Systems and methods of authentication using vehicle data

• US 10,498,727 B1
• Filed: 08/29/2018
• Issued: 12/03/2019
• Est. Priority Date: 08/29/2018
• Status: Active Grant

• Current Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Original Assignee: Capital One Services LLC (Capital One Financial Corporation)
• Inventors: Sherif, Timur, Blanchet, Steve, Jouhikainen, Hannes, Aznaurashvili, Zviad
• Primary Examiner(s): Sholeman, Abu S
• Application Number:
  US16/116,478
• Time in Patent Office: 461 Days
• Field of Search: 713168
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/025 using location based information parameters
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

Multi-factor authentication systems and methods are provided that include receiving a request to authenticate a user of a mobile device. The request for authentication may include credential information associated with the user and vehicle data. A determination may be made regarding whether the vehicle data was obtained from a vehicle via the mobile device. The received vehicle data and received credential information may be compared to stored data. When there is a match between the received vehicle data and received credential information and corresponding stored data, a notification may be provided to the user device, indicating that the user has been authenticated.

Claims

1. A multi-factor authentication system, comprising:

one or more memory devices storing instructions; and

one or more processors configured to execute the instructions to perform operations comprising;

receiving, from a user device, a request to authenticate a user attempting to use an application, the request comprising credential information associated with the user and vehicle data obtained from a vehicle system, wherein the vehicle data comprises data unique to the vehicle system, and wherein the vehicle data is encrypted using a public key;

receiving an encrypted marker of a link between the vehicle system and the user device, the encrypted marker comprising indication of whether the user device was paired with the vehicle system;

determining, using the encrypted marker, whether the vehicle data was obtained from the vehicle system via the user device;

comparing the received vehicle data to stored user vehicle data;

comparing the received credential information to stored user data;

determining whether the received vehicle data matches the stored user vehicle data and the received credential information matches the stored user data; and

granting the user device access to the application.

2. The multi-factor authentication system of claim 1, wherein the operations further comprise determining the received vehicle data was obtained from the vehicle system at a time associated with the request.

3. The multi-factor authentication system of claim 1, wherein the operations further comprise:

determining a location of the vehicle system from the received vehicle data;

receiving a location of the user device;

comparing the received user device location to the determined vehicle system location.

4. The multi-factor authentication system of claim 1, wherein the operations further comprise:

receiving a first set of vehicle data from the vehicle system;

comparing the vehicle data received from the user device to the first set of vehicle data received from the vehicle system.

5. The multi-factor authentication system of claim 1, wherein the operations further comprise:

determining there was a link between the user device and the vehicle system and the user device obtained the received vehicle data over the link.

6. The multi-factor authentication system of claim 5, wherein determining there was a link further comprises receiving encrypted markers evidencing the user device was paired with the vehicle system.

7. The multi-factor authentication system of claim 1, wherein the vehicle system further comprises a connector configured to communicatively couple to an electronic control unit of a vehicle.

8. The multi-factor authentication system of claim 7, wherein the vehicle system further comprises a controller, a communication device, and a position determining device.

9. The multi-factor authentication system of claim 1, wherein the received vehicle data includes biometric driver data generated by an electronic control unit of a vehicle.

10. The multi-factor authentication system of claim 1, wherein the operations further comprise accessing the stored user vehicle data from a remote database.

11. The multi-factor authentication system of claim 1, wherein the received request is encrypted with a private key, and the operations further comprise decrypting the received request using a public key.

12. A multi-factor authentication system, comprising:

one or more memory devices storing instructions; and

one or more processors configured to execute the instructions to perform operations comprising;

prompting a user of a user device attempting to use an application for credential information;

receiving, from the user device, credential information associated with the user and vehicle data obtained from a vehicle system, wherein the vehicle data comprises data unique to the vehicle system, and wherein the vehicle data is encrypted using a public key;

receiving an encrypted marker of a link between the vehicle system and the user device, the encrypted marker comprising indication of whether the user device was paired with the vehicle system;

determining whether the user device is linked to a vehicle system;

receiving vehicle data from the linked vehicle system via the user device;

determining, using the encrypted marker, whether the vehicle data was obtained from the vehicle system via the user device;

comparing the received vehicle data to user vehicle data;

comparing the received credential information to user data;

determining whether the received vehicle data matches the user vehicle data and the received credential information matches the user data; and

granting the user device access to the application.

13. The multi-factor authentication system of claim 12, wherein the operations further comprise determining the received vehicle data was obtained from the vehicle system at a time associated with the request.

14. The multi-factor authentication system of claim 12, wherein the operations further comprise:

determining a location of the vehicle system from the received vehicle data;

determining a location of the user device;

comparing the determined user device location to the determined vehicle system location.

15. The multi-factor authentication system of claim 12, wherein the operations further comprise:

receiving a first set of vehicle data from the vehicle system;

comparing the vehicle data received from the user device to the first set of vehicle data received from the vehicle system.

16. The multi-factor authentication system of claim 12, wherein the operations further comprise:

determining there was a link between the user device and the vehicle system and the user device obtained the received vehicle data over the link.

17. The multi-factor authentication system of claim 16, wherein determining there was a link further comprises receiving encrypted markers evidencing the user device was paired with the vehicle system.

18. The multi-factor authentication system of claim 12, wherein the vehicle system further comprises a connector configured to communicatively couple to an electronic control unit of a vehicle.

19. The multi-factor authentication system of claim 12, wherein the received vehicle data includes biometric driver data generated by an electronic control unit of a vehicle.

20. The multi-factor authentication system of claim 12, wherein the received vehicle data is encrypted with a private key, and the operations further comprise:

decrypting the received vehicle data using a public key.