Determining user authentication requirements along a continuum based on a current state of the user and/or the attributes related to the function requiring authentication

• US 10,050,962 B2
• Filed: 10/30/2015
• Issued: 08/14/2018
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Bertanzetti, Peter John, Burrell, Charles Jason, Hanson, Carrie Anne, Johansen, Joseph Neil, Toth, Michael E.
• Primary Examiner(s): Kanaan, Simon P
• Application Number:
  US14/928,312
• Publication Number:
  US 20160057144A1
• Time in Patent Office: 1,019 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

Systems, apparatus, methods, and computer program products are provided for determining a user'"'"'s authentication requirements/credentials for function requiring authentication based on determining a location along an authentication continuum. The location along the authentication continuum defines the degree of authentication/credentials required to access the function and is determined based on a current state of the user and/or function attributes. The more or less that is known about the current state of the user the more or less likely the user is the user that is attempting to access the function and, thus, the authentication requirements required to access the function can be adjusted according (increased or decreased).

Claims

1. A system for determining user authentication requirements, the system comprising:

a mobile communication device including a memory, at least one processor in communication with the memory, and a Global Positioning System (GPS) mechanism; and

an authentication requirements module stored in the memory, executable by the processor and configured to,

store a geographic area and a period of time associated with the geographic area, wherein the geographic area and the period of time are dynamically defined by the provider of a service,

receive, from the mobile communication device, a request for a user to access the service, wherein the service requires authentication prior to the user accessing the service,

in response to receiving the request, instruct the GPS mechanism to determine a current physical location of the mobile communication device and a time associated with the request, and

in response to determining that (i) the mobile communication device is currently located within the geographic area, and (ii) the current time is within the period of time, request the user to provide decreased authentication credentials, wherein the decreased authentication credentials include authentication that differ from standard authentication credentials, further comprising a service access module stored in the memory, executable by the processor and configured to determine a level of access available to the user of the service upon the user providing the determined authentication requirements, wherein the level of access defines functionality available to the user within the service based on the decreased authentication credentials required, wherein the level of access is granted to the user in response to the user providing the decreased authentication credentials,

wherein the authentication requirements module is further configured to, in response to determining at least one of (1) the apparatus is currently located outside of the geographic area, (2) the current time is outside of the period of time, determine a level of authentication required for the user to access the service based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein the level of authentication is from amongst a plurality of levels of authentication, wherein the user is provided access to the service in response to the user inputting the determined level of authentication required.

2. The system of claim 1, wherein the authentication requirements module is further configured to determine the level of authentication required based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein each level of authentication is defined by at least one of a predetermined distance threshold from the geographic location or a predetermined time threshold from the period of time.

3. The system of claim 1, wherein the authentication requirements module is further configured to determine a point along an authentication continuum based on the proximity in at least one of (i) distance and (ii) time of the current physical location of the user to the geographic location or the period of time, wherein the point along the authentication continuum corresponds to predetermined authentication credentials.