US 11,909,765 B2 · Personal device network for user identification and authentication

Abstract

Established user habits in carrying multiple wirelessly detectable devices are used to provide or substantiate authentication. In some embodiments, simply detecting that expected devices are co-located within a limited spatial region is sufficient to establish that the devices are being carried by a single individual. In other embodiments, particularly where the potential for spoofing by multiple individuals is a concern, single-user possession of the devices may be confirmed by various corroborative techniques. This approach affords convenience to users, who may be working at a device that lacks the necessary modality (e.g., a fingerprint or vein reader) for strong authentication.

Claims27

Dependent claims

A method for authenticating a user seeking access to a secure resource, the method comprising:

at a first time, allowing the user to access the secure resource on a first client node on the basis of a first authentication mode in accordance with a security policy, wherein the first client node is not a wireless device of the user;
after the user has accessed the secure resource, enrolling one or more wireless devices co-located with the user and the first client node by associating the one or more wireless devices with the user in an identity database;
and
at a second time after the first time, allowing the user to access the secure resource on a second client node on the basis of a second authentication mode in accordance with the security policy without requiring the first authentication mode, wherein the second authentication mode comprises co-location of one or more enrolled wireless devices with the user and the second client node.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

16/408,796Filed 10 May 2019 · continuation

Priority

19 Nov 2014

Published

US 2019/0342342 A17 Nov 2019

Granted

20 Feb 2024

Term ends

Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L 63/107
For controlling access to devices or network resources: wherein the security policies are location-dependent, e.g. entities privileges depend on…

Family

Application62/081,820Us provisional application · filed 19 Nov 2014

Application14/945,609Parent of this continuation · filed 19 Nov 2015

US 2019/0342342 A1Pre-grant publication · published 7 Nov 2019

US 10,333,980 B2Parent of this continuation

US 2016/0142443 A1Published application

US 11,909,765 B2This patent

From the US filing history. Foreign family members aren’t listed.

Personal device network for user identification and authentication

Life of this patent

Personal device network for user identification and authentication

Life of this patent

Abstract

Claims27