Mobile device validation

• US 8,903,360 B2
• Filed: 05/17/2012
• Issued: 12/02/2014
• Est. Priority Date: 05/17/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Celi, Joseph Jr., Gavagni, Brett, Zurko, Mary Ellen
• Primary Examiner(s): SHEDRICK, CHARLES TERRELL
• Application Number:
  US13/473,739
• Publication Number:
  US 20130310002A1
• Time in Patent Office: 929 Days
• Field of Search: 455/411, 370/328, 704/273
• US Class Current: 455/411
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

The illustrative embodiments provide a method, apparatus, and computer program product for validating a mobile device. Voice data is received from the mobile device. The voice data comprises a recording of a pass phrase spoken by a user at the mobile device. A determination is made as to whether the mobile device is a valid mobile device using the voice data. An access code to the mobile device is sent in response to a determination that the mobile device is the valid mobile device.

Claims

1. A method for validating a mobile device, the method comprising:

receiving an address of the mobile device, a user identifier and a password;

receiving voice data from the mobile device, wherein the voice data comprises a recording of a pass phrase spoken by a user at the mobile device;

determining whether the mobile device is a valid mobile device using the voice data; and

sending an access code to the mobile device in response to a determination that the mobile device is the valid mobile device, wherein determining whether the mobile device is the valid mobile device using the voice data comprises;

determining whether the mobile device is the valid mobile device using the address of the mobile device; and

responsive to determining that the mobile device is not the valid mobile device using the address of the mobile device, determining whether the mobile device is the valid mobile device using the voice data, the user identifier, and the password.

2. The method of claim 1 further comprising:

requesting the user to speak the pass phrase at the mobile device.

3. The method of claim 1, wherein the user identifier, the password, and the voice data are received at substantially a same time.

4. The method of claim 1 further comprising:

receiving a device identifier from the mobile device, wherein the device identifier uniquely identifies the mobile device; and

wherein determining whether the mobile device is the valid mobile device using the voice data comprises;

determining whether the mobile device is the valid mobile device using the voice data, the user identifier, the password, and the device identifier.

5. The method of claim 4, wherein the device identifier is selected from one of a media access code, a device fingerprint comprising information regarding hardware and software of the mobile device, and a processor identifier.

6. The method of claim 1 further comprising:

responsive to a validation period expiring for the mobile device, requesting the user to re-validate the mobile device through speaking the pass phrase.

7. The method of claim 6, wherein the validation period is identified using a timestamp assigned to the mobile device when the mobile device was validated.

8. A computer comprising:

a bus;

a processor unit connected to the bus;

a computer readable storage device connected to the bus;

a device database, a pass phrase database and a validated device database, wherein the device database comprises a plurality of device identifiers, wherein the pass phrase database contains a plurality of pass phrase records that each comprise an associated user identifier, an associated password, associated voice data and a list of allowable services, and wherein the validated device database contains a plurality of validated device records that each comprise an associated user identifier, an associated pass code, an associated device identifier and a timestamp; and

program code for managing a service, wherein the program code is stored on the computer readable storage device and is configured to be run by the processor unit to receive voice data from a mobile device, wherein the voice data comprises a recording of a pass phrase spoken by a user at the mobile device;

determine whether the mobile device is a valid mobile device using the voice data; and

send an access code to the mobile device in response to a determination that the mobile device is the valid mobile device.

9. The computer of claim 8, wherein the program code is further configured to be run by the processor unit to receive a user identifier and a password and wherein in being configured to be run by the processor unit to determine whether the mobile device is the valid mobile device using the voice data, the program code is configured to be run by the processor unit to determine whether the mobile device is the valid mobile device using the voice data, the user identifier, and the password.

10. The computer of claim 9, wherein the program code is further configured to be run by the processor unit to receive a device identifier from the mobile device, wherein the device identifier uniquely identifies the mobile device, and wherein in being configured to be run by the processor unit to determine whether the mobile device is the valid mobile device using the voice data, the program code is configured to be run by the processor unit to determine whether the mobile device is the valid mobile device using the voice data and the device identifier.

11. The computer of claim 10, wherein the device identifier is selected from one of a media access code, a device fingerprint comprising information regarding hardware and software of the mobile device, and a processor identifier.

12. The computer of claim 8, wherein the program code is further configured to be run by the processor unit to request the user to re-validate the mobile device through speaking the pass phrase in response to a validation period expiring for the mobile device.

13. A computer program product for managing a mobile device, the computer program product comprising:

a non-transitory computer readable storage medium comprising program code encoded thereon, wherein the program code comprises;

first program code for receiving an address of the mobile device, a user identifier and a password;

second program code for receiving voice data from the mobile device, wherein the voice data comprises a recording of a pass phrase spoken by a user at the mobile device;

third program code for determining whether the mobile device is a valid mobile device using the voice data; and

fourth program code for sending an access code to the mobile device in response to a determination that the mobile device is the valid mobile device, wherein the first program code, the second program code, the third program code, and the fourth program code are stored on the computer readable storage medium, wherein the third program code for determining whether the mobile device is the valid mobile device using the voice data comprises;

program code for determining whether the mobile device is the valid mobile device using the address of the mobile device; and

program code, responsive to determining that the mobile device is not the valid mobile device using the address of the mobile device, for determining whether the mobile device is the valid mobile device using the voice data, the user identifier, and the password.

14. The computer program product of claim 13 further comprising:

fifth program code for receiving a device identifier from the mobile device, wherein the device identifier uniquely identifies the mobile device, wherein the fifth program code is stored on the computer readable storage medium; and

wherein the third program code for determining whether the mobile device is the valid mobile device using the voice data comprises program code for determining whether the mobile device is the valid mobile device using the voice data, the user identifier, the password, and the device identifier.

15. The computer program product of claim 14, wherein the device identifier is selected from one of a media access code, a device fingerprint comprising information regarding hardware and software of the mobile device, and a processor identifier.

16. The computer program product of claim 13 further comprising:

fifth program code, responsive to a validation period expiring, for requesting the user to re-validate the mobile device through speaking the pass phrase, wherein the fifth program code is stored on the computer readable storage medium.

17. The computer program product of claim 13, wherein the computer readable storage medium is in a data processing system, and the program code is downloaded over a network from a remote data processing system to the computer readable storage medium in the data processing system.

18. The computer program product of claim 17, wherein the computer readable storage medium is a first computer readable storage medium, wherein the first computer readable storage medium is in a server data processing system, and wherein the program code is downloaded over the network to the remote data processing system for use in a second computer readable storage medium in the remote data processing system.

19. A method for validating a mobile device, the method comprising:

receiving voice data from the mobile device, wherein the voice data comprises a recording of a pass phrase spoken by a user at the mobile device;

determining whether the mobile device is a valid mobile device using the voice data; and

sending an access code to the mobile device in response to a determination that the mobile device is the valid mobile device, wherein a first set of services are usable by the mobile device when the mobile device is determined to be the valid mobile device using the address of the mobile device, and a second set of services different than the first set of services are usable by the mobile device when the mobile device is determined to be the valid mobile device using the voice data, the user identifier, and the password.