MULTI-DEVICE AUTHENTICATION

• US 20170093846A1
• Filed: 09/28/2015
• Published: 03/30/2017
• Est. Priority Date: 09/28/2015
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Lopez Lecube, Tiano Freixas, Miller, Josh, Jaeger, Thomas, Oh, Sam, Zhao, Wenhan, Min, Eric
• Granted Patent: US 9,939,908 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 1/1694 the I/O peripheral being a single or a set of motion sensors for pointer control or gesture input obtained by sensing movements of the portable computer
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2200/1636 Sensing arrangement for detection of a tap gesture on the housing
• CPC Class Codes: G06F 2203/04808 Several contacts: gestures triggering a specific function, e.g. scrolling, zooming, right-click, when the user establishes several contacts with the surface simultaneously; e.g. using several fingers or a combination of fingers and pen
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/0487 using specific features provided by the input device, e.g. functions controlled by the rotation of a mouse with dual sensing arrangements, or of the nature of the input device, e.g. tap gestures based on pressure sensed by a digitiser
• CPC Class Codes: G06F 3/0488 using a touch-screen or digitiser, e.g. input of commands through traced gestures
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

A system and method uses multiple devices in concert as security for accessing an account. The system and method may use one or more security measures based on unique gestures, coordinated gestures between two devices, presence of multiple devices, sequence of actions, and other measures to prevent fraud. Additionally, these security measures may be rearranged or changed such that the devices may collaborate to provide access to multiple different accounts.

Claims

1. A computer implemented method for security and authentication of a user based on network communications, the method comprising the steps of:

receiving a first motion data from a first device of the user;

receiving a second motion data from a second device of the user;

accessing a memory storing information corresponding to an account of the user;

comparing the first motion data and the second motion data with authentication motion data associated with the account of the user; and

providing the user access to the account in response to determining that the first motion data and the second motion data match the authentication motion data.

2. The method of claim 1, wherein at least one of the first and second devices is implanted into the user.

3. The method of claim 1, wherein authentication motion data is data for a tapping motion.

4. The method of claim 1, wherein providing the user access to the account comprises sending an account credential to a third device.

5. The method of claim 4, wherein access to the account is granted by the third device.

6. The method of claim 4, wherein the third device is a smartphone.

7. The method of claim 1, wherein at least one of the first and second motion data is data from an accelerometer.

8. A multi-device security system comprising:

a first device with one or more processors coupled to a memory and that executes instructions from the memory to perform the steps of;

detecting a second device;

establishing a communication channel with the second device;

receiving, through the communication channel, a first authentication code from the second device;

comparing the first authentication code with a second authentication code stored on the memory of the first device;

receiving, from a sensor, data indicative of a first gesture;

comparing the data indicative of a first gesture with data indicative of a second gesture; and

accessing an account in response to determining that the first and second authentication codes match and the first and second gestures match.

9. The multi-device security system of claim 8, wherein accessing the account comprises communicating a credential to a third device.

10. The multi-device security system of claim 8, wherein detecting the second device comprises detecting an electrical coupling with the second device.

11. The multi-device security system of claim 8, wherein detecting the second device comprises detecting an inductive coupling with the second device.

12. The multi-device security system of claim 8, wherein the first device stores the first authentication code temporarily.

13. The multi-device security system of claim 12, wherein the first authentication code is deleted from the first device after a threshold time.

14. The multi-device security system of claim 12, wherein the first authentication code is deleted from the first after accessing the account.

15. One or more non-transitory computer readable media with instructions that are executable by a device to cause the device to perform the steps of:

receiving, from a sensor, data indicative of a first gesture performed with a second device in relation to the first device;

comparing the data indicative of a first gesture with data indicative of a second gesture;

establishing a communication channel with the second device in response to the first and second gestures matching;

receiving, through the communication channel, a first authentication code from the second device;

comparing the first authentication code with a second authentication code; and

accessing an account in response to determining that the first and second authentication codes match.

16. The one or more non-transitory computer readable media of claim 15, wherein the first authentication code is deleted after accessing the account.

17. The one or more non-transitory computer readable media of claim 15, wherein the sensor is on the second device.

18. The one or more non-transitory computer readable media of claim 17, wherein the steps further comprise receiving a second data indicative of the first gesture from a second sensor and determining the first gesture based on the first and second data indicative of the first gesture.

19. The one or more non-transitory computer readable media of claim 15, wherein accessing the account comprises communicating the first authentication code.

20. The one or more non-transitory computer readable media of claim 19, wherein accessing the account comprises communicating a second authentication code held on the non-transitory computer readable medium.