# US 12,015,643 B2 · System and method for multifactor authentication for access to a resource based on co-connected device presence > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,643 B2 - Document ID: US12015643B2 - Status: Granted - Kind: B2 - Application number: 17/532,067 - Filed: 2021-11-22 - Published: 2023-05-25 - Granted: 2024-06-18 - Earliest claimed: 2021-11-22 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Justin duPont; William Anderson Hodges - Web page: https://patentgrep.com/patent/US12015643B2 ## CPC - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/105: {Multiple levels of security} - H04W 12/06: Authentication - H04W 12/065: Continuous authentication - H04W 12/63: Location-dependent; Proximity-dependent - H04L 2463/082: applying multi-factor authentication - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems, computer program products, and methods are described herein for multifactor authentication system that determines co-connected device presence for added security. The system utilizes a device fingerprint for each device. The device fingerprint may contain a library of interconnected devices, as well as ambient noise from the device. The device fingerprint will be used to determine confidence levels indicating whether the devices are in the same location and thus in operation by the same user during multifactor authentication. ## Claims ### Claim 1 A system for multifactor authentication, the system comprising at least one non-transitory storage device, and at least one processing device coupled to the at least one non-transitory storage device, wherein the at least one processing device is configured to: generate a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device; recognize an authentication event, associated with a user, from a first device; employ a multifactor authentication event, wherein the multifactor authentication event comprises: sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping; receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording; and comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level; and grant access to the first device based on the confidence level. ### Claim 2 (depends on 1) The system according to claim 1, wherein the at least one processing device is configured to, before employing the multifactor authentication event: generate a user fingerprint, wherein the user fingerprint comprises a library of devices within connectivity range of a user's frequently used devices; determine a confidence threshold for the user; compare the user fingerprint to the first device fingerprint to determine whether the first device meets the confidence threshold; and when employing the multifactor authentication event, only employing the multifactor authentication event based on the first device fingerprint not meeting the confidence threshold. ### Claim 3 (depends on 1) The system according to claim 1, wherein the device fingerprint comprises a library of secondary devices within Bluetooth connectivity range of the device. ### Claim 4 (depends on 1) The system according to claim 1, wherein the device fingerprint comprises a library of secondary devices within WI-FI connectivity range of the device. ### Claim 5 (depends on 1) The system according to claim 1, wherein the audio ping is in a frequency less than approximately 12 Hz or greater than approximately 20 kHz. ### Claim 6 (depends on 1) The system according to claim 1 wherein the confidence level is determined based on a number of matches between the first device fingerprint and the second device fingerprint. ### Claim 7 (depends on 1) The system according to claim 1, wherein the confidence level is determined based on whether the ambient noise from the second device matches the ambient noise from the first device. ### Claim 8 (depends on 1) The system according to claim 1, wherein the confidence level is determine based on whether the ambient noise from the first device matches the audio ping from the second device. ### Claim 9 A computer program product for multifactor authentication, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to: generate a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device; recognize an authentication event, associated with a user, from a first device; employ a multifactor authentication event, wherein the multifactor authentication event comprises: sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping; receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording; and comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level; and grant access to the first device based on the confidence level. ### Claim 10 (depends on 9) The computer program product according to claim 9, wherein the non-transitory computer readable medium comprises code causing a first apparatus to, before employing the multifactor authentication event: generate a user fingerprint, wherein the user fingerprint comprises a library of devices within connectivity range of a user's frequently used devices; determine a confidence threshold for the user; compare the user fingerprint to the first device fingerprint to determine whether the first device meets the confidence threshold; and when employing the multifactor authentication event, only employing the multifactor authentication event based on the first device fingerprint not meeting the confidence threshold. ### Claim 11 (depends on 9) The computer program product according to claim 9, wherein the device fingerprint comprises a library of secondary devices within Bluetooth connectivity range of the user device. ### Claim 12 (depends on 9) The computer program product according to claim 9, wherein the device fingerprint comprises a library of secondary devices within WI-FI connectivity range of the user device. ### Claim 13 (depends on 9) The computer program product according to claim 9, wherein the audio ping is in a frequency less than approximately 12 Hz or greater than approximately 20 kHz. ### Claim 14 (depends on 9) The computer program product according to claim 9, wherein the confidence level is determined based on a number of matches between the first device fingerprint and the second device fingerprint. ### Claim 15 A method for multifactor authentication, the method comprising: generating a device fingerprint associated with a device, wherein the device fingerprint comprises a library of secondary devices within connectivity range of the device; recognizing an authentication event, associated with a user, from a first device; employing a multifactor authentication event, wherein the multifactor authentication event comprises: sending a code to a known contact for the user, wherein the user receives the code on a second device, wherein the code causes the second device to generate an audio ping; receiving the code from the first device, wherein receiving the code further comprises recording ambient noise from the first device to identify the audio ping sent to the second device in the recording; and comparing a first device fingerprint of the first device to a second device fingerprint of the second device and review the ambient noise recorded from the first device with the audio ping sent to the second device to determine a confidence level; and granting access to the first device based on the confidence level. ### Claim 16 (depends on 15) The method according to claim 15, further comprising, before employing the multifactor authentication event: generating a user fingerprint, wherein the user fingerprint comprises a library of devices within connectivity range of a user's frequently used devices; determining a confidence threshold for the user; comparing the user fingerprint to the first device fingerprint to determine whether the first device meets the confidence threshold; and when employing the multifactor authentication event, only employing the multifactor authentication event based on the first device fingerprint not meeting the confidence threshold. ### Claim 17 (depends on 15) The method according to claim 15, wherein the audio ping is in a frequency less than approximately 12 Hz or greater than approximately 20 kHz. ### Claim 18 (depends on 15) The method according to claim 15, wherein the confidence level is determined based on a number of matches between the first device fingerprint and the second device fingerprint.