Methods and apparatus for verification of a user at a first device based on input received from a second device

• US 9,275,218 B1
• Filed: 09/12/2013
• Issued: 03/01/2016
• Est. Priority Date: 09/12/2012
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Alikhani, Kayvan
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Jamshidi, Ghodrat
• Application Number:
  US14/025,333
• Time in Patent Office: 901 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838

Abstract

In one embodiment, a verification platform is adapted for communication with at least first and second devices. The verification platform receives a verification request from the first device, and determines if the first device has a registered association with the second device. If the first device has the registered association, the verification platform sends a notification to the second device regarding the verification request, receives verification input from the second device responsive to the notification, and grants or denies the verification request based at least in part on the verification input received from the second device. The verification request may be generated in conjunction with an attempted launch of a designated application on the first device, with user access to the application being controlled responsive to the granting or denying of the verification request. The first and second devices may comprise mobile telephones, computers or other types of devices.

Claims

1. A method comprising:

receiving a verification request from a first device;

determining a registered association between the first device and a second device;

sending a notification to the second device regarding the verification request;

receiving motion-based verification input from the second device responsive to the notification; and

granting or denying the verification request based at least in part on the verification input received from the second device;

wherein the first and second devices are both accessible to and controllable by a given user;

wherein receiving the verification request, determining the registered association, sending the notification, receiving verification input and granting or denying the verification request are implemented in a verification platform adapted for communication with the first and second devices; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.

2. The method of claim 1 wherein granting of the verification request requires that both the first device and the second device are enrolled in a verification service supported by the verification platform.

3. The method of claim 1 wherein the verification input comprises information characterizing movement of the second device responsive to the notification.

4. The method of claim 1 wherein the verification request is generated in conjunction with an attempted launch of a designated application on the first device.

5. The method of claim 4 wherein user access to the designated application on the first device is controlled responsive to the granting or denying of the verification request.

6. The method of claim 5 further comprising sending a notification of the granting or denying of the verification request to a verification agent running on the first device wherein the verification agent controls user access to the designated application on the first device responsive to said notification of the granting or denying.

7. The method of claim 1 further comprising establishing responsive to specification by the given user one or more additional processes for obtaining verification input wherein at least a given one of said one or more additional processes is executed if an initial process for obtaining verification input is unsuccessful.

8. The method of claim 7 wherein the one or more additional processes for obtaining verification input include at least one of the following:

calling a mobile device other than the first device and prompting the user to press one or more specific keys on the mobile device;

sending a message to the mobile device and directing the user to select a link in the message;

sending token codes to the mobile device and directing the user to enter the token codes into the first device; and

sending a request for one or more particular types of verification input to the mobile device.

9. The method of claim 8 wherein the mobile device is a device other than the second device.

10. The method of claim 1 wherein the verification input received from the second device comprises motion-based verification input.

11. An article of manufacture comprising a non-transitory processor-readable storage medium having embodied therein one or more software programs, wherein the one or more software programs when executed by a verification platform, adapted for communication with a first device and a second device, cause the verification platform:

to receive a verification request from the first device;

to determine a registered association between the first device and the second device;

to send a notification to the second device regarding the verification request;

to receive motion-based verification input from the second device responsive to the notification; and

to grant or deny the verification request based at least in part on the verification input received from the second device;

wherein the first and second devices are both accessible to and controllable by a given user; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.

12. An apparatus comprising:

a verification platform comprising at least one processing device having a processor coupled to a memory;

wherein the verification platform is adapted for communication with a first device and a second device, and is configured;

to receive a verification request from the first device;

to determine a registered association between the first device and the second device;

to send a notification to the second device regarding the verification request;

to receive motion-based verification input from the second device responsive to the notification; and

to grant or deny the verification request based at least in part on the verification input received from the second device;

wherein the first and second devices are both accessible to and controllable by a given user; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.

13. The apparatus of claim 12 wherein the verification platform comprises:

an application programming interface adapted for communication with verification agents implemented on respective ones of the first and second devices; and

a server coupled to the application programming interface.

14. The apparatus of claim 13 wherein the server is configured:

to determine if the first device has the registered association in a first server session invoked by the application programming interface responsive to receipt of the verification request from the first device; and

to grant or deny the verification request in a second server session invoked by the application programming interface responsive to receipt of the verification input from the second device.

15. A communication system comprising the apparatus of claim 12 and the first and second devices.

16. A method comprising:

receiving a notification regarding a verification request received from a first device; and

providing motion-based verification input responsive to the notification;

wherein the receiving and providing are implemented by a second device having a registered association with the first device in a verification platform adapted for communication with the first and second devices;

wherein the first and second devices are both accessible to and controllable by a given user;

wherein the verification request is received in the verification platform from the first device;

wherein the notification is received in the second device from the verification platform;

wherein the verification request is granted or denied by the verification platform based at least in part on the verification input received from the second device; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.

17. An article of manufacture comprising a non-transitory processor-readable storage medium having embodied therein one or more software programs, wherein the one or more software programs when executed by a device, configured to operate as a second device relative to a first device, cause the second device:

to receive a notification regarding a verification request received in a verification platform from the first device; and

to provide a verification input to the verification platform responsive to the notification;

wherein the first and second devices are both accessible to and controllable by a given user;

wherein the second device has a registered association with the first device in the verification platform;

wherein the verification platform is adapted for communication with the first and second devices;

wherein the verification request is granted or denied by the verification platform based at least in part on the verification input received from the second device; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.

18. An apparatus comprising:

a device configured to operate as a second device relative to a first device;

the second device being configured;

to receive a notification regarding a verification request received in a verification platform from the first device; and

to provide a verification input to the verification platform responsive to the notification;

wherein the first and second devices are both accessible to and controllable by a given user;

wherein the second device has a registered association with the first device in the verification platform;

wherein the verification platform is adapted for communication with the first and second devices;

wherein the verification request is granted or denied by the verification platform based at least in part on the verification input received from the second device; and

wherein the notification directs that the second device be moved in a predetermined pattern, the predetermined pattern being established by the verification platform based at least in part on one or more selected types of motion identified by the given user.