Establishing authentication persistence
AssigneeCapital One Services, LLC
InventorsJeffrey Rule, Paul Moreton, Thomas Poole
Life of this patent
Estimating the term…
Abstract
Various embodiments are generally directed to performing an authentication persistence check and, based on the check, allowing a previously successful authentication to persist on a user apparatus. The check may involve a stability check on the user apparatus. If the user apparatus is stable, device fingerprinting on the apparatus may be performed, the result of which may be compared to a snapshot of apparatus taken at the time of successful authentication. If the comparison reveals changes or drifts that are within a predetermined threshold, then the persistence of the authentication is allowed.
Claims14
An apparatus comprising:
- memory configured to store instructions;
- one or more processors configured to execute the stored instructions that, when executed, cause the one or more processors to:
- perform multifactor authentication, wherein one factor includes the one or more processors to establish a short-range wireless communication with a contactless card, receive data from the contactless card, send the data to a system to authenticate, and receive an indication that the contactless card is authentic;
- determine a snapshot of the apparatus at a first time;
- perform a stability check on the apparatus to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification;
- perform device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable;
- compare the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement;
- allow the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement;
- and
- reauthenticate the user if the fingerprint does not meet the predetermined requirement.
A computer-implemented method comprising:
- performing multifactor authentication by an apparatus comprising a memory and one or more processors configured to execute one or more instructions stored in the memory, wherein one factor includes:
- establishing, by the apparatus, a short-range wireless communication with a contactless card,
- receiving, by the apparatus, data from the contactless card,
- sending, by the apparatus, the data to a system to authenticate, and
- receive, by the apparatus, an indication that the contactless card is authentic;
- determining a snapshot of the apparatus at a first time;
- performing a stability check to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification;
- performing device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable;
- comparing the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement;
- allowing the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement;
- and
- reauthenticating the user if the fingerprint does not meet the predetermined requirement.
A non-transitory computer-readable storage medium, the computer-readable storage medium including instructions that when executed by a computer, cause the computer to:
- perform multifactor authentication, wherein one factor includes:
- establish a short-range wireless communication with a contactless card,
- receive data from the contactless card,
- send the data to a system to authenticate, and
- receive an indication that the contactless card is authentic;
- determine a snapshot of the apparatus at a first time;
- perform a stability check to determine that the apparatus is stable, wherein the stability check comprises a mobile network operator (MNO) verification;
- perform device fingerprinting on the apparatus at a second time following a determination that the apparatus is stable;
- compare the fingerprinting to the snapshot to determine whether the fingerprinting meets a predetermined requirement;
- allow the multifactor authentication to persist for a predetermined time period if the fingerprinting meets the predetermined requirement;
- and
- reauthenticate the user if the fingerprint does not meet the predetermined requirement.
Dependencies are inferred from the claim text.