Novel authentication system and method using an immutable factor comprised of secure device id and geolocation computed by satellite leo assistance

An immutable factor authentication method for determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a public device ID and a user of the user device having user login credentials, the method comprising storing a plurality of pre-authorized user device geolocations and a plurality of pre-authorized user credentials;

• receiving the public device ID of the user device and the user login credentials of the user;
• determining whether the user login credentials match one of the pre-authorized user credentials;
• if the user login credentials are determined to match one of the pre-authorized user credentials, requesting and receiving a computed geolocation for the user device from a trusted source;
• determining, using the public device ID, whether the computed geolocation matches one of the pre-authorized user device geolocations;
• and
• if the computed geolocation is determined to match one the pre-authorized user device geolocations, validating that the user device is authorized to have access to the resource or the service of the provider.

A trusted network system for use in determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device and the provider having a provider unique device ID that is stored on a device of the provider, comprising:

• a plurality of cluster member satellites;
• and
• an authentication system provided on one of the cluster member satellites, the authentication system including a certifying authority and a database, wherein the database stores a plurality of pre-authorized provider unique IDs, a plurality of pre-authorized provider geolocations, and a plurality of pre-authorized user device unique IDs, wherein the certifying authority is structured and configured to:
• (i) receive a public device ID of the device of the provider and the provider unique ID;
• (ii) determine whether the provider unique ID matches one of the pre-authorized provider unique IDs;
• (iii) if the provider unique ID is determined to match one of the pre-authorized provider unique IDs, compute a geolocation for the device of the provider and determine, using the public device ID of the device of the provider, whether the computed geolocation matches one of the pre-authorized provider geolocations;
• (iv) if the computed geolocation is determined to match one of the pre-authorized provider geolocations, receive a public device ID of the user device and the user device unique ID;
• and
• (v) determine, using the public device ID of the user device, whether the user device unique ID matches one of the pre-authorized user device unique IDs.

A trusted network authentication method for use in determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device and the provider having a provider unique device ID that is stored on a device of the provider, the method comprising:

• storing a plurality of pre-authorized provider unique IDs, a plurality of pre-authorized provider geolocations, and a plurality of pre-authorized user device unique IDs in a database of an authentication system provided on a cluster member satellite;
• receiving a public device ID of the device of the provider and the provider unique ID;
• determining whether the provider unique ID matches one of the pre-authorized provider unique IDs;
• if the provider unique ID is determined to match one of the pre-authorized provider unique IDs, computing a geolocation for the device of the provider and determining, using the public device ID of the device of the provider, whether the computed geolocation matches one of the pre-authorized provider geolocations;
• if the computed geolocation is determined to match one of the pre-authorized provider geolocations, receiving a public device ID of the user device and the user device unique ID;
• and
• determining, using the public device ID of the user device, whether the user device unique ID matches one of the pre-authorized user device unique IDs.

An authentication system for use in determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device and a user device public device ID, comprising:

• a certifying authority and a database, wherein the database stores a plurality of pre-authorized user device public device IDs, wherein the certifying authority is structured and configured to:
• (i) receive, in response to an authentication request, the user device unique ID and the user device public device ID;
• (ii) determine whether the received user device public device ID matches one of the pre-authorized user device public device IDs based on the received user device unique ID;
• and
• (iii) successfully authenticate the user device if it is determined that the received user device public device ID matches one of the pre-authorized user device public device IDs.

An authentication method for use in determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device and a user device public device ID, the method comprising:

• storing a plurality of pre-authorized user device public device IDs;
• receiving, in response to an authentication request, the user device unique ID and the user device public device ID;
• determining whether the received user device public device ID matches one of the pre-authorized user device public device IDs based on the received user device unique ID;
• and
• successfully authenticating the user device if it is determined that the received user device public device ID matches one of the pre-authorized user device public device IDs.

An immutable factor authentication system for determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device, comprising:

• an access control engine;
• and
• a credential database, wherein the credential database stores a plurality of pre-authorized user device geolocations, wherein the access control engine is structured and configured to:
• (i) store a plurality of pre-authorized user device geolocations;
• (ii) receive an authentication message from a trusted source indicating that the user device has been successfully authenticated using the user device unique ID;
• (iii) responsive to the receipt of the authentication message, request and receive a computed geolocation for the user device from the trusted source;
• (iv) determine whether the computed geolocation matches one the pre-authorized user device geolocations;
• and
• (v) if the computed geolocation is determined to match one the pre-authorized user device geolocations, validate that the user device is authorized to have access to the resource or the service of the provider.

An immutable factor authentication method for determining whether a user device is authorized to have access to a resource or service of a provider, the user device having a user device unique ID that is stored on the user device, the method comprising:

• storing a plurality of pre-authorized user device geolocations;
• receiving an authentication message from a trusted source indicating that the user device has been successfully authenticated using the user device unique ID;
• responsive to the receipt of the authentication message, requesting and receiving a computed geolocation for the user device from the trusted source;
• determining whether the computed geolocation matches one the pre-authorized user device geolocations;
• and
• if the computed geolocation is determined to match one the pre-authorized user device geolocations, validating that the user device is authorized to have access to the resource or the service of the provider.

An immutable factor authentication method for determining whether a user device is authorized to have access to a resource or service of a server, the user device having a public device ID, the method comprising

• storing a plurality of pre-authorized user device geolocations;
• requesting and receiving a plurality of computed geolocations for the user device from a trusted source using the public device ID;
• for each of the computed geolocations, determining whether the computed geolocation matches one of the pre-authorized user device geolocations;
• responsive to determining that each of the computed geolocations matches one of the pre-authorized user device geolocations, running location analytics on the plurality of computed geolocations to determine a number of geolocation differential values from pairs of the computed geolocations;
• determining from the number of geolocation differential values whether physical movement of the user device violates predetermined motion constraints;
• and
• determining that malicious activity may have occurred responsive to determining that the physical movement of the user device violates the predetermined motion constraints.