Multi-user authentication

• US 9,906,520 B2
• Filed: 12/02/2015
• Issued: 02/27/2018
• Est. Priority Date: 12/02/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Fouad, Ahmed, Mahfouz, Tamer A., Nassar, Nader M., Nassar, Tamer M., Youssef, Alaa S.
• Primary Examiner(s): Kabir, Jahangir
• Application Number:
  US14/957,107
• Publication Number:
  US 20170163623A1
• Time in Patent Office: 818 Days
• Field of Search: 726 1, 726 2, 726 4
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

In an approach to multi-user authentication, one or more computer processors receive a first user login. The one or more computer processors determine whether at least one additional user login is received. The one or more computer processors receive an access request from the first user. The one or more computer processors receive an access request from the at least one additional user. In response to receiving the access request from the first user and the access request from the at least one additional user, the one or more computer processors determine whether the access request from the first user and the access request from the at least one additional user meet pre-defined criteria. In response to determining the access requests meet pre-defined criteria, the one or more computer processors authorize the access request of the first user and the access request of the at least one additional user.

Claims

1. A method for multi-user authentication, the method comprising:

receiving, by one or more computer processors, a first user login;

determining, by the one or more computer processors, whether at least one additional user login is received, wherein the first user login and the at least one additional user login employ one or more of a multi-factor authentication, and wherein the first user login utilizes a biometric characteristic and the at least one additional user login utilizes a password;

responsive to determining at least one additional user login is received, receiving, by the one or more computer processors, a first access request to a resource from the first user;

receiving, by the one or more computer processors, a second access request to the resource from the at least one additional user;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, determining, by the one or more computer processors, whether the first user and the at least one additional user are authorized to make the access requests, wherein determining whether the first user and the at least one additional user are authorized includes determining whether the first user and the at least one additional user are located within a pre-defined geographic radius around the resource;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, determining, by the one or more computer processors, whether the first access request from the first user and the second access request from the at least one additional user are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time; and

responsive to determining the access requests are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time, authorizing, by the one or more computer processors, the first access request of the first user and the second access request of the at least one additional user.

2. The method of claim 1, wherein a number of user logins required is based, at least in part, on a level of pre-defined criteria.

3. The method of claim 1, wherein an access request includes at least one of:

a request for access, a request to perform an action, a request to perform a transaction, a request to grant permission to perform an action, a request to grant permission for access, or a request to grant permission to perform a transaction.

4. A computer program product for multi-user authentication, the computer program product comprising:

one or more computer readable storage device and program instructions stored on the one or more computer readable storage device, the stored program instructions comprising;

program instructions to receive a first user login;

program instructions to determine whether at least one additional user login is received, wherein the first user login and the at least one additional user login employ one or more of a multi-factor authentication, and wherein the first user login utilizes a biometric characteristic and the at least one additional user login utilizes a password;

responsive to determining at least one additional user login is received, program instructions to receive a first access request to a resource from the first user;

program instructions to receive a second access request to the resource from the at least one additional user;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, program instructions to determine whether the first user and the at least one additional user are authorized to make the access requests, wherein determining whether the first user and the at least one additional user are authorized includes determining whether the first user and the at least one additional user are located within a pre-defined geographic radius around the resource;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, program instructions to determine whether the first access request from the first user and the second access request from the at least one additional user are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time; and

responsive to determining the access requests are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time, program instructions to authorize the first access request of the first user and the second access request of the at least one additional user.

5. The computer program product of claim 4, wherein a number of user logins required is based, at least in part, on a level of pre-defined criteria.

6. The computer program product of claim 4, wherein an access request includes at least one of:

a request for access, a request to perform an action, a request to perform a transaction, a request to grant permission to perform an action, a request to grant permission for access, or a request to grant permission to perform a transaction.

7. A computer system for multi-user authentication, the computer system comprising:

one or more computer processors;

one or more computer readable storage device;

program instructions stored on the one or more computer readable storage device for execution by at least one of the one or more computer processors, the stored program instructions comprising;

program instructions to receive a first user login;

program instructions to determine whether at least one additional user login is received, wherein the first user login and the at least one additional user login employ one or more of a multi-factor authentication, and wherein the first user login utilizes a biometric characteristic and the at least one additional user login utilizes a password;

responsive to determining at least one additional user login is received, program instructions to receive a first access request to a resource from the first user;

program instructions to receive a second access request to the resource from the at least one additional user;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, program instructions to determine whether the first user and the at least one additional user are authorized to make the access requests, wherein determining whether the first user and the at least one additional user are authorized includes determining whether the first user and the at least one additional user are located within a pre-defined geographic radius around the resource;

responsive to receiving the first access request from the first user and the second access request from the at least one additional user, program instructions to determine whether the first access request from the first user and the second access request from the at least one additional user are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time; and

responsive to determining the access requests are received as a simultaneous authentication within the pre-defined geographic radius around the resource and within a pre-defined threshold duration of time, program instructions to authorize the first access request of the first user and the second access request of the at least one additional user.

8. The computer system of claim 7, wherein an access request includes at least one of:

a request for access, a request to perform an action, a request to perform a transaction, a request to grant permission to perform an action, a request to grant permission for access, or a request to grant permission to perform a transaction.