MOBILE AUTHENTICATION USING A WEARABLE DEVICE

• US 20160042170A1
• Filed: 10/23/2015
• Published: 02/11/2016
• Est. Priority Date: 09/10/2013
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: eBay Inc.
• Inventors: Farraro, Eric J.
• Granted Patent: US 9,589,123 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method of providing a user with an option to access a protected system by satisfying a reduced security measure is disclosed. An attempt by the user to access the protected system is detected. It is detected that a first security token system is within a first proximity to the protected system. Based on the detecting of the attempt by the user to access the protected system and the detecting that the first security token system is within the first proximity, the user is provided with the option to access the protected system by satisfying the reduced security measure.

Claims

1. A method comprising:

associating a first security token value with a first security token system;

associating a second security token value with a second security token system;

detecting an attempt by a user to access a protected system; and

providing the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value, the providing of the user with the option to access the protected system by satisfying the reduced security measure being performed by a processor.

2. The method of claim 1, further comprising:

detecting that the first security token system is within a first proximity to the protected system;

detecting that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

3. The method of claim 2, further comprising:

detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity; and

revoking the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.

4. The method of claim 1, further comprising selecting the first security token system and the second security token system based on a determination of a possession of the first security token system by the user and a determination of a possession of the second security token system by the user.

5. The method of claim 4, further comprising determining the first security token value based on a closeness of the possession of the first security token system by the user and of determining the second security token value based on a closeness of the possession of the second security token system to the user.

6. The method of claim 1, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.

7. The method of claim 1, further comprising providing the user with an option to access the protected system by satisfying an additional reduced security measure, the providing based on a determining that the combined value transgresses an additional threshold security token value.

8. A system comprising:

at least one module implemented by at least one processor, the at least one module configured to, at least;

associate a first security token value with a first security token system;

associate a second security token value with a second security token system;

detect an attempt by a user to access a protected system; and

provide the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value, the providing of the user with the option to access the protected system by satisfying the reduced security measure being performed by a processor.

9. The system of claim 8, the at least one module further configured to, at least:

detect that the first security token system is within a first proximity to the protected system;

detect that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

10. The system of claim 9, the at least one module further configured to, at least:

detect that the first security token system is outside the first proximity or that the second security token system is outside the second proximity; and

revoke the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.

11. The system of claim 8, the at least one module further configured to, at least, select the first security token system and the second security token system based on a determination of a possession of the first security token system by the user and a determination of a possession of the second security token system by the user.

12. The system of claim 11, the at least one module further configured to, at least, determine the first security token value based on a closeness of the possession of the first security token system by the user and of determining the second security token value based on a closeness of the possession of the second security token system to the user.

13. The system of claim 8, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.

14. The system of claim 8, the at least one module further configured to, at least provide the user with an option to access the protected system by satisfying an additional reduced security measure, the providing based on a determining that the combined value transgresses an additional threshold security token value.

15. A non-transitory machine readable medium embodying a set of instructions that, when executed by at least one processor, causes the at least one processor to perform operations, the operations comprising:

associating a first security token value with a first security token system;

associating a second security token value with a second security token system;

detecting an attempt by a user to access a protected system; and

providing the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value, the providing of the user with the option to access the protected system by satisfying the reduced security measure being performed by a processor.

16. The non-transitory machine readable medium of claim 15, further comprising:

detecting that the first security token system is within a first proximity to the protected system;

detecting that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

17. The non-transitory machine readable medium of claim 16, further comprising:

detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity; and

revoking the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.

18. The non-transitory machine readable medium of claim 15, further comprising selecting the first security token system and the second security token system based on a determination of a possession of the first security token system by the user and a determination of a possession of the second security token system by the user.

19. The non-transitory machine readable medium of claim 18, further comprising determining the first security token value based on a closeness of the possession of the first security token system by the user and of determining the second security token value based on a closeness of the possession of the second security token system to the user.

20. The non-transitory machine readable medium of claim 15, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.