# US 2017/0257364 A1 · Systems and methods for authentication using authentication votes > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0257364 A1 - Document ID: US20170257364A1 - Status: Published application - Kind: A1 - Application number: 15/598,974 - Filed: 2017-05-18 - Published: 2017-09-07 - Earliest claimed: 2014-12-22 - Assignees: University of South Florida - Inventors: Jarred Adam Ligatti; Dmitry Goldgof - Web page: https://patentgrep.com/patent/US20170257364A1 ## CPC - H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)} - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/40: by quorum, i.e. whereby two or more security principals are required - G06F 21/42: using separate channels for security data - G06F 21/6281: {at program execution time, where the protection is within the operating system} - H04L 63/102: {Entity profiles} - G06F 2221/2103: Challenge-response - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - H04L 2463/082: applying multi-factor authentication - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system and method of authentication is described. In operation, an authenticator computing device receives a request to access a resource from a requesting user. In response to the request, the authenticator computing device generates and transmits an authentication vote query to one or more voting users, wherein the one or more voting users includes at least one user other than the user requesting access to the resources. The one or more voting users then respond by transmitting authentication votes to the authenticator. Alternatively, a proxy may be used to cast the authentication votes of the one or more voting users. The authenticator computing device then analyzes the authentication votes to determine whether the requesting user requesting access to the resource should be granted access and grants the requesting user access to the resource based upon the analysis of the authentication votes. ## Claims ### Claim 1 A method of authentication using user authentication votes, the method comprising: receiving, at the authenticator computing device, a request to access a resource from a requesting user; analyzing, at the authenticator computing device, one or more authentication votes to determine whether the requesting user should be granted access to the resource, wherein each of the one or more authentication votes are associated with one or more voting users, wherein the one or more voting users includes at least one user other than the requesting user; and granting the requesting user access to the resource when it is determined that the requesting user should be granted access to the resource based upon the analysis of the one or more authentication votes. ### Claim 2 (depends on 1) The method of claim 1, further comprising: transmitting, from the authenticator computing device prior to analyzing the one or more authentication votes, an authentication vote query to the voting users associated with each of the one or more authentication votes; and transmitting, to the authenticator computing device, the one or more authentication votes from the one or more voting users in response to the authentication vote query from the authenticator computing device. ### Claim 3 (depends on 1) The method of claim 1, wherein the one or more authentication votes associated are cast through one or more proxies. ### Claim 4 (depends on 1) The method of claim 1, wherein each of the one or more voting users are associated with one or more user devices and the one or more authentication votes are cast by the one or more users devices associated with the one or more voting users. ### Claim 5 (depends on 1) The method of claim 1, wherein the authentication votes are selected from positive votes and negative votes. ### Claim 6 (depends on 1) The method of claim 1, wherein the authentication votes are dynamic. ### Claim 7 (depends on 1) The method of claim 1, wherein the authentication votes are selected from real numbers, positive infinity and negative infinity. ### Claim 8 (depends on 1) The method of claim 1, wherein analyzing, at the authenticator computing device, one or more authentication votes to determine whether the requesting user should be granted access to the resource further comprises, collecting and summing the authentication votes to determine if a total number of authentication votes exceeds a predetermined threshold. ### Claim 9 (depends on 1) The method of claim 1, further comprising, an additional method of authentication including password authentication or biometric authentication of the requesting user. ### Claim 10 (depends on 1) The method of claim 1, further comprising, a method of authentication using at least two user devices registered to the requesting user, the method comprising; registering each user device of a plurality of user devices with the authenticator computing device, wherein each user device of the plurality of user devices are registered to at least one user and wherein the at least one user includes the requesting user; generating an authentication challenge at the authenticator computing device in response to the request to access a resource, wherein the request is generated from at least one user device registered with the requesting user; determining, at the authenticator computing device, that at least two user devices of the plurality of user devices registered with the authenticator computing device are registered to the requesting user and in response to the authenticator computing device determining that at least two user devices of the plurality of user devices registered with the authenticator computing device are registered to the requesting user, transmitting the authentication challenge to a subset of user devices of the plurality of user devices registered with the authenticator computing device, wherein the subset of user devices comprises at least one user device other than the one user device requesting access to the resource, wherein user devices of the subset of user devices have not been authenticated by the authenticator computing device and wherein the one user device requesting access to the resource has not been authenticated by the authenticator computing device; generating a response to the authentication challenge at each user device of the subset of user devices; transmitting the response generated at each user device of the subset of user devices to the authenticator computing device; determining, at the authenticator computing device, whether the response generated at each user device of the subset of user devices constitutes a valid response to the authentication challenge; and granting at least one user device of the plurality of user devices registered with the authenticator computing device access to the resource when the response generated at each user device of the subset of user devices constitutes a valid response to the authentication challenge. ### Claim 11 (depends on 1) The method of claim 1, further comprising a method of authentication using at least two user devices of an associated set of user devices, the method comprising: registering each user device of an associated set of user devices with an authenticator computing device, wherein each of the user devices of the associated set of user devices are registered to at least one user, wherein the at least one user includes the requesting user and wherein at least one of the user devices registered to the requesting user are registered to more than one user; generating an authentication challenge at the authenticator computing device in response to the request, wherein the request is generated from at least one user device registered with the requesting user; transmitting the authentication challenge to a subset of user devices of the associated set of user devices registered with the authenticator computing device, wherein the subset of user devices comprises at least one user device other than the one user device requesting access to the resource; generating at least one response to the authentication challenge at one or more user devices of the subset of user devices; transmitting the at least one response to the authenticator computing device; determining, at the authenticator computing device, if the at least one response constitutes a valid response to the authentication challenge; and granting any one or more of the user devices of the associated set of user devices registered with the authenticator computing device access to the resource if the at least one response received at the authenticator computing device constitutes a valid response to the authentication challenge. ### Claim 12 One or more non-transitory computer-readable media having computer-executable instructions for performing a method of running a software program on a computing device, the method including issuing instructions from the software program, the instructions comprising: receiving, at the authenticator computing device, a request to access a resource from a requesting user; analyzing, at the authenticator computing device, one or more authentication votes to determine whether the requesting user should be granted access to the resource, wherein each of the one or more authentication votes are associated with one or more voting users, wherein the one or more voting users includes at lease one user other than the requesting user; and granting the requesting user access to the resource when it is determined that the requesting user should be granted access to the resource based upon the analysis of the one or more authentication votes. ### Claim 13 (depends on 12) The one or more non-transitory computer-readable media of claim 12, further comprising instructions for: transmitting, from the authenticator computing device prior to analyzing the one or more authentication votes, an authentication vote query to the voting users associated with each of the one or more authentication votes; and transmitting, to the authenticator computing device, the one or more authentication votes from the one or more voting users in response to the authentication vote query from the authenticator computing device. ### Claim 14 (depends on 12) The one or more non-transitory computer-readable media of claim 12, wherein the one or more authentication votes are cast through one or more proxies. ### Claim 15 (depends on 12) The one or more non-transitory computer-readable media of claim 12, wherein the authentication votes are selected from positive votes and negative votes. ### Claim 16 (depends on 12) The one or more non-transitory computer-readable media of claim 12, wherein analyzing, at the authenticator computing device, one or more authentication votes to determine whether the requesting user should be granted access to the resource further comprises, collecting and summing the authentication votes to determine if a total number of authentication votes exceeds a predetermined threshold. ### Claim 17 An authentication system comprising: an authenticator computing device configured to: receive, at the authenticator computing device, a request to access a resource from a requesting user; analyze, at the authenticator computing device, one or more authentication votes to determine whether the requesting user should be granted access to the resource, wherein each of the one or more authentication votes are associated with one or more voting users, wherein the one or more voting users includes at least one user other than the requesting user; and grant the requesting user access to the resource when it is determined that the requesting user should be granted access to the resource based upon the analysis of the one or more authentication votes. ### Claim 18 (depends on 17) The authentication system of claim 17, wherein the authenticator computing device is further configured to: transmit, from the authenticator computing device prior to analyzing the one or more authentication votes, an authentication vote query to the voting users associated with each of the one or more authentication votes; and transmit, to the authenticator computing device, the one or more authentication votes from the one or more voting users in response to the authentication vote query from the authenticator computing device. ### Claim 19 (depends on 17) The authentication system of claim 17, wherein the one or more authentication votes are cast through one or more proxies. ### Claim 20 (depends on 17) The authentication system of claim 17, wherein the authentication votes are selected from positive votes and negative votes. ### Claim 21 (depends on 17) The authentication system of claim 17, wherein the authenticator computing device is further configured to analyze the one or more authentication votes by collecting and summing the authentication votes to determine if a total number of authentication votes exceed a predetermined threshold.