Multi-Factor Message Authentication
AssigneeComcast Cable Communications, LLC
InventorsVinayaka Poovappa, Saravanan Muthuswamy, Ken Landry, Rajesh Sonak
Life of this patent
Estimating the term…
Abstract
Systems, methods, and apparatuses are described for authenticating a user device and/or user application. A user device may receive, based on a first authentication request, a plurality of messages sent over a plurality of channels of communication (e.g., a message to a URL address associated with the user device and a binary Short Message Service (SMS) message). Based on information from the messages, the user device may transmit a second authentication request.
Claims40
An apparatus comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- send a first request to authenticate an application associated with the apparatus, wherein the first request comprises an identification (ID) token associated with the application;
- receive, based on sending the first request, a message comprising a nonce value;
- send a second request to authenticate the apparatus, wherein the second request comprises the ID token and an authentication digest based on the nonce value;
- and
- receive, after sending the second request, an access token associated with the application.
An apparatus comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- based on authenticating an application, associated with a user device, using an application identification (ID) token received from the user device, cause sending, to the user device, a message comprising a nonce value;
- receive, from the user device, a request to authenticate the user device, wherein the request comprises the application ID token and an authentication digest based on the nonce value;
- and
- based on authenticating the user device by validating the authentication digest, send, to the user device, an access token associated with the application.
A non-transitory computer readable medium storing instructions that, when executed, cause:
- sending a first request to authenticate an application associated with a computing device, wherein the first request comprises an identification (ID) token associated with the application;
- receiving, based on sending the first request, a message comprising a nonce value;
- sending a second request to authenticate the computing device, wherein the second request comprises the ID token and an authentication digest based on the nonce value;
- and
- receiving, after sending the second request, an access token associated with the application.
A non-transitory computer readable medium storing instructions that, when executed, cause:
- based on authenticating an application, associated with a user device, using an application identification (ID) token received from the user device, sending, to the user device, a message comprising a nonce value;
- receiving, from the user device, a request to authenticate the user device, wherein the request comprises the application ID token and an authentication digest based on the nonce value;
- and
- based on authenticating the user device by validating the authentication digest, sending, to the user device, an access token associated with the application.
Dependencies are inferred from the claim text.