to: process the audible command to determine one or more words; obtain a password concerning the user from a storage device; and determine that the password matches the one or more words. ### Claim 18 (depends on 14) The server device of claim 14, wherein the one or more processors, when processing the session initiation request and the authentication request to authenticate the user associated with the user device, are to: determine, based on the session initiation request, the user of the user device; receive biometric data associated with the user; process the biometric data using a biometric identification technique to identify at least one biometric characteristic; and authenticate, based on the at least one biometric characteristic, the user of the user device. ### Claim 19 (depends on 14) The server device of claim 14, wherein the one or more processors are further to: determine a location of the user device and a location of the monitoring device; and determine that the user device and the monitoring device are collocated based on comparing the location of the user device and the location of the monitoring device. ### Claim 20 (depends on 14) The server device of claim 14, wherein the session initiation request includes a username of the user of the user device, wherein the authentication request includes a password, and wherein the one or more processors, when authenticating the user of the user device comprises, are to: determine that the password is associated with the username.