Passwordless secure authentication
AssigneeCyberArk Software Ltd.
InventorDima Barboi
Life of this patent
Estimating the term…
Abstract
Disclosed embodiments relate to passwordless authentication. Techniques include identifying a request by a user to access an access-restricted target resource, the user operating on a client computing device and the request being associated with a network address for the access-restricted target resource; intercepting the request; generating a unique session identifier for the user; making available the unique session identifier to the user of the client computing device; performing dual-mode, passwordless authentication of the user; confirming, based on the dual-mode, passwordless authentication of the user, the identity of the user and the user's current use of the client computing device; and permitting, based on the confirmation, the user to access the access-restricted target resource.
Claims20
A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for passwordless authentication of a user, the operations comprising:
- identifying a request by a user to access an access-restricted target resource, the user operating on a client computing device and the request being associated with a network address for the access-restricted target resource;
- intercepting the request before the request can reach the access-restricted target resource;
- identifying a unique session identifier, the unique session identifier being a one-time use identifier associated with the request;
- making available the unique session identifier to the user of the client computing device, wherein the making available comprises at least one of transmitting, displaying, or audibly presenting a representation of the unique session identifier to the user;
- obtaining a result of an authentication of the user, wherein the authentication is based on:
- a physical verification of the user through the client computing device based on one or more unique physical characteristics of the user and sensor data,
- receipt, from the client computing device, of the unique session identifier, and
- confirmation of the user's current physical presence at the client computing device;
- and
- conditional on the result of the authentication being successful, establishing a secure tunnel connection between the client computing device and the access-restricted target resource.
A computer-implemented method for passwordless authentication of a user, the method comprising:
- identifying a request by a user to access an access-restricted target resource, the user operating on a client computing device and the request being associated with a network address for the access-restricted target resource;
- intercepting the request before the request can reach the access-restricted target resource;
- identifying a unique session identifier, the unique session identifier being a one-time use identifier associated with the request;
- making available the unique session identifier to the user of the client computing device, wherein the making available comprises at least one of transmitting, displaying, or audibly presenting a representation of the unique session identifier to the user;
- obtaining a result of an authentication of the user, wherein the authentication is based on:
- a physical verification of the user through the client computing device based on one or more unique physical characteristics of the user and sensor data,
- receipt, from the client computing device, of the unique session identifier, and
- confirmation of the user's current physical presence at the client computing device;
- and
- conditional on the result of the authentication being successful, establishing a secure tunnel connection between the client computing device and the access-restricted target resource.
Dependencies are inferred from the claim text.