Determining Authentication Challenge Timing and Type

• US 20090131015A1
• Filed: 11/19/2007
• Published: 05/21/2009
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Bentley, Jon Louis, O'Gorman, Lawrence, Skiba, David Joseph, Erhart, George William, Sammon, Michael J.
• Granted Patent: US 8,918,079 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An apparatus and methods are disclosed for authenticating users of wireless telecommunications terminals. In particular, the present invention enables the timing and type of authentication challenges to vary based on one or more of: the user'"'"'s current geo-location, the current day and time, the presence or absence of other nearby users, and the identity of any nearby users. In accordance with the illustrative embodiment, the re-authentication time period (i.e., the length of time between authenticating and re authenticating a user) and the authentication challenge type (e.g., username/password, fingerprint recognition, etc.) can be determined based on these factors. The present invention is advantageous in that it enables the shortening of the re-authentication time and the selection of a more secure type of authentication challenge when it is more likely that a user'"'"'s wireless telecommunications terminal might be accidentally left behind or stolen.

Claims

1. A method comprising:

presenting a first authentication challenge at a wireless telecommunications terminal W at time t₁; and

presenting a second authentication challenge at said wireless telecommunications terminal W at time t₂;

wherein the magnitude of t₂−

t₁ is based on the geo-location of said wireless telecommunications terminal W at one or more instants in time interval [t₁, t₂].

2. The method of claim 1 wherein the magnitude of t₂−

t₁ is also based on a history of the geo-location of said wireless telecommunications terminal W.

3. The method of claim 1 wherein said wireless telecommunications terminal W is registered to a user U, and wherein the magnitude of t₂−

t₁ is also based on a schedule that has one or more entries associated with said user U.

4. The method of claim 1 wherein said wireless telecommunications terminal W is registered to a user U, and wherein the magnitude of t₂−

t₁ is also based on whether there is a wireless telecommunications terminal Z that;

(i) is in the vicinity of said telecommunications terminal W, and

(ii) is registered to a different user than said user U.

5. A method comprising generating an authentication challenge whose type is based on the geo-location of a wireless telecommunications terminal W.

6. The method of claim 5 wherein said type of said authentication challenge is also based on a history of the geo-location of said wireless telecommunications terminal W.

7. The method of claim 5 wherein said type of said authentication challenge is also based on the calendrical time at said wireless telecommunications terminal W.

8. The method of claim 5 wherein said wireless telecommunications terminal W is registered to a user U, and wherein said type of said authentication challenge is also based on whether there is a wireless telecommunications terminal Z that:

(i) is in the vicinity of said telecommunications terminal W, and

(ii) is registered to a different user than said user U.

9. A method comprising:

presenting a first authentication challenge at a wireless telecommunications terminal W at time t₁; and

presenting a second authentication challenge at said wireless telecommunications terminal W at time t₂;

wherein the magnitude of t₂−

t₁ is based on one or more of;

(i) the day in which t₁ falls,

(ii) the time of day of t₁,

(iii) the day in which t₂ falls, and

(iv) the time of day of t₂.

10. The method of claim 9 wherein said wireless telecommunications terminal W is registered to a user U, and wherein the magnitude of t₂−

t₁ is also based on a schedule that has one or more entries associated with said user U.

11. The method of claim 9 wherein said wireless telecommunications terminal W is registered to a user U, and wherein said authentication challenge is also based on whether there is a wireless telecommunications terminal Z that:

(i) is in the vicinity of said telecommunications terminal W at one or more instants in time interval [t₁, t₂], and

(ii) is registered to a different user than said user U.

12. A method comprising generating an authentication challenge whose type is based on the calendrical time at a wireless telecommunications terminal W.

13. The method of claim 12 wherein said wireless telecommunications terminal W is registered to a user U, and wherein said type of said authentication challenge is also based on a schedule that has one or more entries associated with said user U.

14. The method of claim 12 wherein said type of said wireless telecommunications terminal W is registered to a user U, and wherein said authentication challenge is also based on whether there is a wireless telecommunications terminal Z that:

(i) is in the vicinity of said telecommunications terminal W, and

(ii) is registered to a different user than said user U.

15. A method comprising:

presenting a first authentication challenge at a wireless telecommunications terminal W at time t₁; and

presenting a second authentication challenge at said wireless telecommunications terminal W at time t₂;

wherein said wireless telecommunications terminal W is registered to a user U; and

wherein the magnitude of t₂−

t₁ is based on whether there is a wireless telecommunications terminal Z that;

(i) is in the vicinity of said telecommunications terminal W at one or more instants in time interval [t₁, t₂], and

(ii) is registered to a user V who is different than said user U.

16. The method of claim 15 wherein said authentication challenge is also based on the identity of said user V.

17. The method of claim 15 wherein said authentication challenge is also based on whether the user of said telecommunications terminal Z has been authenticated.

18. A method comprising generating an authentication challenge for the current user of a wireless telecommunications terminal W, wherein said wireless telecommunications terminal W is registered to a user U, and wherein the type of said authentication challenge is also based on whether there is a wireless telecommunications terminal Z that:

(i) is in the vicinity of said telecommunications terminal W, and

(ii) is registered to a user V who is different than said user U.

19. The method of claim 18 wherein said type of said authentication challenge is also based on the identity of said user V.

20. The method of claim 18 wherein said type of said authentication challenge is also based on whether the user of said telecommunications terminal Z has been authenticated.