Automated peer authentication

• US 8,646,039 B2
• Filed: 08/01/2007
• Issued: 02/04/2014
• Est. Priority Date: 08/01/2007
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Bentley, Jon Louis, Krishnakumar, Anjur Sundaresan, Weiss, David Mandel
• Primary Examiner(s): Dada, Beemnet
• Assistant Examiner(s): BEHESHTI SHIRAZI, SAYED ARESH
• Application Number:
  US11/832,574
• Publication Number:
  US 20090037985A1
• Time in Patent Office: 2,379 Days
• Field of Search: 726/5, 726/3, 726/21, 713/155, 713/168, 713/171, 713/175, 709/227, 705/64
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An apparatus and methods are disclosed for performing peer authentication without the assistance of a human “guard.” In accordance with the illustrative embodiments, a peer is selected from a non-empty set of candidates at authentication time based on one or more of the following dynamic properties: the current geo-location of the user to be authenticated; the current geo-locations of the candidates; the current time; the contents of one or more directories (e.g., a telephone directory, an organizational chart or directory, etc.), the contents of one or more call logs; and the candidates'"'"' schedules.

Claims

1. An apparatus comprising:

a receiver for receiving a signal that indicates that a user is to be authenticated; and

a processor for selecting a peer that is capable of authenticating said user in person;

wherein the selection of said peer is based on one or more properties of one or more entities and a schedule for one or more users; and

wherein at least one of said properties is expected to change during any time interval of N minutes, wherein N is no more than 10080;

and wherein N is a positive number.

2. The apparatus of claim 1 wherein N is no more than 60.

3. The apparatus of claim 1 wherein N is no more than 1440.

4. The apparatus of claim 1 wherein the selection of said peer is based on the current geo-location of said user.

5. The apparatus of claim 4 wherein the selection of said peer is also based on the current geo-location of said peer.

6. The apparatus of claim 1 wherein the selection of said peer is based on the current geo-location of said peer.

7. The apparatus of claim 1 wherein the selection of said peer is based on the contents of a call log.

8. A method comprising selecting a peer to authenticate a user, wherein:

the peer is capable of authenticating the user in person;

the selection of said peer is based on one or more properties of one or more entities and a schedule for one or more users; and

at least one of said properties is expected to change during any time interval of N minutes, and wherein N is a positive number that is no more than 10080.

9. The method of claim 8 wherein N is no more than 60.

10. The method of claim 8 wherein N is no more than 1440.

11. The method of claim 8 wherein the selection of said peer is based on the current geo-location of said user.

12. The method of claim 8 wherein the selection of said peer is based on the contents of a call log.

13. The method of claim 12 wherein the selection of said peer is based on the time of the most recent call between said user and said peer.

14. The method of claim 12 wherein the selection of said peer is based on the number of calls between said user and said peer in a time interval.

15. The method of claim 12 wherein the selection of said peer is based on the duration of a call between said user and said peer.

16. The method of claim 8 wherein the selection of said peer is based on a hierarchical organization chart.

17. A method comprising:

transmitting to a human peer a signal that indicates that a user is to be authenticated by said human peer, wherein the selection of said human peer is based on one or more properties of one or more entities and a schedule for one or more users, wherein at least one of said properties is expected to change during any time interval of N minutes, and wherein N is a positive number that is no more than 10080;

receiving from said human peer, in response to said signal, a non-Boolean value; and

determining whether to authenticate said user based in said non-Boolean values.

18. The method of claim 17 wherein said non-Boolean value is a degree of confidence specified by said human peer.

19. The method of claim 17 wherein said non-Boolean value is a degree of correctness for a response by said user to a question.

20. The method of claim 17 further comprising determining whether to lock out said user based on said non-Boolean value.