Back to results
US 12,056,975 B1Granted
System and method for secure pair and unpair processing using a dynamic level of assurance (LOA) score
AssigneeSecureAuth Corporation
InventorsShahrokh Shahidzadeh, Nahal Shahidzadeh, Haitham Akkary, Frank Stefan Ulbrich, Mani Malekmohammadi
Life of this patent
Estimating the term…
Abstract
A system and method for biobehavioral identification may include a user device, a secure system/client device, and a server. The elements of the system work together to monitor the biologic features (e.g., fingerprints, pupils, or the like) and behavior (e.g., wake time, exercise time, location) to verify the authenticity of a user requesting access to a database and/or secure facility.
Claims6
A method of preventing a pairing of an unauthorized user entity device with a secure website comprising:
- monitoring behavior of a user entity of a first mobile device when connected to the secure website and unconnected to the secure website;
- comparing both the connected and unconnected behavior against an identity confidence threshold;
- determining that a second mobile device is attempting to access the secure website while the first mobile is still paired with the secure website and determining that a subscriber identification module (SIM) card swap has potentially happened;
- raising the level of assurance required for access to the secure website by the second mobile device according to a predetermined policy;
- requiring authentication by the second mobile device using a push to the first mobile device or a time-based one time password (TOTP);
- receiving an attempted pairing from the second mobile device and blocking access to the secure website;
- and
- contacting the first mobile device to notify the user entity of a security event.
5 more elements
A system comprising:
- a plurality of processors forming a risk engine, wherein the risk engine is coupled to a network interface, the plurality of processors configured to:
- monitor behavior of a user entity of a first mobile device when connected to a secure website and unconnected to the secure website;
- compare the connected and unconnected behavior against an identity confidence threshold;
- determine that a second mobile device is attempting to access the secure website while the first mobile is still paired with the secure website and determine that a subscriber identification module (SIM) card swap has potentially happened;
- raise the level of assurance required for access to the secure website by the second mobile device according to a predetermined policy;
- require authentication by the second mobile device using a push to the first mobile device or a time-based one time password (TOTP);
- receive an attempted pairing from the second mobile device and blocking access to the secure website;
- and
- contact the first mobile device to notify the user entity of a security event.
6 more elements
Dependencies are inferred from the claim text.