Identity Authentication Using Multiple Devices

• US 20170104761A1
• Filed: 10/07/2015
• Published: 04/13/2017
• Est. Priority Date: 10/07/2015
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Seigel, Jake, Ali, Sohail, Jury, Derek
• Granted Patent: US 10,063,564 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system, method, and computer-readable medium for performing an authentication operation comprising: identifying a plurality of user devices associated with a user of an information handling system; determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and, authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

Claims

1. A computer-implementable method for performing an authentication operation, comprising:

identifying a plurality of user devices associated with a user of an information handling system;

determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and

,

authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

2. The method of claim 1, wherein:

the authenticating is configured to only be enabled while the information handling system authenticating the user is coupled to a specific network.

3. The method of claim 1, wherein:

the plurality of user devices comprise at least one of a smart phone type information handling system, a tablet type information handling system, a wearable fitness device, a smart watch, and an employee identification badge.

4. The method of claim 1, wherein:

a wireless communication technology is used to communicate between the plurality of user devices and the information handling system.

5. The method of claim 1, wherein:

the identifying the plurality of user devices associated with a user of an information handling system further comprises determining a device identifier associated with each of the plurality of user devices; and

,

the authenticating further comprises comparing the device identifier associated with each of the plurality of user devices with a previously stored device identifier for each of the plurality of user devices.

6. The method of claim 1, wherein:

the authenticating further comprises a learning operation, the learning operation identifying user devices within a predetermined range of the information handling system when the user is identified as an authorized user of the information handling system.

7. A system comprising:

a processor;

a data bus coupled to the processor; and

a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for;

identifying a plurality of user devices associated with a user of an information handling system;

determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and

,

authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

8. The system of claim 7, wherein:

the authenticating is configured to only be enabled while the information handling system authenticating the user is coupled to a specific network.

9. The system of claim 7, wherein:

the plurality of user devices comprise at least one of a smart phone type information handling system, a tablet type information handling system, a wearable fitness device, a smart watch, and an employee identification badge.

10. The system of claim 7, wherein:

a wireless communication technology is used to communicate between the plurality of user devices and the information handling system.

11. The system of claim 7, wherein:

the identifying the plurality of user devices associated with a user of an information handling system further comprises determining a device identifier associated with each of the plurality of user devices; and

,

the authenticating further comprises comparing the device identifier associated with each of the plurality of user devices with a previously stored device identifier for each of the plurality of user devices.

12. The system of claim 7, wherein:

the authenticating further comprises a learning operation, the learning operation identifying user devices within a predetermined range of the information handling system when the user is identified as an authorized user of the information handling system.

13. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

identifying a plurality of user devices associated with a user of an information handling system;

determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and

,

authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

14. The non-transitory, computer-readable storage medium of claim 13, wherein:

the authenticating is configured to only be enabled while the information handling system authenticating the user is coupled to a specific network.

15. The non-transitory, computer-readable storage medium of claim 13, wherein:

the plurality of user devices comprise at least one of a smart phone type information handling system, a tablet type information handling system, a wearable fitness device, a smart watch, and an employee identification badge.

16. The non-transitory, computer-readable storage medium of claim 13, wherein:

a wireless communication technology is used to communicate between the plurality of user devices and the information handling system.

17. The non-transitory, computer-readable storage medium of claim 13, wherein:

the identifying the plurality of user devices associated with a user of an information handling system further comprises determining a device identifier associated with each of the plurality of user devices; and

,

the authenticating further comprises comparing the device identifier associated with each of the plurality of user devices with a previously stored device identifier for each of the plurality of user devices.

18. The non-transitory, computer-readable storage medium of claim 13, wherein:

the authenticating further comprises a learning operation, the learning operation identifying user devices within a predetermined range of the information handling system when the user is identified as an authorized user of the information handling system.