Verification platform having interface adapted for communication with verification agent

• US 9,443,069 B1
• Filed: 01/08/2016
• Issued: 09/13/2016
• Est. Priority Date: 11/15/2012
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Alikhani, Kayvan
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US14/991,614
• Time in Patent Office: 249 Days
• Field of Search: 726/3, 726/5, 726/17, 726/16
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A method includes registering a given user with a verification platform adapted for communication with a verification agent implemented on a given processing device of the given user. The method also includes receiving a specification of verification rules to be used by the verification platform in authenticating a verification request from the given user, the verification rules specifying two or more different types of verification, a verification mode for each of the two or more different types of verification and a sequence for performing the two or more different types of verification. The method further includes synchronizing verification credentials associated with the given user for each of the two or more different types of verification, receiving a verification request from the given user, and authenticating the verification request utilizing the specified verification rules and the synchronized verification credentials.

Claims

1. A method comprising:

registering a given user with a verification platform, the verification platform comprising at least one verification platform server and a verification platform application programming interface (API) adapted for communication with a verification agent implemented on a given processing device of the given user;

receiving, at the verification platform via the verification platform API, a specification of verification rules selected by the given user to be used by the verification platform in authenticating a verification request from the given user, the verification rules specifying two or more different types of verification, a verification mode for each of the two or more different types of verification and a sequence for performing the two or more different types of verification;

synchronizing verification credentials associated with the given user for each of the two or more different types of verification at the verification platform server;

receiving, at the verification platform via the verification platform API, a verification request from the given user; and

authenticating, at the verification platform, the verification request utilizing the specified verification rules and the synchronized verification credentials.

2. The method of claim 1 wherein the two or more different types of verification comprise two or more of:

voice verification, face verification, location verification, motion verification and third party verification.

3. The method of claim 1 wherein the verification mode for each of the two or more different types of verification comprises one of:

local verification of submitted verification credentials at the given processing device; and

remote verification of submitted verification credentials at the verification platform.

4. The method of claim 1 wherein the sequence for performing the two or more different types of verification comprises two or more security levels in which each security level requires satisfaction of at least one of the two or more different types of verification.

5. The method of claim 4 wherein a given one of the security levels is configured so as to require satisfaction of only one of at least two different types of verification associated with the given security level.

6. The method of claim 4 wherein a given one of the security levels is configured so as to require satisfaction of at least two different types of verification associated with the given security level.

7. The method of claim 1 wherein synchronizing the verification credentials comprises:

receiving a request to invoke a verification platform server session from the verification agent via the verification platform API;

gathering verification credentials associated with the given user for each of the two or more different verification methods; and

forwarding the verification credentials to the verification agent for encryption and storage on the given processing device.

8. The method of claim 7 wherein receiving the request to invoke the verification platform server session comprises receiving requests for distinct first and second verification platform server sessions for synchronizing verification credentials associated with first and second different ones of the two or more different types of verification.

9. The method of claim 1 wherein receiving the verification request from the given user comprises:

receiving a request to invoke a verification platform sever session from the verification agent via the verification platform API; and

utilizing the verification platform server session to determine the verification rules for authenticating the verification request from the given user.

10. The method of claim 9 wherein authenticating the verification request comprises:

retrieving the verification rules for the given user;

returning the verification rules to the verification agent via the verification platform API;

receiving submitted verification credentials from the given processing device via the verification platform API;

utilizing the verification platform server session to determine validity of the submitted verification credentials; and

sending verification results from the verification platform server to the verification agent on the given processing device via an event notification generated by the verification platform API.

11. The method of claim 9 wherein the specification of verification rules comprises at least one of:

adding or removing the given user from one or more groups of users, each group of users having a set of verification rules associated therewith; and

modifying the verification rules associated with at least one of the groups of users to which the given user belongs.

12. An article of manufacture comprising a non-transitory processor-readable storage medium having embodied therein one or more software programs, wherein the one or more software programs when executed by at least one processing device cause the at least one processing device:

to register a given user with a verification platform, the verification platform comprising at least one verification platform server and a verification platform application programming interface (API) adapted for communication with a verification agent implemented on a given processing device of the given user;

to receive, at the verification platform via the verification platform API, a specification of verification rules selected by the given user to be used by the verification platform in authenticating a verification request from the given user, the verification rules specifying two or more different types of verification, a verification mode for each of the two or more different types of verification and a sequence for performing the two or more different types of verification;

to synchronize verification credentials associated with the given user for each of the two or more different types of verification at the verification platform server;

to receive, at the verification platform via the verification platform API, a verification request from the given user; and

to authenticate, at the verification platform, the verification request utilizing the specified verification rules and the synchronized verification credentials.

13. An apparatus comprising:

a verification platform comprising;

at least one processing device having a processor coupled to a memory; and

a verification platform application programming interface (API) adapted for communication with a verification agent implemented on a given processing device associated with a given user;

wherein the verification platform is configured;

to register the given user with the verification platform;

to receive, via the verification platform API, a specification of verification rules to be used by the verification platform in authenticating a verification request from the given user, the verification rules selected by the given user specifying two or more different types of verification, a verification mode for each of the two or more different types of verification and a sequence for performing the two or more different types of verification;

to synchronize verification credentials associated with the given user for each of the two or more different types of verification at the verification platform server;

to receive, via the verification platform API, a verification request from the given user; and

to authenticate the verification request utilizing the specified verification rules and the synchronized verification credentials.

14. The apparatus of claim 13 wherein the two or more different types of verification comprise two or more of:

voice verification, face verification, location verification, motion verification and third party verification.

15. The apparatus of claim 13 wherein the verification mode for each of the two or more different types of verification comprises one of:

local verification of submitted verification credentials at the given processing device; and

remote verification of submitted verification credentials at the verification platform.

16. The apparatus of claim 13 wherein the sequence for performing the two or more different types of verification comprises two or more security levels in which each security level requires satisfaction of at least one of the two or more different types of verification.

17. The apparatus of claim 13 wherein the verification platform is configured to synchronize the verification credentials by:

receiving a request to invoke a verification platform server session from the verification agent via the verification platform API;

gathering verification credentials associated with the given user for each of the two or more different verification methods; and

forwarding the verification credentials to the verification agent for encryption and storage on the given processing device.

18. The apparatus of claim 13 wherein the verification platform is configured to receive the verification request from the given user by:

receiving a request to invoke a verification platform sever session from the verification agent via the verification platform API; and

utilizing the verification platform server session to determine the verification rules for authenticating the verification request from the given user.

19. The apparatus of claim 18 wherein the verification platform is configured to authenticate the verification request by:

retrieving the verification rules for the given user;

returning the verification rules to the verification agent via the verification platform API;

receiving submitted verification credentials from the given processing device via the verification platform API;

utilizing the verification platform server session to determine validity of the submitted verification credentials; and

sending verification results from the verification platform server to the verification agent via an event notification generated by the verification platform API.

20. A method comprising:

registering a given user with a verification platform, the verification platform comprising at least one verification platform server and a verification platform application programming interface (API) adapted for communication with a verification agent implemented on a given processing device of the given user;

sending, from the verification agent to the verification platform via the verification platform API, a specification of verification rules selected by the given user to be used by the verification platform in authenticating a verification request from the given user, the verification rules specifying two or more different types of verification, a verification mode for each of the two or more different types of verification and a sequence for performing the two or more different types of verification;

synchronizing verification credentials associated with the given user for each of the two or more different types of verification at the verification platform server; and

sending, from the verification agent to the verification platform via the verification platform API, a verification request from the given user;

wherein the verification request is authenticated at the verification platform utilizing the specified verification rules and the synchronized verification credentials.