Authentication based on proximity to mobile device

• US 10,212,591 B1
• Filed: 08/15/2017
• Issued: 02/19/2019
• Est. Priority Date: 08/11/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Queru, Jean Baptiste Maurice
• Primary Examiner(s): Goodchild, William J.
• Application Number:
  US15/677,112
• Time in Patent Office: 553 Days
• Field of Search: None
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for performing multi-factor authentication. In one aspect, a method includes determining that a user has successfully completed an authentication factor, determining whether a mobile device associated with the user is proximate to a computer; and authenticating the user based on determining that the user has successfully completed the authentication factor, and that the mobile device is proximate to the computer.

Claims

1. A computer-implemented method comprising:

determining that a user has successfully completed an authentication factor;

determining whether a mobile device associated with the user is proximate to a computer, the determining comprising;

receiving first wireless triangulation position data corresponding to a mobile device position;

receiving second wireless triangulation position data corresponding to a computer position;

determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;

determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and

authenticating, by one or more computers, the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.

2. The method of claim 1, wherein determining that the mobile device associated with the user is proximate to the computer further comprises determining the existence of a connection between the mobile device and the computer.

3. The method of claim 1, further comprising:

determining, in response to determining that the mobile device is not proximate to the computer by determining that the distance between the mobile device position and the computer position exceeds the maximum threshold, that the user has successfully completed an additional authentication factor; and

authenticating the user based on determining that the user has successfully completed both the authentication factor and the additional authentication factor.

4. The method of claim 1, wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor for gaining access to a computer software application executing on the computer.

5. The method of claim 1, wherein the computer comprises a node of a centralized network and wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor through interaction with the node.

6. The method of claim 1, further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the mobile device.

7. The method of claim 1, further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the computer.

8. The method of claim 1, further comprising:

determining that the mobile device can no longer be used to authenticate any user prior to determining whether the mobile device associated with the user is proximate to the computer; and

eliminating an association between the mobile device and the user.

9. The method of claim 1, wherein the mobile device and the computer are connected to a same wireless network.

10. The method of claim 1, wherein determining the mobile device position and determining the computer position are determined within a resolution of one foot or less of an actual mobile device position or an actual computer position, respectively.

11. The method of claim 1, further comprising:

transmitting the first wireless triangulation position data and the second wireless triangulation position data; and

receiving the distance between the mobile device position and the computer position.

12. The method of claim 11, further comprising receiving an indication the mobile device is proximate the computer based on a determination the distance between the mobile device position and the computer position does not exceed the maximum threshold.

13. A computer-readable storage medium storing computer software instructions executable by one or more data processing apparatus which, upon such execution, cause the one or more data processing apparatus to perform operations comprising:

determining that a user has successfully completed an authentication factor;

determining whether a mobile device associated with the user is proximate to a computer, the determining comprising;

receiving first wireless triangulation position data corresponding to a mobile device position;

receiving second wireless triangulation position data corresponding to a computer position;

determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;

determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and

authenticating the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.

14. The medium of claim 13, wherein determining that the mobile device associated with the user is proximate to the computer further comprises determining the existence of a wireless connection between the mobile device and the computer.

15. The medium of claim 13, the operations further comprising:

determining, in response to determining that the mobile device is not proximate to the computer, that the user has successfully completed an additional authentication factor; and

authenticating the user based on determining that the user has successfully completed both the authentication factor and the additional authentication factor.

16. The medium of claim 13, wherein the computer comprises a node of a centralized network and wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor through interaction with the node.

17. The medium of claim 13, the operations further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the mobile device.

18. The medium of claim 13, the operations further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the computer.

19. The medium of claim 13, the operations further comprising:

determining that the mobile device can no longer be used to authenticate any user prior to determining whether the mobile device associated with the user is proximate to the computer; and

eliminating an association between the mobile device and the user.

20. A system comprising:

one or more computers; and

a computer-readable storage medium storing computer software instructions executable by the one or more computers which, upon such execution, cause the one or more computers to perform operations comprising;

determining that a user has successfully completed an authentication factor;

determining whether a mobile device associated with the user is proximate to a computer, the determining comprising;

receiving first wireless triangulation position data corresponding to a mobile device position;

receiving second wireless triangulation position data corresponding to a computer position;

determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;

determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and

authenticating the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.