Device-based authentication for secure online access

A non-transitory computer storage medium having computer-executable instructions stored thereon that, when executed in a computer system, cause the computer system to perform operations comprising:

• storing, by a processor that executes a device-based authentication module, an authorized device list comprising a hardware identifier associated with a user device, wherein the hardware identifier is received with a login request received from the user device via a network;
• receiving, via an application programming interface and at the processor, an authentication request from a service provider system associated with an online service, the authentication request being associated with the login request and being received by the service provider system, wherein the authentication request comprises the hardware identifier, and wherein the service provider system is remote from the processor on the network;
• determining, by the processor and based upon the authorized device list, that the authorized device list comprises the hardware identifier;
• and
• in response to a determination that the authorized device list comprises the hardware identifier:
• analyzing, by the processor, a communication log associated with the user device, wherein the communication log is collected from a provider network and represents network traffic of the user device on the provider network,
• determining, by the processor and based upon the communication log, that the login request originated from the user device by determining that the user device is currently connected to the provider network and that the network traffic of the user device on the provider network is directed to the service provider system, and
• returning, by the processor and in response to the determination that the login request originated from the user device, an indication to the service provider system that the login request is authorized, whereby the user device can access the online service.

A method comprising:

• storing, by a processor that executes a device-based authentication module, an authorized device list comprising a hardware identifier associated with a user device, wherein the hardware identifier is received with a login request received from the user device via a network;
• receiving, via an application programming interface and at the processor, an authentication request from a service provider system associated with an online service, the authentication request being associated with the login request and being received by the service provider system, wherein the authentication request comprises the hardware identifier, and wherein the service provider system is remote from the processor on the network;
• determining, by the processor and based upon the authorized device list, that the authorized device list comprises the hardware identifier;
• and
• in response to a determination that the authorized device list comprises the hardware identifier:
• analyzing, by the processor, a communication log associated with the user device, wherein the communication log is collected from a provider network and represents network traffic of the user device on the provider network,
• determining, by the processor and based upon the communication log, that the login request originated from the user device by determining that the user device is currently connected to the provider network and that the network traffic of the user device on the provider network is directed to the service provider system, and
• returning, by the processor and in response to the determination that the login request originated from the user device, an indication to the service provider system that the login request is authorized, whereby the user device can access the online service.