Automated Peer Authentication

• US 20090037985A1
• Filed: 08/01/2007
• Published: 02/05/2009
• Est. Priority Date: 08/01/2007
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Technology LLC (Avaya Incorporated)
• Inventors: Krishnakumar, Anjur Sundaresan, Bentley, Jon Louis, Weiss, David Mandel
• Granted Patent: US 8,646,039 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An apparatus and methods are disclosed for performing peer authentication without the assistance of a human “guard.” In accordance with the illustrative embodiments, a peer is selected from a non-empty set of candidates at authentication time based on one or more of the following dynamic properties: the current geo-location of the user to be authenticated; the current geo-locations of the candidates; the current time; the contents of one or more directories (e.g., a telephone directory, an organizational chart or directory, etc.), the contents of one or more call logs; and the candidates'"'"' schedules.

Claims

1. An apparatus comprising:

a receiver for receiving a signal that indicates that a user is to be authenticated; and

a processor for selecting a peer to authenticate said user;

wherein the selection of said peer is based one or more properties of one or more entities; and

wherein at least one of said properties is expected to change during any time interval of N minutes;

and wherein N is a positive number.

2. The method of claim 1 wherein N is no more than 60.

3. The method of claim 1 wherein N is no more than 1440.

4. The method of claim 1 wherein N is no more than 10080.

5. The method of claim 1 wherein the selection of said peer is based on the current geo-location of said user.

6. The method of claim 5 wherein the selection of said peer is also based on the current geo-location of said peer.

7. The method of claim 1 wherein the selection of said peer is based on the current geo-location of said peer.

8. The method of claim 1 wherein the selection of said peer is based on the contents of a call log.

9. The method of claim 1 wherein the selection of said peer is based on a schedule for one or more users.

10. A method comprising selecting a peer to authenticate a user, wherein the selection of said peer is based on one or more properties of one or more entities, and wherein at least one of said properties is expected to change during any time interval of N minutes, and wherein N is a positive number.

11. The method of claim 10 wherein N is no more than 60.

12. The method of claim 10 wherein N is no more than 1440.

13. The method of claim 10 wherein N is no more than 10080.

14. The method of claim 10 wherein the selection of said peer is based on the current geo-location of said user.

15. The method of claim 10 wherein the selection of said peer is based on the contents of a call log.

16. The method of claim 15 wherein the selection of said peer is based on the time of the most recent call between said user and said peer.

17. The method of claim 15 wherein the selection of said peer is based on the number of calls between said user and said peer in a time interval.

18. The method of claim 15 wherein the selection of said peer is based on the duration of a call between said user and said peer.

19. The method of claim 10 wherein the selection of said peer is based on a hierarchical organization chart.

20. A method comprising:

transmitting to a peer a signal that indicates that a user is to be authenticated by said peer;

receiving from said peer, in response to said signal, a non-Boolean value; and

determining whether to authenticate said user based on said non-Boolean values.

21. The method of claim 20 wherein said non-Boolean value is a degree of confidence specified by said peer.

22. The method of claim 20 wherein said non-Boolean value is a degree of correctness for a response by said user to a question.

23. The method of claim 20 further comprising determining whether to lock out said user based on said non-Boolean value.