COMPOSITE SECURITY IDENTIFIER

• US 20180124063A1
• Filed: 11/03/2016
• Published: 05/03/2018
• Est. Priority Date: 11/03/2016
• Status: Abandoned Application

• Current Assignee: Motorola Mobility LLC (Lenovo Group Ltd.)
• Original Assignee: Motorola Mobility LLC (Lenovo Group Ltd.)
• Inventors: Vissa, Sudhir, Balasingh, Binesh, Tyagi, Vivek
• Application Number:
  US15/342,531
• Publication Number:
  US 20180124063A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method includes receiving a composite security identifier associated with a remote device in a local device. A plurality of identification codes associated with the remote device are encoded in the composite security identifier. An access request from the remote device is received in the local device. The access request is associated with a first one of the plurality of identification codes. The remote device is challenged for a second one of the plurality of identification codes different than the first one of the identification codes. An access level for the remote device is set on the local device based on the composite security identifier and the challenging of the remote device. The access request is selectively executed or denied based on the access level.

Claims

1. A method, comprising:

receiving a composite security identifier associated with a remote device in a local device, wherein a plurality of identification codes associated with said remote device are encoded in said composite security identifier;

receiving an access request from said remote device in said local device;

associating said access request with a first one of said plurality of identification codes;

challenging said remote device for a second one of said plurality of identification codes different than said first one of said plurality of identification codes;

setting an access level for said remote device on said local device based on said composite security identifier and said challenging of said remote device; and

selectively executing or denying said access request based on said access level.

2. The method of claim 1, wherein setting said access level comprises setting said access level based on a count of identification codes in said plurality of identification codes.

3. The method of claim 1, further comprising repeating said challenging using different ones of said plurality of identification codes and increasing said access level based on a count of the challenges.

4. The method of claim 1, further comprising denying said access request responsive to said remote device failing the challenge.

5. The method of claim 1, wherein said plurality of identification codes comprises a device identification code.

6. The method of claim 5, wherein said device identification code comprises one of a communication interface identification code, a device user login identification code, or a communication network identification code.

7. The method of claim 1, wherein said plurality of identification codes comprises a user identification code.

8. The method of claim 7, wherein said user identification code comprises one of a biometric identification code or a remote service user identification code.

9. The method of claim 1, wherein said plurality of identification codes comprises at least one user identification code and at least one device identification code, and the method further comprises:

generating a user confidence factor based on said plurality of identification codes;

generating a device confidence factor based on said plurality of identification codes; and

setting said access level based on said user confidence factor and said device confidence factor.

10. The method of claim 9, wherein setting said access level comprises selecting one of a plurality access levels in a hierarchy of access levels based on said user confidence factor and said device confidence factor.

11. A device, comprising:

a memory to store a composite security identifier associated with a remote device, wherein a plurality of identification codes associated with said remote device are encoded in said composite security identifier; and

a processor to receive an access request from said remote device, associate said access request with a first one of said plurality of identification codes, challenge said remote device for a second one of said plurality of identification codes different than said first one of said plurality of identification codes, set an access level for said remote device based on said composite security identifier and said challenging of said remote device, and selectively execute or deny said access request based on said access level.

12. The device of claim 11, wherein said processor is to set said access level based on a count of identification codes in said plurality of identification codes.

13. The device of claim 11, wherein said processor is to repeat said challenging using different ones of said plurality of identification codes, and increase said access level based on a count of said challenges.

14. The device of claim 11, wherein said processor is to deny said access request responsive to said remote device failing said challenge.

15. The device of claim 11, wherein said plurality of identification codes comprises a device identification code.

16. The device of claim 15, wherein said device identification code comprises one of a communication interface identification code, a device user login identification code, or a communication network identification code.

17. The device of claim 11, wherein said plurality of identification codes comprises a user identification code.

18. The device of claim 17, wherein said user identification code comprises one of a biometric identification code or a remote service user identification code.

19. The device of claim 11, wherein said plurality of identification codes comprises at least one user identification code and at least one device identification code, wherein said processor is to generate a user confidence factor based on said plurality of identification codes, generate a device confidence factor based on said plurality of identification codes, and set said access level based on said user confidence factor and said device confidence factor.

20. The device of claim 19, wherein setting said access level comprises selecting one of a plurality of access levels in a hierarchy of access levels based on said user confidence factor and said device confidence factor.