MOBILE AUTHENTICATION USING A WEARABLE DEVICE

• US 20170177849A1
• Filed: 03/06/2017
• Published: 06/22/2017
• Est. Priority Date: 09/10/2013
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: eBay Inc.
• Inventors: Farraro, Eric J.
• Granted Patent: US 10,657,241 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method of providing a user with an option to access a protected system by satisfying a reduced security measure is disclosed. An attempt by the user to access the protected system is detected. It is detected that a first security token system is within a first proximity to the protected system. Based on the detecting of the attempt by the user to access the protected system and the detecting that the first security token system is within the first proximity, the user is provided with the option to access the protected system by satisfying the reduced security measure.

Claims

1. (canceled)

2. A system comprising:

one or more computer processors;

one or more computer memories, the one or more computer memories including computer instructions, the computer instructions configuring the one or more processors to perform operations, the operations comprising;

determining a first security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the first security token system;

determining a second security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the second security token system;

associating the first security token value with the first security token system;

associating the second security token value with the second security token system;

detecting an attempt by the user to access a protected system; and

providing the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value.

3. The system of claim 2, the operations further comprising:

detecting that the first security token system is within a first proximity to the protected system;

detecting that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

4. The system of claim 3, the operations further comprising:

detecting that the first security token system is outside the first proximity or second security token system is outside the second proximity; and

revoking the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.

5. The system of claim 2, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.

6. The system of claim 2, the operations further comprising providing the user with an option to access the protected system by satisfying an additional reduced security measure, the providing based on a determining that the combined value transgresses an additional threshold security token value.

7. The system of claim 2, the operations further comprising determining the reliability based on a likelihood that the first security token is in possession of the user.

8. The system of claim 2, the operations further comprising determining the level of security based on a specification of an administrator.

9. A method comprising:

determining a first security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the first security token system;

determining a second security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the second security token system;

associating the first security token value with the first security token system;

associating the second security token value with the second security token system;

detecting an attempt by the user to access a protected system; and

providing the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value, wherein the providing of the user with the option is performed by one or more computer processors.

10. The system of claim 9, further comprising:

detecting that the first security token system is within a first proximity to the protected system;

detecting that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

11. The system of claim 10, further comprising:

detecting that the first security token system is outside the first proximity or second security token system is outside the second proximity; and

revoking the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.

12. The system of claim 9, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.

13. The system of claim 9, further comprising providing the user with an option to access the protected system by satisfying an additional reduced security measure, the providing based on a determining that the combined value transgresses an additional threshold security token value.

14. The system of claim 9, further comprising determining the reliability based on a likelihood that the first security token is in possession of the user.

15. The system of claim 9, further comprising determining the level of security based on a specification of an administrator.

16. A non-transitory machine readable storage medium embodying instructions that, when executed by a processor, cause the processor to perform operations comprising:

determining a first security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the first security token system;

determining a second security token value based on a property of a first security token system, the property including at least one of a reliability or a level of security of the second security token system;

associating the first security token value with the first security token system;

associating the second security token value with the second security token system;

detecting an attempt by the user to access a protected system; and

providing the user with an option to access the protected system by satisfying a reduced security measure, the providing based on a determining that a combined value of the first security token value and the second security token value transgresses a threshold security token value, wherein the providing of the user with the option is performed by one or more computer processors.

19. The non-transitory machine readable storage medium of claim 16, wherein the access to the protected system is limited to a subset of functions of the protected system based on a sensitivity of the subset of the functions and the combined value.

20. The non-transitory machine readable storage medium of claim 16, the operations further comprising providing the user with an option to access the protected system by satisfying an additional reduced security measure, the providing based on a determining that the combined value transgresses an additional threshold security token value.

21. The non-transitory machine readable storage medium of claim 16, the operations further comprising determining the reliability based on a likelihood that the first security token is in possession of the user.

17. The non-transitory machine readable storage medium of claim 96, the operations further comprising:

detecting that the first security token system is within a first proximity to the protected system;

detecting that the second security token system is within a second proximity to the protected system; and

wherein the providing of the user with the option is further based on the detecting that the first security token system is within the first proximity and the detecting that the second security token system is within the second proximity.

18. The non-transitory machine readable storage medium of claim 17, the operations further comprising:

detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity; and

revoking the option to access the protected system based on the detecting that the first security token system is outside the first proximity or that the second security token system is outside the second proximity.