Gateway mediated mobile device authentication
AssigneeEMC Corporation
InventorsYedidya Dotan, John G. Linn, Christopher Corde, Philip A. Darringer, Robert S. Philpott
Life of this patent
Estimating the term…
Abstract
A method is used in authenticating a mobile device user. An authentication invocation from a mobile device for access to computer resource is activated. Device unique identifiers and device forensic information are collected. The device unique identifiers and the device unique identifiers are forwarded to a gateway. An OTP is resolved into a unique device identifier using an authentication server. The device identifier is adaptively authenticated using multiple authentication factors.
Claims20
A method for use in authenticating a mobile device user, the method comprising:
- activating an authentication invocation from a mobile device for access to computer resource;
- collecting, at the mobile device, device unique identifiers, device forensic information, and a user identifier, wherein the device forensic information includes information residing on the mobile device that is not a unique identifier;
- generating, at the mobile device, a one-time password (OTP);
- forwarding an authorization request to a mediated gateway, the authorization request including the collected information and the OPT;
- validating, at the computer resource, the one-time password (OTP);
- converting the OTP and user identifier into a globally unique device identifier using an authentication server;
- and
- adaptively authenticating the user using the globally unique device identifier and the collected information.
A system for use in authenticating a mobile device user, the system comprising:
- first hardware logic configured to activate an authentication invocation from a mobile device for access to computer resource;
- second hardware logic configured to collect, at the mobile device, device unique identifiers, device forensic information, and a user identifier, wherein the device forensic information includes information residing on the mobile device that is not a unique identifier;
- generate, via the second hardware logic, a one-time password (OTP);
- third hardware logic configured to forward an authorization request to a mediated gateway, the authorization request including the collected information and the OPT;
- forth hardware logic configured to validate, at the computer resource, the OTP;
- convert, via the forth hardware logic, the OPT and user identifier into a globally unique device identifier using an authentication server;
- and
- fifth hardware logic configured to adaptively authenticate the user using the globally unique device identifier and the collected information.
Dependencies are inferred from the claim text.