Determining user authentication requirements based on the current location of the user being within a predetermined area requiring altered authentication requirements

• US 10,049,195 B2
• Filed: 02/04/2016
• Issued: 08/14/2018
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Bertanzetti, Peter John, Burrell, Charles Jason, Hanson, Carrie Anne, Johansen, Joseph Neil, Toth, Michael E.
• Primary Examiner(s): Kanaan, Simon P
• Application Number:
  US15/016,125
• Publication Number:
  US 20160156608A1
• Time in Patent Office: 922 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Systems, apparatus, methods, and computer program products are provided for determining a user'"'"'s authentication requirements/credentials for a specific network access session based on the current location of the user in comparison to predetermined boundaries of location that have altered authentication requirements, in the form of, increased or decreased authentication requirements/credentials that differ from the standard authentication requirements.

Claims

1. A server for determining authentication requirements for accessing a network service provided by the server, the server being operated by an entity, the server comprising:

a computing platform including a memory and a processor in communication with the memory; and

an authentication requirements module stored in the memory, executable by the processor and configured to,

determine that unsecured wireless communication is prevalent in a predefined physical area;

in response to determining that unsecured wireless communication is prevalent in the predefined physical area, configure the predefined physical area for altered authentication requirements, the altered authentication requirements providing for increased authentication requirements in comparison to standard authentication requirements used to initially access the network service provided by the server, wherein the altered authentication requirements are further based on a designated time period;

after determining that unsecured wireless communication is prevalent in the predefined physical area and configuring the predefined physical area for the altered authentication requirements, receive, from a handheld mobile communication device in wireless network communication with the server, a request for a user operating the handheld mobile communication device to access the network service provided by the server, accessible via an executable application stored on the handheld mobile communication device, where the network service requires user authentication for access;

in response to receiving the request, determine a current physical location of the user and a time associated with the request based on data received from the handheld mobile communication device;

determine that the current location of the user is within the predefined physical area and that the time associated with the request is during the designated time period associated with the predefined physical area;

identify the altered authentication requirements associated with the predefined physical area and the designated time period;

receive from the user authentication data; and

provide the handheld mobile communication device with initial access to the network service in response to the user meeting the altered authentication requirements associated with the predefined physical area and the designated time period.

2. The server of claim 1, wherein the predefined physical area is defined by the entity operating the server.

3. The server of claim 1, wherein the predefined physical area is defined by the user.

4. The server of claim 1, further comprising a service access module stored in the memory, executable by the processor and configured to determine that the handheld mobile communication device has an altered level of access within the network service, wherein the altered level of access provides for one of (1) increased or (2) decreased access to functionality within the network service once the user has met the altered authentication requirements.

5. The server of claim 4, wherein the altered level of access provides for increased access to functionality within the network service once the user has met the altered authentication requirements.

6. The server of claim 4, wherein the altered level of access provides for decreased access to functionality within the network service once the user has met the altered authentication requirements.