# US 10,873,602 B2 · Secondary communication channel for security notifications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,873,602 B2
- Document ID: US10873602B2
- Status: Granted
- Kind: B2
- Application number: 15/714,968
- Filed: 2017-09-25
- Published: 2019-03-28
- Granted: 2020-12-22
- Earliest claimed: 2017-09-25
- Assignees: Facebook, Inc.
- Applicants: Facebook, Inc.
- Inventors: Oleg Iaroshevych
- Web page: https://patentgrep.com/patent/US10873602B2

## CPC

- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 21/554: {involving event detection and direct action}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/10: {for controlling access to devices or network resources}
- G06F 3/0484: for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
- G06F 3/0488: using a touch-screen or digitiser, e.g. input of commands through traced gestures
- H04L 2463/144: Detection or countermeasures against botnets
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Exemplary methods, apparatuses, and systems include a communication system accessing a request received from an application on a user device to log into a primary platform of a communication system using a user account. In response to detecting the request as an unrecognized login attempt, that the user account also grants access to a secondary platform of the communication system, and that settings of the user account include enabled push notifications via the secondary platform, the communication system provides a notification for display to a user of the user account via the secondary platform.

## Claims

### Claim 1

A computer-implemented method comprising:
accessing a request received from an application on a user device to log into a social networking platform using a user account that grants access to both (1) the social networking platform and (2) a messaging platform, wherein the social networking platform and the messaging platform are different platforms provided by a same social networking system;
detecting the request as an unrecognized login attempt;
in response to detecting the request as an unrecognized login attempt:
determining settings of the user account include enabled push notifications via the messaging platform; and
using a bot application on the messaging platform to provide a notification for display to a user of the user account via the messaging platform;
after providing the notification for display, determining (1) that the user device has not communicated with the messaging platform within a threshold period of the notification and (2) a low probability that the notification has been delivered to the user based on the user device not having communicated with the messaging platform within the threshold period; and
in response to determining the low probability, providing a notification for display via an additional communication channel and processing a response to the notification to grant or deny the request to login to the social networking platform using the user account.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein: the
social networking platform enables at least one of (1) maintaining and viewing user profiles, (2) maintaining and viewing media collections, (3) joining groups, (4) following entities, or (5) organizing planned events; and
the messaging platform enables sending digital messages between users of the messaging platform.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, wherein the additional communication channel comprises an email.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein the additional communication channel comprises a text message.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein the notification includes a graphical user interface (GUI) element.

### Claim 6 (depends on 5)

The computer-implemented method of claim 5, wherein the GUI element comprises a display of options to secure the user account.

### Claim 7 (depends on 5)

The computer-implemented method of claim 5, wherein text of the notification varies based upon a context of the request.

### Claim 8

A non-transitory computer-readable medium storing instructions, which when executed by a processing device, cause the processing device to perform a method comprising:
accessing a request received from an application on a user device to log into a social networking platform using a user account that grants access to both (1) the social networking platform and (2) a messaging platform, wherein the social networking platform and the messaging platform are different platforms provided by a same social networking system;
detecting the request as an unrecognized login attempt;
in response to detecting the request as an unrecognized login attempt:
determining settings of the user account include enabled push notifications via the messaging platform; and
using a bot application on the messaging platform to provide a notification for display to a user of the user account via the messaging platform;
after providing the notification for display, determining (1) that the user device has not communicated with the messaging platform within a threshold period of the notification and (2) a low probability that the notification has been delivered to the user based on the user device not having communicated with the messaging platform within the threshold period; and
in response to determining the low probability, providing a notification for display via an additional communication channel and processing a response to the notification to grant or deny the request to login to the social networking platform using the user account.

### Claim 9 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein:
the social networking platform enables at least one of (1) maintaining and viewing user profiles, (2) maintaining and viewing media collections, (3) joining groups, (4) following entities, or (5) organizing planned events; and
the messaging platform enables sending digital messages between users of the messaging platform.

### Claim 10 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the additional communication channel comprises an email.

### Claim 11 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the additional communication channel comprises a text message.

### Claim 12 (depends on 8)

The non-transitory computer-readable medium of claim 8, wherein the notification includes a graphical user interface (GUI) element.

### Claim 13 (depends on 12)

The non-transitory computer-readable medium of claim 12, wherein the GUI element comprises a display of options to secure the user account.

### Claim 14 (depends on 12)

The non-transitory computer-readable medium of claim 12, wherein text of the notification varies based upon a context of the request.

### Claim 15

An apparatus comprising:
a processing device; and
a memory coupled to the processing device, the memory storing instructions which, when executed by the processing device, cause the apparatus to:
access a request received from an application on a user device to log into a social networking platform using a user account that grants access to both (1) the social networking platform and (2) a messaging platform, wherein the social networking platform and the messaging platform are different platforms provided by a same social networking system;
detect the request as an unrecognized login attempt;
in response to detecting the request as an unrecognized login attempt:
determine settings of the user account include enabled push notifications
via the messaging platform; and
use a bot application on the messaging platform to provide a notification for display to a user of the user account via the messaging platform;
after providing the notification for display, determine (1) that the user device has not communicated with the messaging platform within a threshold period of the notification and (2) a low probability that the notification has been delivered to the user based on the user device not having communicated with the messaging platform within the threshold period; and
in response to determining the low probability, provide a notification for display via an additional communication channel and process a response to the notification to grant or deny the request to login to the social networking platform using the user account.

### Claim 16 (depends on 15)

The apparatus of claim 15, wherein:
the social networking platform enables at least one of (1) maintaining and viewing user profiles, (2) maintaining and viewing media collections, (3) joining groups, (4) following entities, or (5) organizing planned events; and
the messaging platform enables sending digital messages between users of the messaging platform.

### Claim 17 (depends on 15)

The apparatus of claim 15, wherein the additional communication channel comprises an email.

### Claim 18 (depends on 15)

The apparatus of claim 15, wherein the additional communication channel comprises a text message.

### Claim 19 (depends on 15)

The apparatus of claim 15, wherein the notification includes a graphical user interface (GUI) element.

### Claim 20 (depends on 19)

The apparatus of claim 19, wherein the GUI element comprises a display of options to secure the user account.
