USER-CONTROLLED TRANSACTION ANNOTATION FOR AUTHENTICATION EVENTS ACROSS MULTIPLE USER DEVICES

• US 20200137046A1
• Filed: 10/30/2018
• Published: 04/30/2020
• Est. Priority Date: 10/30/2018
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Sharma, Nagendra Gudibande Srikanta, Gottapu, Udayendranaidu, Kathriki, Pedda Peddy
• Granted Patent: US 11,134,077 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Methods, apparatus, and processor-readable storage media for user-controlled transaction tagging to enable easier identification and co-relation of subsequent related events are provided herein. An example computer-implemented method includes receiving, via a first user device in connection with a request to access a protected resource, a first set of user-generated cryptographic information and a second set of user-generated cryptographic information; generating and outputting an authentication request to a second user device in response to processing the first set of user-generated cryptographic information against a stored set of cryptographic information associated with the protected resource, wherein the authentication request causes the second set of user-generated cryptographic information to be rendered via the second user device; and resolving the authentication request in response to receiving, via the second user device, an indication to grant or deny the request to access the protected resource via the first user device.

Claims

1. A computer-implemented method comprising steps of:

receiving, via a first user device in connection with a request to access a protected resource associated with the user, a first set of user-generated cryptographic information and a second set of user-generated cryptographic information;

generating and outputting an authentication request to a second user device in response to processing the first set of user-generated cryptographic information against a stored set of cryptographic information associated with the protected resource, wherein the authentication request causes the second set of user-generated cryptographic information to be rendered via the second user device; and

resolving the authentication request in response to receiving, via the second user device, an indication to grant or deny the request to access the protected resource via the first user device;

wherein the steps are performed by at least one processing device comprising a processor coupled to a memory.

2. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information is unique to the respective request to access the protected resource.

3. The computer-implemented method of claim 1, wherein the first set of user-generated cryptographic information comprises at least one of a user identifier and a password.

4. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-generated set of alphanumeric data.

5. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-selected set of alphanumeric data.

6. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-generated set of voice data.

7. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-selected set of voice data.

8. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-generated set of image data.

9. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-selected set of image data.

10. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-generated set of video data.

11. The computer-implemented method of claim 1, wherein the second set of user-generated cryptographic information comprises a user-selected set of video data.

12. The computer-implemented method of claim 1, wherein the indication comprises at least one of a biometric input and a non-biometric input.

13. A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:

to receive, via a first user device in connection with a request to access a protected resource associated with the user, a first set of user-generated cryptographic information and a second set of user-generated cryptographic information;

to generate and output an authentication request to a second user device in response to processing the first set of user-generated cryptographic information against a stored set of cryptographic information associated with the protected resource, wherein the authentication request causes the second set of user-generated cryptographic information to be rendered via the second user device; and

to resolve the authentication request in response to receiving, via the second user device, an indication to grant or deny the request to access the protected resource via the first user device.

14. The non-transitory processor-readable storage medium of claim 13, wherein the second set of user-generated cryptographic information is unique to the respective request to access the protected resource.

15. The non-transitory processor-readable storage medium of claim 13, wherein the second set of user-generated cryptographic information comprises at least one of a user-generated set of alphanumeric data, a user-generated set of voice data, a user-generated set of image data, and a user-generated set of video data.

16. The non-transitory processor-readable storage medium of claim 13, wherein the second set of user-generated cryptographic information comprises at least one of a user-selected set of alphanumeric data, a user-selected set of voice data, a user-selected set of image data, and a user-selected set of video data.

17. An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;

the at least one processing device being configured;

to receive, via a first user device in connection with a request to access a protected resource associated with the user, a first set of user-generated cryptographic information and a second set of user-generated cryptographic information;

to generate and output an authentication request to a second user device in response to processing the first set of user-generated cryptographic information against a stored set of cryptographic information associated with the protected resource, wherein the authentication request causes the second set of user-generated cryptographic information to be rendered via the second user device; and

to resolve the authentication request in response to receiving, via the second user device, an indication to grant or deny the request to access the protected resource via the first user device.

18. The apparatus of claim 17, wherein the second set of user-generated cryptographic information is unique to the respective request to access the protected resource.

19. The apparatus of claim 17, wherein the second set of user-generated cryptographic information comprises at least one of a user-generated set of alphanumeric data, a user-generated set of voice data, a user-generated set of image data, and a user-generated set of video data.

20. The apparatus of claim 17, wherein the second set of user-generated cryptographic information comprises at least one of a user-selected set of alphanumeric data, a user-selected set of voice data, a user-selected set of image data, and a user-selected set of video data.