SYSTEM AND METHOD FOR GEO-LOCATION-BASED MOBILE USER AUTHENTICATION

• US 20170289813A1
• Filed: 03/29/2017
• Published: 10/05/2017
• Est. Priority Date: 04/01/2016
• Status: Active Grant

• Current Assignee: MidCap Financial Trust
• Original Assignee: Acronis International GmbH (Acronis AG)
• Inventors: Pashkov, Georgiy, Davydov, Kirill, Beloussov, Serguei M., Protasov, Stanislav, Shmulevich, Mark
• Granted Patent: US 10,623,962 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

A system and method is provided for geo-location-based user authentication and data access control. An exemplary method includes receiving a request from a mobile device to access a user account and user data where the request includes current geo-location data that indicates a current geographical location of the mobile device/ An authentication server then determines whether the current geo-location data is within at least one geo zone that indicates approved geographical areas where the mobile device can access the user account and data. If the current geographical location of the mobile device is determined to be within the approved geographical areas, the server will provide the mobile device with access to the requested account and data.

Claims

1. A method for authenticating a mobile device, the method comprising:

receiving, from the mobile device, a request to access at least one of a user account and user data, the request including current geo-location data indicating a current geographical location of the mobile device;

determining, by a server, whether the current geo-location data is within at least one geo zone that indicates approved geographical areas where the mobile device can access the requested at least one of a user account and user data; and

causing, by the server, the mobile device to obtain access of the requested at least one of a user account and user data if the current geographical location of the mobile device is determined to be within the approved geographical areas.

2. The method according to claim 1, further comprising generating the request to access the at least one of a user account and user data by a geo-location software application running on the mobile device.

3. The method according to claim 1, further comprising providing a user interface, by the server, that enables a user of the mobile device to define the at least one geo zones that indicates the approved geographical areas where the mobile device can access the requested at least one of a user account and user data.

4. The method according to claim 1, further comprising defining, by an administrator of the server, the at least one geo zones that indicates the approved geographical areas where the mobile device can access the requested at least one of a user account and user data.

5. The method according to claim 1, wherein the request includes user authentication credentials, including a username and password.

6. The method according to claim 5, further comprising:

verifying the username and password after determining that the current geo-location data is within the at least one geo zone; and

causing the mobile device to obtain access of the requested at least one of a user account and user data once the username and password are verified.

7. The method according to claim 1, further comprising determining, by the server, that the request to access the at least one of a user account and user data is made within an approved time period that indicates an approved time period when the mobile device is within the approved geographical areas.

8. A system for authenticating a mobile device, the system comprising:

a server configured to receive, from the mobile device, a request to access at least one of a user account and user data, the request including current geo-location data indicating a current geographical location of the mobile device; and

a processor of the server configured to;

determine whether the current geo-location data is within at least one geo zone that indicates approved geographical areas where the mobile device can access the requested at least one of a user account and user data, and

cause the mobile device to obtain access of the requested at least one of a user account and user data if the current geographical location of the mobile device is determined to be within the approved geographical areas.

9. The system according to claim 8, wherein the processor is further configured to provide a user interface that enables a user of the mobile device to define the at least one geo zones that indicates the approved geographical areas where the mobile device can access the requested at least one of a user account and user data.

10. The system according to claim 8, wherein the processor is further configured receive, from an administrator of the server, an indication of the at least one geo zones that indicates the approved geographical areas where the mobile device can access the requested at least one of a user account and user data.

11. The system according to claim 8, wherein the request includes user authentication credentials, including a username and password.

12. The system according to claim 11, wherein the processor is further configured:

verify the username and password after determining that the current geo-location data is within the at least one geo zone, and

cause the mobile device to obtain access of the requested at least one of a user account and user data once the username and password are verified.

13. The system according to claim 8, wherein the processor is further configured to determine that the request to access the at least one of a user account and user data is made within an approved time period that indicates an approved time period when the mobile device is within the approved geographical areas.

16. The mobile device according to claim 13, further comprising a user interface that enables a user of the mobile device to define the predetermined geographical areas where the mobile device can access the requested at least one of a user account and user data.

17. The mobile device according to claim 13, wherein the predetermined approved geographical areas are defined by an administrator of the authentication server.

18. The mobile device according to claim 13, wherein the processor is further configured to generate and transmit the request that includes user authentication credentials, including a username and password.

19. The mobile device according to claim 18, wherein the mobile device is configured to access the requested at least one of a user account and user data once the authentication server verifies the username and password after determining that the current geo-location data is within the at least one geo zone.

20. The mobile device according to claim 13, wherein the mobile device is configured to access the requested at least one of a user account and user data once the authentication server determines that the request is made within an approved time that indicates an approved time period when the mobile device is within the approved geographical areas.

14. A mobile device comprising:

a global position system configured to generate current geo-location data indicating a current geographical location of the mobile device; and

a processor configured to;

transmit a request, to an authentication server, to access at least one of a user account and user data, the request including the current geo-location data, and

access the requested at least one of a user account and user data if the current geographical location of the mobile device is determined by the authentication server to be within a predetermined geographical areas where the mobile device is approved to access the requested at least one of a user account and user data.

15. The mobile device according to claim 14, wherein a geo-location software application is running on the mobile device that is configured to generate the request to access the at least one of a user account and user data.