Automatic migration of communication sessions using a private cloud-cloud technology

• US 10,320,920 B2
• Filed: 05/23/2017
• Issued: 06/11/2019
• Est. Priority Date: 05/23/2017
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Mishra, Amit
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US15/602,236
• Publication Number:
  US 20180343310A1
• Time in Patent Office: 749 Days
• Field of Search: 726 2- 7, 713168-170
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/148 Migration or transfer of sessions
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

The migration of a communication session from one device to another device may include registering at least two devices, authenticating user credentials at the second device, determining whether transfer of the session is authorized, storing session information associated with the session, transmitting the stored session information to the second device, and receiving a request that incorporates the transmitted session information to restore the communication session on the second device. In addition, access to the system may be prohibited from the first device for a predefined period of time.

Claims

1. An apparatus, comprising:

a user interface operable to provide an active communication to a first device and a second device coupled to a network and one or more credentials from a user;

a memory operable to store the credentials from a user, an identifier of the first device, an identifier of the second device, and session information associated with an active communication session;

a network interface operable to communicate with the network;

a processor communicatively coupled to the user interface, the memory, and the network interface, the processor operable to;

register the first device and the second device;

detect the active communication session with the first device;

receive and authenticate credentials of the user at the second device;

determine, using the identifier of the first device and the identifier of the second device, whether the first device and the second device are registered and whether transfer of the active communication session from the first device to the second device is authorized;

if the first device and the second device are registered and transfer of the active communication session from the first device to the second device is authorized;

store, in the memory, after authenticating credentials of the user at the second device, the session information corresponding to the active communication session with the first device;

transmit the stored session information associated with the communication session to the second device;

receive a request associated with the active communication session that includes the transmitted session information to restore the communication session on the second device based on the received request and the session information; and

prohibit access to the active communication session from the first device for a predefined period of time.

2. The apparatus of claim 1, wherein the credentials of the user at the second device comprise at least one biometric credential.

3. The apparatus of claim 1, wherein the identifier of the first device or the identifier of the second device comprises at least one identifier selected from a group of an Internet Protocol (IP) address, a media access control (MAC) address, a geographic location, and/or a security token, associated with the first device or the second device respectively.

4. The apparatus of claim 1, wherein the session information comprises a session identifier of the active communication session.

5. The apparatus of claim 1, wherein registering the first device and the second device comprises:

receiving a first request by the user to remember the first device;

generating and transmitting a first security token to the first device for storage on the first device;

receiving a second request by the user to remember the second device; and

generating and transmitting a second security token to the second device for storage on the second device.

6. The apparatus of claim 1, wherein the processor is further operable to compare the identifier of the first device or the identifier of the second device against fraud rules to determine whether transfer of the communication session is authorized.

7. The apparatus of claim 1, wherein the identifier of the first device comprises a geographic location of the first device and the identifier of the second device comprises a geographic location of the second device, and the processor is further operable to:

receive the geographic location of the first device;

receive the geographic location of the second device; and

authorize transfer of the active communication session from the first device to the second device if the geographic location of the first device and the geographic location of the second device are within a predefined value of each other.

8. A method, comprising:

registering a first device and a second device coupled to a communication network in response to a user request;

detecting an active communication session with the first device;

receiving and authenticating credentials of the user at the second device;

determining, using an identifier of the first device and an identifier of the second device, whether the first device and the second device are registered and whether transfer of the active communication session from the first device to the second device is authorized;

if the first device and the second device are registered and transfer of the active communication session from the first device to the second device is authorized;

storing, in a memory, after authenticating credentials of the user at the second device, session information corresponding to the active communication session with the first device;

transmitting the stored session information associated with the communication session to the second device;

receiving a request associated with the active communication session that includes the transmitted session information to restore the communication session on the second device based on the received request and the session information; and

prohibiting access to the active communication session from the first device for a predefined period of time.

9. The method of claim 8, wherein the credentials of the user at the second device comprises at least one biometric credential.

10. The method of claim 8, wherein the identifier of the first device or the identifier of the second device comprises at least one identifier selected from a group of an Internet Protocol (IP) address, a media access control (MAC) address, a geographic location, and/or a security token, associated with the first device or the second device respectively.

11. The method of claim 8, wherein the session information comprises a session identifier of the active communication session.

12. The method of claim 8, wherein registering the first device and the second device comprises:

receiving a first request by the user to remember the first device;

storing, in a memory, the identifier of the first device and generating a first security token;

transmitting the first security token to the first device for storage on the first device;

receiving a second request by the user to remember the second device;

storing, in the memory, the identifier of the second device and generating a second security token; and

transmitting a second security token to the second device for storage on the second device.

13. The method of claim 8, further comprising comparing the identifier of the first device or the identifier of the second device against fraud rules to determine whether transfer of the communication session is authorized.

14. The method of claim 8, wherein the identifier of the first device comprises a geographic location of the first device and the identifier of the second device comprises a geographic location of the second device, and the method further comprises:

receiving the geographic location of the first device;

receiving the geographic location of the second device; and

authorizing transfer of the active communication session from the first device to the second device if the geographic location of the first device and the geographic location of the second device are within a predefined value of each other.

15. A system, comprising:

a first device and a second device associated with a user and coupled to a network;

a data server comprising a processor operable to;

register the first device and the second device;

detect an active communication session with the first device;

receive and authenticate credentials of the user at the second device;

determine, using an identifier of the first device and an identifier of the second device, whether the first device and the second device are registered and whether transfer of the active communication session from the first device to the second device is authorized;

if the first device and the second device are registered and transfer of the active communication session from the first device to the second device is authorized;

store, after authenticating credentials of the user at the second device, the session information corresponding to the communication session with the first device;

transmit the stored session information associated with the communication session to the second device;

receive a request associated with the active communication session that includes the transmitted session information to restore the communication session on the second device based on the received request and the session information; and

prohibit access to the active communication session from the first device for a predefined period of time.

16. The system of claim 15, wherein the credentials of the user at the second device comprises at least one biometric credential.

17. The system of claim 15, wherein the identifier of the first device or the identifier of the second device comprises at least one identifier selected from a group of an Internet Protocol (IP) address, a media access control (MAC) address, a geographic location, and/or a security token, associated with the first device or the second device respectively.

18. The system of claim 15, wherein the session information comprises a session identifier of the active communication session.

19. The system of claim 15, wherein registering the first device and the second device comprises:

receiving a first request by the user to remember the first device;

generating and transmitting a first security token to the first device for storage on the first device;

receiving a second request by the user to remember the second device; and

generating and transmitting a second security token to the second device for storage on the second device.

20. The system of claim 15, wherein the identifier of the first device comprises a geographic location of the first device and the identifier of the second device comprises a geographic location of the second device, and the processor is further operable to:

receive the geographic location of the first device;

receive the geographic location of the second device; and

authorize transfer of the active communication session from the first device to the second device if the geographic location of the first device and the geographic location of the second device are within a predefined value of each other.