System and method for multifactor authentication for access to a resource based on co-connected device presence
AssigneeBank of America Corporation
InventorsJustin duPont, William Anderson Hodges
Life of this patent
Estimating the term…
Abstract
Systems, computer program products, and methods are described herein for multifactor authentication system that determines co-connected device presence for added security. The system utilizes a device fingerprint for each device. The device fingerprint may contain a library of interconnected devices, as well as ambient noise from the device. The device fingerprint will be used to determine confidence levels indicating whether the devices are in the same location and thus in operation by the same user during multifactor authentication.
Claims18
A system for multifactor authentication, the system comprising at least one non-transitory storage device, and at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to:
- generate a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device;
- recognize an authentication event, associated with a user, from a first device;
- employ a multifactor authentication event, wherein the multifactor authentication event comprises:
- sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping;
- receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording;
- and
- comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level;
- and
- grant access to the first device based on the confidence level.
A computer program product for multifactor authentication, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:
- generate a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device;
- recognize an authentication event, associated with a user, from a first device;
- employ a multifactor authentication event, wherein the multifactor authentication event comprises:
- sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping;
- receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording;
- and
- comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level;
- and
- grant access to the first device based on the confidence level.
A method for multifactor authentication, the method comprising:
- generating a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device;
- recognizing an authentication event, associated with a user, from a first device;
- employing a multifactor authentication event, wherein the multifactor authentication event comprises:
- sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping;
- receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording;
- and
- comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level;
- and
- granting access to the first device based on the confidence level.
Dependencies are inferred from the claim text.