Back to results
US 11,637,826 B2Granted
Establishing authentication persistence
AssigneeCapital One Services, LLC
InventorsJeffrey Rule, Paul Moreton, Thomas Poole
Life of this patent
Estimating the term…
Abstract
Various embodiments are generally directed to performing an authentication persistence check and, based on the check, allowing a previously successful authentication to persist on a user apparatus. The check may involve a stability check on the user apparatus. If the user apparatus is stable, device fingerprinting on the apparatus may be performed, the result of which may be compared to a snapshot of apparatus taken at the time of successful authentication. If the comparison reveals changes or drifts that are within a predetermined threshold, then the persistence of the authentication is allowed.
Claims20
An apparatus comprising:
- a near-field communication (NFC) reader;
- one or more processors operable to execute stored instructions that, when executed, cause the one or more processors to:
- authenticate a user via first factor authentication;
- authenticate the user via second factor authentication different from the first factor authentication, wherein the second factor authentication comprises:
- a contactless card being tapped to the apparatus such that NFC communication is established, receiving user authentication information from the contactless card via the NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated;
- determine one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication;
- cause a stability check on the apparatus to be performed:
- (i) at a second time after the first time or (ii) when a authentication event occurs after the first time;
- in response to the apparatus being stable, perform device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold;
- in response to the apparatus being within the predetermined drift threshold, allow the second factor authentication to persist for a predetermined time period;
- and
- in response to the apparatus not being within the predetermined drift threshold, reauthenticate the user via the second factor authentication.
9 more elements
A method comprising:
- authenticating, via one or more processors, a user based on first factor authentication;
- authenticating, via the one or more processors, the user based on second factor authentication different from the first factor authentication, wherein the second factor authentication comprises:
- a contactless card being tapped to an apparatus such that near field communication (NFC) is established, receiving user authentication information from the contactless card via an NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated;
- determining, via the one or more processors, one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication;
- causing, via the one or more processors, a stability check on the apparatus to be performed:
- (i) at a second time after the first time or (ii) when a authentication event occurs after the first time;
- performing, via the one or more processors, device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold in response to the apparatus being stable;
- allowing, via the one or more processors, the second factor authentication to persist for a predetermined time period in response to the apparatus being within the predetermined drift threshold;
- and
- reauthenticating, via the one or more processors, the user based on the second factor authentication in response to the apparatus not being within the predetermined drift threshold.
7 more elements
At least one non-transitory computer-readable storage medium storing computer-readable program code executable by at least one processor to:
- authenticate a user via first factor authentication;
- authenticate the user via second factor authentication different from the first factor authentication, wherein the second factor authentication comprises:
- a contactless card being tapped to an apparatus such that near field communication (NFC) is established, receiving user authentication information from the contactless card via an NFC reader, sending the user authentication information to one or more remote computing devices, and receiving indication from the one or more remote computing devices that the user is authenticated;
- determine one or more device settings of the apparatus and one or more user behavioral biometrics at a first time of the second factor authentication;
- cause a stability check on the apparatus to be performed:
- (i) at a second time after the first time or (ii) when a authentication event occurs after the first time;
- in response to the apparatus being stable, perform device fingerprinting on the apparatus to determine whether the apparatus is within a predetermined drift threshold;
- in response to the apparatus being within the predetermined drift threshold, allow the second factor authentication to persist for a predetermined time period;
- and
- in response to the apparatus not being within the predetermined drift threshold, reauthenticate the user via the second factor authentication.
7 more elements
Dependencies are inferred from the claim text.