# US 11,451,559 B2 · Automated authorization response techniques > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,559 B2 - Document ID: US11451559B2 - Status: Granted - Kind: B2 - Application number: 16/913,967 - Filed: 2020-06-26 - Published: 2020-10-15 - Granted: 2022-09-20 - Earliest claimed: 2011-10-25 - Assignees: salesforce.com, inc. - Applicants: salesforce.com, inc. - Inventors: Evan Tyler Grim; Josh Alexander - Web page: https://patentgrep.com/patent/US11451559B2 ## CPC - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/06: Authentication - H04L 2463/082: applying multi-factor authentication - H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication - H04W 12/61: Time-dependent - H04W 12/68: Gesture-dependent or behaviour-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Techniques are disclosed relating to automating permission requests, e.g., in the context of multi-factor authorization. A mobile device may allow a user to automate responses to future permission requests for multi-factor authorization procedures. The mobile device may automatically respond to subsequent permission requests based on one or more automation criteria. Authorized actions may include login, transaction approval, physical access, vehicle ignition, account recovery, etc. The automation criteria may include location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, image characteristics, etc. Disclosed techniques may increase authorization security while reducing user interaction for multi-factor authorization, in some embodiments. ## Claims ### Claim 1 A non-transitory computer-readable medium having computer instructions stored thereon that are capable of being executed by a first computing device to cause operations comprising: processing a request received from a server system as a factor in a multi-factor authorization procedure initiated by a second computing device; determining that one or more automation criteria are met based on current values of one or more parameters determined by the first computing device; and in response to the determining, automatically sending a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request. ### Claim 2 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the multi-factor authorization procedure is an authentication procedure. ### Claim 3 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the one or more automation criteria are based on current values of multiple parameters determined by the first computing device and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied. ### Claim 4 (depends on 3) The non-transitory computer-readable medium of claim 3, wherein the determining is based on weighting factors assigned to respective ones of the parameters. ### Claim 5 (depends on 3) The non-transitory computer-readable medium of claim 3, wherein the multiple parameters include two or more parameters from the following set of parameters: location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, and image characteristics. ### Claim 6 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the one or more parameters include: location, wireless connectivity, and velocity. ### Claim 7 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the operations further comprise: in response to receiving a subsequent request for a multi-factor authorization procedure initiated by the second computing device, determining to require user input prior to responding to the subsequent request based on determining that the one or more automation criteria are not met. ### Claim 8 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the operations further comprise: in response a change in at least one of the one or more automation criteria, ending a session associated with the multi-factor authorization procedure. ### Claim 9 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the one or more parameters include one or more visual characteristics in one or more images captured by the first computing device. ### Claim 10 (depends on 1) The non-transitory computer-readable medium of claim 1, wherein the operations further comprise: prior to receiving the request, storing an indication based on user input, wherein the indication indicates that responses by the first computing device are to be automated based on the one or more automation criteria. ### Claim 11 (depends on 10) The non-transitory computer-readable medium of claim 10, wherein the user input specifies the one or more automation criteria. ### Claim 12 An apparatus, comprising: one or more processors; one or more memories having program instructions stored thereon that are capable of being executed by the one or more processors to cause the apparatus to: process a request received from a server system as a factor in a multi-factor authorization procedure initiated by another computing device; determine that one or more automation criteria are met based on current values of one or more parameters determined by the apparatus; and in response to the determination, automatically send a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request. ### Claim 13 (depends on 12) The apparatus of claim 12, wherein the apparatus is configured to generate hardware identifier information based on components included in the apparatus and transmit the hardware identifier information in conjunction with the response. ### Claim 14 (depends on 12) The apparatus of claim 12, wherein the one or more automation criteria are based on current values of multiple parameters determined by the apparatus and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied. ### Claim 15 (depends on 12) The apparatus of claim 12, wherein the instructions are further executable to cause the apparatus to: in response to receiving a subsequent request for a multi-factor authorization procedure initiated by the other computing device, require user input prior to responding to the subsequent request based on determining that the one or more automation criteria are not met. ### Claim 16 (depends on 12) The apparatus of claim 12, wherein the instructions are further executable to cause the apparatus to: in response a change in at least one of the one or more automation criteria, end a session associated with the multi-factor authorization procedure. ### Claim 17 A method, comprising: processing, by a first computing device, a request received from a server system as a factor in a multi-factor authorization procedure initiated by a second computing device; determining, by the first computing device, that one or more automation criteria are met based on current values of one or more parameters determined by the first computing device; and in response to the determining, the first computing device automatically sending a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request. ### Claim 18 (depends on 17) The method of claim 17, wherein the multi-factor authorization procedure is an authentication procedure. ### Claim 19 (depends on 17) The method of claim 17, wherein the one or more automation criteria are based on current values of multiple parameters determined by the first computing device and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied. ### Claim 20 (depends on 19) The method of claim 19, wherein the determining is based on weighting factors assigned to respective ones of the parameters.