Authentication based on proximate devices

• US 9,473,513 B2
• Filed: 06/22/2015
• Issued: 10/18/2016
• Est. Priority Date: 12/30/2014
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fuka, Louis T., Keohane, Susann M., Kraemer, James R.
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): Khan, Sher A
• Application Number:
  US14/745,496
• Publication Number:
  US 20160217219A1
• Time in Patent Office: 484 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/86 Mapping to a database
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

In one embodiment, a computer-implemented method includes, in response to an attempt by a user to perform a transaction using a computing device, accessing a communication device connected to the computing device. A presence of one or more nearby devices, with respect to the computing device, is detected through use of the communication device connected to the computing device. A mapping of nearby devices to trust levels may be applied to the one or more nearby devices. In the mapping, each group of one or more nearby devices maps to a trust level of two or more trust levels. An assigned trust level for the transaction is determined, by a computer processor, based on applying the mapping of nearby devices to trust levels. The mapping of nearby devices to trust levels is modified based on the one or more nearby devices detected. The modified mapping is used for future transactions.

Claims

1. A computer-implemented method, comprising:

in response to an attempt by a user to perform a transaction using a computing device, accessing a communication device connected to the computing device;

detecting, through use of the communication device connected to the computing device, a presence of a current set of nearby devices, wherein each of the current set of nearby devices is located geographically nearby the computing device when the transaction is attempted;

applying, to the current set of nearby devices located geographically nearby the computing device when the transaction is attempted, a dynamic mapping of devices to trust levels;

wherein, in the dynamic mapping, each potential set of nearby devices maps to a trust level of two or more trust levels, wherein the dynamic mapping is based on a record of past transactions, and wherein the record of past transactions indicates which devices were geographically nearby during the past transactions;

determining an assigned trust level for the transaction based on the applying, to the current set of nearby devices located geographically nearby the computing device when the transaction is attempted, the dynamic mapping of devices to trust levels;

identifying a second computing device as being part of the current set of nearby devices located geographically nearby the computing device when the transaction is attempted; and

modifying the dynamic mapping of devices to trust levels based on the current set of nearby devices located geographically nearby the computing device when the transaction is attempted;

wherein modifying the dynamic mapping results in an increased trust level when the second computing device is geographically nearby the computing device for the future transactions, responsive to the second computing device being geographically nearby the first computing device when the transaction is attempted; and

wherein the modified dynamic mapping is used for future transactions.

2. The method of claim 1, wherein determining the assigned trust level for the transaction comprises:

assigning a first trust level to the transaction if none of the one or more nearby devices having been present during past transactions of the user attempting to perform the transaction; and

assigning a second trust level to the transaction if at least one of the one or more nearby devices having been present during the past transactions of the user;

wherein the second trust level is distinct from the first trust level.

3. The method of claim 1, further comprising communicating the assigned trust level for the transaction to a transaction server, wherein the transaction server is configured to manage the transaction based on the assigned trust level.

4. The method of claim 1, wherein detecting the presence of the current set of nearby devices comprises detecting an untrusted device, and wherein the method further comprises alerting the user that the untrusted device is present.

5. The method of claim 1, wherein detecting the presence of the current set of nearby devices comprises detecting which devices are within communication range of a wireless communication mechanism on the computing device on which the user is attempting to make the transaction.