System and method for establishing a trusted session

A computer system comprising:

• a processor;
• a communications module coupled to the processor;
• and
• a memory module coupled to the processor and storing instructions that, when executed by the processor, cause the computer system to:
• receive, using the communications module from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected, wherein the first network includes a wireless network and wherein the first network identifying information includes a service set identifier (SSID) of the first network;
• obtain second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected, wherein the second network includes a wireless network and wherein the second network identifying information includes an SSID of the second network;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining that the SSID of the first network is the same as the SSID of the second network;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, send, using the communications module via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receive, using the communications module via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticate the first computing device to the account.

A computer system comprising:

• a processor;
• a communications module coupled to the processor;
• and
• a memory module coupled to the processor and storing instructions that, when executed by the processor, cause the computer system to:
• receive, using the communications module from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected, wherein the first network identifying information includes an address of a first gateway server through which nodes on the first network access the internetwork;
• obtain second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected, wherein the second network identifying information includes an address of a second gateway server through which nodes on the second network access the internetwork;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining based on the addresses that the first gateway server is the same as the second gateway server;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, send, using the communications module via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receive, using the communications module via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticate the first computing device to the account.

A computer system comprising:

• a processor;
• a communications module coupled to the processor;
• and
• a memory module coupled to the processor and storing instructions that, when executed by the processor, cause the computer system to:
• receive, using the communications module from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including a first geolocation corresponding to a physical location of the first computing device;
• obtain second identifying information for the second computing device, the second identifying information including a second geolocation corresponding to a physical location of the second computing device;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining that the first geolocation is within a defined proximity to the second geolocation;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, send, using the communications module via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receive, using the communications module via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticate the first computing device to the account.

A computer system comprising:

• a processor;
• a communications module coupled to the processor;
• and
• a memory module coupled to the processor and storing instructions that, when executed by the processor, cause the computer system to:
• receive, using the communications module from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected, wherein the first identifying information includes a first Internet Protocol (IP) address associated with the first computing device on the first network;
• obtain second identifying information for the second computing device, the second identifying information, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected, wherein the second identifying information includes a second IP address associated with the second computing device on the second network;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining that the first IP address and the second IP address are on the same subnet;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, send, using the communications module via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receive, using the communications module via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticate the first computing device to the account.

A computer system comprising:

• a processor;
• a communications module coupled to the processor;
• and
• a memory module coupled to the processor and storing instructions that, when executed by the processor, cause the computer system to:
• receive, using the communications module from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected;
• obtain second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices;
• responsive to determining that there is sufficient correspondence between the first and second computing devices,
• generate a code;
• send, using the communications module via the internetwork, a first indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account, wherein the first indication includes the code for presentation by the second computing device;
• receive, using the communications module via the internetwork, a second indication, the second indication confirming that the first computing device should be authenticated to the account, wherein the second indication is received from the first computing device and includes a value purported to be the code;
• and
• responsive to the second indication, authenticate the first computing device to the account, wherein the first computing device is authenticated to the account responsive to determining that the value purported to be the code matches the code.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected;
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected;
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, sending, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receiving, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticating the first computing device to the account;
• wherein the first identifying information includes multiple items for which there are corresponding items in the second identifying information and wherein confirming based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices includes determining that there is a correspondence between at least a threshold number of the corresponding items.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected, wherein the first network includes a wireless network and wherein the first network identifying information includes a service set identifier (SSID) of the first network,
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected, wherein the second network includes a wireless network and wherein the second network identifying information includes an SSID of the second network,
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices, including determining that the SSID of the first network is the same as the SSID of the second network;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, sending, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receiving, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticating the first computing device to the account.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected, wherein the first network identifying information includes an address of a first gateway server through which nodes on the first network access the internetwork;
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected, wherein the second network identifying information includes an address of a second gateway server through which nodes on the second network access the internetwork;
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining based on the addresses that the first gateway server is the same as the second gateway server;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, sending, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receiving, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticating the first computing device to the account.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected including a first geolocation corresponding to a physical location of the first computing device;
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected including a second geolocation corresponding to a physical location of the second computing device;
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining that the first geolocation is within a defined proximity to the second geolocation;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, sending, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receiving, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticating the first computing device to the account.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected including a first Internet Protocol (IP) address associated with the first computing device on the first network;
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected including a second IP address associated with the second computing device on the second network;
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices including determining that the first IP address and the second IP address are on the same subnet;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, sending, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receiving, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticating the first computing device to the account
• wherein the first identifying information includes multiple items for which there are corresponding items in the second identifying information and wherein confirming based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices includes determining that there is a correspondence between at least a threshold number of the corresponding items.

A computer-implemented method comprising:

• receiving, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtaining first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected;
• obtaining second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected;
• determining based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices;
• responsive to determining that there is sufficient correspondence between the first and second computing devices,
• generating a code;
• sending, via the internetwork, a first indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account, wherein the first indication includes the code for presentation by the second computing device;
• receiving, via the internetwork, a second indication, the second indication confirming that the first computing device should be authenticated to the account, wherein the second indication is received from the first computing device and includes a value purported to be the code;
• and
• responsive to the second indication, authenticate the first computing device to the account, wherein the first computing device is authenticated to the account responsive to determining that the value purported to be the code matches the code.

A non-transitory computer-readable storage medium storing instructions, that, when executed by a processor of a computer system, cause the computer system to:

• receive, from a first computing device via an internetwork, a request to authenticate to an account using a second computing device;
• obtain first identifying information for the first computing device, the first identifying information including first network identifying information corresponding to a first network of the internetwork to which the first computing device is directly connected;
• obtain second identifying information for the second computing device, the second identifying information including second network identifying information corresponding to a second network of the internetwork to which the second computing device is directly connected;
• determine based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices;
• responsive to determining that there is sufficient correspondence between the first and second computing devices, send, via the internetwork, an indication to the second computing device requesting confirmation that the first computing device should be authenticated to the account;
• receive, via the internetwork, an indication confirming that the first computing device should be authenticated to the account;
• and
• responsive to the indication, authenticate the first computing device to the account;
• wherein the first identifying information includes multiple items for which there are corresponding items in the second identifying information and wherein confirming based on the first and second identifying information that there is sufficient correspondence between the first and second computing devices includes determining that there is a correspondence between at least a threshold number of the corresponding items.