AUTOMATED AUTHORIZATION RESPONSE TECHNIQUES

• US 20150381633A1
• Filed: 09/09/2015
• Published: 12/31/2015
• Est. Priority Date: 10/25/2011
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Grim, Evan Tyler, Alexander, Josh
• Granted Patent: US 10,225,264 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

Techniques are disclosed relating to automating permission requests, e.g., in the context of multi-factor authentication. A mobile device may display an option to allow a user to automate responses to future permission requests to perform an action. The mobile device may automatically respond to subsequent permission requests based on at least one automation criterion. The action may include login, transaction approval, physical access, vehicle ignition, account recovery, etc. The automation criteria may include location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, image characteristics, etc. Disclosed techniques may increase authorization security while reducing user interaction for multi-factor authentication, in some embodiments.

Claims

1. A non-transitory computer-readable medium having computer instructions stored thereon that are capable of causing a mobile device to perform operations comprising:

receiving a permission request to perform a first action;

displaying an option to automate future permission requests for the first action;

in response to user input responsive to the displayed option, storing an indication that future permission requests are to be automated based on at least one automation criterion;

receiving a subsequent permission request to perform a second action for the user; and

in response to determining that the at least one automation criterion is met, the determination, automatically responding to the subsequent permission request without receiving user input indicating whether to grant or deny the subsequent permission request.

2. The non-transitory computer-readable medium of claim 1, wherein the first action and the second action are the same type of action.

3. The non-transitory computer-readable medium of claim 1, wherein the action corresponding to the subsequent permission request is an account recovery action.

4. The non-transitory computer-readable medium of claim 1,

wherein the at least one automation criterion includes a plurality of automation criteria;

and

wherein the determining the at least one automation criterion is met is based on a predetermined combination of automation criteria and includes determining that multiple ones of the automation criteria are met for the subsequent permission request and that one or more of the plurality of automation criteria are not met for the subsequent permission request.

5. The non-transitory computer-readable medium of claim 4, wherein the determining is based on weighting factors assigned to ones of the plurality of automation criteria.

6. The non-transitory computer-readable medium of claim 1, wherein the at least one automation criterion include two or more criteria that correspond to:

location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, or image characteristics.

7. The non-transitory computer-readable medium of claim 1, where the automatic response includes identifier information corresponding to hardware of the mobile device that is usable for comparison by an authorization system with stored identifier information corresponding to hardware of the mobile device to verify the identity of the mobile device.

8. The non-transitory computer-readable medium of claim 1, wherein the operations further comprise:

in response to receiving a second, subsequent permission request for the action for which the at least one automation criterion is satisfied, determining to require user input prior to responding to the second permission request based on velocity information indicating an amount of activity associated with the user.

9. The non-transitory computer-readable medium of claim 1, wherein the operations further comprise:

in response to determining that the mobile device has left a particular geographic region, ending an authenticated session associated with the user.

10. The non-transitory computer-readable medium of claim 1,

wherein the subsequent permission request is received based on a request made by the user via another computing device;

wherein the subsequent permission request includes information indicating one or more visual characteristics of a user interface associated with the request, wherein the user interface is displayed by the other computer device;

wherein the operations further comprise capturing one or more images; and

wherein the at least one automation criterion includes a criterion that the mobile device detects the one or more visual characteristics in the captured one or more images.

11. A mobile device, comprising:

at least one antenna;

one or more processing elements coupled to the at least one antenna;

one or more memories having program instructions stored thereon that are capable of causing the mobile device to;

receive a permission request to perform an action;

display an option to select an automated response for future permission requests, based on at least one automation criterion;

receive user input selecting an automated response;

receive a subsequent permission request to perform an action for the user;

determine that the at least one automation criterion is met for the subsequent permission request; and

in response to the determination, automatically respond to the subsequent permission request without receiving user input indicating to grant or deny the subsequent permission request.

12. The mobile device of claim 11, wherein the action corresponding to the subsequent permission request is an account recovery action responsive to the user not supplying correct login information for the account.

13. The mobile device of claim 11, wherein the program instructions are further capable of causing the mobile device to:

generating hardware identifier information based on components included in the mobile device and transmit the hardware identifier information with the automatic response to the subsequent permission request.

14. The mobile device of claim 11, wherein the program instructions are further capable of causing the mobile device to:

receive information indicating an amount of activity associated with an account of the user;

determine that the at least one automation criterion is met for a second subsequent permission request; and

require user input prior to responding to the second subsequent permission request, based on the amount of activity exceeding a threshold amount.

15. The mobile device of claim 11, wherein the program instructions are further capable of causing the mobile device to:

determine that the mobile device is no longer in a particular geographic region; and

in response to the determination, log the user out of one or more accounts.

16. The mobile device of claim 11,

wherein the subsequent permission request is received based on a request made by the user via another computing device;

wherein the subsequent permission request includes information indicating one or more visual characteristics of a user interface associated with the request, wherein the user interface is displayed by the other computer device;

wherein the program instructions are further capable of causing the mobile device to capture one or more images; and

wherein the at least one automation criterion includes detection of the one or more visual characteristics in the captured one or more images.

17. The mobile device of claim 11, wherein the at least one automation criterion includes a criterion that the mobile device is in communication with another computing device.

18. A method, comprising:

a computing system receiving a request to perform an action;

the computing system sending a permission request to a mobile device;

the computing system sending information indicating one or more visual characteristics of a user interface to the mobile device, wherein the information is usable by the mobile device for comparison to one or more images captured by the mobile device to determine whether the mobile device is in visual range of the user interface; and

the computing system receiving an automated response to the permission request, wherein the automated response is determined at least in part by the mobile device using the information and the one or more captured images.

19. The method of claim 18, further comprising generating a particular visual characteristic for the user interface, wherein the information indicates at least the generated particular visual characteristic.

20. The method of claim 18, wherein the request is received from a computing device configured to display the user interface.