Providing a service based on time and location based passwords

• US 9,491,165 B2
• Filed: 09/30/2015
• Issued: 11/08/2016
• Est. Priority Date: 09/25/2013
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Koneru, Srikanth Prabhu
• Primary Examiner(s): Rahman, Mahfuzur
• Application Number:
  US14/870,917
• Publication Number:
  US 20160021103A1
• Time in Patent Office: 405 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A first device may receive a first password from a second device. The first password may be generated based on first time information and first location information identifying a geographic location of the second device. The first device may, determine a second password based on second time information and second location information identifying the geographic location of the second device. The first device may determine that the second device is located at the geographic location at a particular time when characters in the first password match characters in the second password, and may provide a service based on determining that the second device is located at the geographic location at the particular time.

Claims

1. A method comprising:

receiving, by a first device, a first password from a second device,

the first password being generated based on applying an algorithm to first location information identifying a geographic location of the second device;

receiving, by the first device, second location information identifying the geographic location of the second device;

generating, by the first device, a second password based on applying the algorithm to the second location information identifying the geographic location of the second device;

determining, by the first device, a verification level based on a quantity of characters in the first password that match characters in the second password; and

providing, by the first device, a service to the second device based on the verification level,

providing the service including at least one of;

authorizing the second device to access content, or

providing an indication that identifies that the second device is currently located at the geographic location.

2. The method of claim 1, where determining the verification level comprises:

determining that a first quantity of characters in the first password match the characters in the second password,

the first quantity of characters being less than all of the characters in the first password and more than zero;

determining a partial verification level based on the first quantity of characters in the first password that match the characters in the second password; and

where the method further comprises;

selecting the service based on the partial verification level.

3. The method of claim 1, further comprising:

selecting a particular service based on the verification level,

where providing the service is based on selecting the particular service.

4. The method of claim 1, where the algorithm uses at least one of a random key generator, a hash-based message authentication code (HMAC) algorithm, a time-based one-time password (TOTP) algorithm, or an HMAC-based one-time password algorithm (HOTP).

5. The method of claim 1, further comprising:

determining that the second device is not located at the geographic location when characters in the first password do not match the characters in the second password,

access to the service being prevented based on determining that the second device is not located at the geographic location.

6. The method of claim 1, further comprising:

authenticating that the second location information has not been modified based on an identifier, included in the second location information, that indicates the second location originated from at least one of a GPS device, included in the second device, or a location reporting application on the second device,

where the second password is generated based on authenticating the second location information.

7. The method of claim 1, where authorizing the second device to access content includes:

authorizing the second device to access a directory based on the verification level.

8. A system comprising:

a first device to;

receive, from a second device, a first password,

the first password being generated based on applying an algorithm to first geographic location information of the second device and first time information;

receive second geographic location information of the second device and second time information;

generate a second password based on applying the algorithm to the second geographic location information and the second time information;

determine a verification level based on a number of characters in the first password that match characters in the second password; and

provide a service to the second device based on the verification level,

the first device, when providing the service, is to at least one of;

authorize the second device to access content, or

provide an indication that identifies that the second device is currently located at a geographic location.

9. The system of claim 8, where, when determining the verification level, the first device to:

determine a partial match based on the number of characters in the first password that match the characters in the second password; and

determine the verification level based on the partial match; and

where, when providing the service, the first device is to;

provide, to the second device, partial access to the service based on the verification level.

10. The system of claim 8, where, when determining the verification level, the first device to:

determine a full match based on the number of characters in the first password that match the characters in the second password; and

determine the verification level based on the full match; and

where, when providing the service, the first device is to;

provide, to the second device, unrestricted access to the service based on the verification level.

11. The system of claim 8, where, when generating the second password using the algorithm, the first device is to:

use at least one of a random key generator, a hash-based message authentication code (HMAC) algorithm, a time-based one-time password (TOTP) algorithm, or an HMAC-based one-time password algorithm (HOTP).

12. The system of claim 8, where the first geographic location information comprises:

an identifier that identifies an application that created the first geographic location information.

13. The system of claim 8, where the first password comprises:

an identifier that identifies the second device.

14. The system of claim 8, where the first device is further to:

authenticate that the second geographic location information has not been modified based on an identifier, included in the second geographic location information, that indicates the second geographic location information originated from at least one of a GPS device, included in the second device, or a location reporting application on the second device.

15. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors associated with a first device, cause the one or more processors to;

receive, from a second device, a first password,

the first password being generated based on applying an algorithm to first location information identifying a geographic location of the second device;

receive second location information identifying the geographic location of the second device and first time information;

generate a second password based on applying the algorithm to the second location information;

determine a verification level based on a number of characters in the first password that match characters in the second password;

determine whether the second device is located at the geographic location at a particular time based on the first time information; and

selectively provide a service to the second device based on the verification level and the first time information,

the one or more instructions, when executed by the one or more processors to selectively provide the service, cause the one or more processors to at least one of;

selectively authorize the second device to access content, or

selectively provide an indication that identifies that the second device is currently located at the geographic location.

16. The non-transitory computer-readable medium of claim 15, where the one or more instructions, to determine the verification level, cause the one or more processors to:

determine the first location information from the first password; and

determine a precision level of the first location information,

the precision level indicating that the geographic location of the second device has been verified to a particular street address.

17. The non-transitory computer-readable medium of claim 15, where the one or more instructions, to determine the verification level, cause the one or more processors to:

determine the first location information from the first password; and

determine a precision level of the first location information,

the precision level indicating that the geographic location of the second device has been verified to a range of street addresses.

18. The non-transitory computer-readable medium of claim 15, where the one or more instructions, to determine whether the second device is located at the geographic location at the particular time based on the first time information, cause the one or more processors to:

determine, based on the first time information, whether the second device is requesting access during a first particular time block;

where the one or more instructions, to determine the verification level based on the number of characters in the first password that match the characters in the second password, cause the one or more processors to;

determine whether the verification level is above a threshold; and

where the one or more instructions, to selectively provide the service to the second device based on the verification level and the first time information, cause the one or more processors to;

authorize providing the service based on;

determining that the second device is requesting access during the first particular time block, and

determining that the verification level is above the threshold.

19. The non-transitory computer-readable medium of claim 18, where the one or more instructions, to determine whether the second device is located at the geographic location at the particular time based on the first time information, cause the one or more processors to:

determine, based on the first time information, whether the second device is requesting access during a second particular time block;

where the one or more instructions, to determine the verification level based on the number of characters in the first password that match the characters in the second password, cause the one or more processors to;

determine whether the verification level is indicating that less than all of the characters in the first password match the characters in the second password; and

where the one or more instructions, to selectively provide the service to the second device based on the verification level and the first time information, cause the one or more processors to;

deny providing the service based on;

determining that the second device is requesting access during the second particular time block, and

determining that less than all of the characters in the first password match the characters in the second password.

20. The non-transitory computer-readable medium of claim 15, where the one or more instructions, to determine whether the second device is located at the geographic location at the particular time based on the first time information, cause the one or more processors to:

determine, based on the first time information, that the second device is requesting access during a first particular time block;

where the one or more instructions, to determine the verification level based on the number of characters in the first password that match the characters in the second password, cause the one or more processors to;

determine that the verification level is indicating that the number of characters in the first password that match the characters in the second password is less than all of the characters in the first password and more than zero; and

where the one or more instructions, selectively provide the service to the second device based on the verification level and the first time information, cause the one or more processors to;

authorize providing the service based on;

determining that the second device is requesting access during the first particular time block, and

determining that the number of characters in the first password that match the characters in the second password is less than all of the characters in the first password and more than zero.