System and method for peer to peer mobile contextual authentication

• US 9,990,489 B2
• Filed: 08/03/2017
• Issued: 06/05/2018
• Est. Priority Date: 02/21/2014
• Status: Active Grant

• Current Assignee: LiveEnsure, Inc.
• Original Assignee: LiveEnsure, Inc.
• Inventors: Hessler, Christian
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/667,965
• Publication Number:
  US 20170329955A1
• Time in Patent Office: 306 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

The system and method of the present disclosure is a contextual authentication system, comprising: an authentication server, which comprises a memory; and an authentication application, wherein said authentication application may be configured to be run on at least a primary personal computing device and one or more secondary personal computing devices. The devices are networked with each other and each other and the authentication server. The primary device may have a resource that may be shared with the secondary devices if the users of the secondary devices are able to properly provide a contextual authentication, as required by the primary device. If the secondary users cannot properly authenticate, then they are denied access. The server may make the determination.

Claims

1. A contextual authentication system, comprising:

an authentication server, which comprises a memory; and

an authentication application, wherein said authentication application is configured to be run on at least a primary personal computing device and one or more secondary personal computing devices;

wherein said primary personal computing device and said one or more secondary personal computing devices are networked with an intermediate host;

wherein said intermediate host comprises a presentation;

wherein said presentation comprises one or more tagged resources;

wherein said intermediate host, via a second channel, presents said one or more tagged resources to said one or more secondary personal computing devices;

wherein a direct connection is initiated between said primary personal computing device and said one or more secondary personal computing devices;

wherein said authentication application running on said primary personal computing device creates said one or more tagged resources associated with an authentication request object that requires one or more contextual authentications to be accessed;

wherein said server sends to said one or more secondary personal computing devices said one or more tagged resources associated with said authentication request object; and

wherein said authentication application on said one or more secondary personal computing devices requires one or more users to provide one or more provided contextual authentications when said one or more tagged resources are accessed by said one or more secondary personal computing devices.

2. The system of claim 1, wherein said authentication server receives said one or more provided contextual authentications and determines whether said one or more provided contextual authentications are valid.

3. The system of claim 2, wherein if a particular provided contextual authentication is not valid, then said authentication server denies access to said one or more tagged resources.

4. The system of claim 2, wherein if a particular provided contextual authentication is valid, then said authentication server grants access to said one or more tagged resources.

5. The system of claim 2, wherein said one or more contextual authentications are interactive.

6. The system of claim 2, wherein said one or more contextual authentications are selected from the group of contextual authentications consisting of:

device identification;

a behavior;

a touch;

a gesture;

proximity; and

knowledge.

7. The system of claim 1, wherein said server creates a first template and a second template, which are stored in said memory;

wherein said server processes said first template;

wherein said one or more secondary personal computing devices each process said second template;

wherein said one or more secondary personal computing devices retrieve said second template by following said one or more tagged resources;

wherein said second template is retrieved independent of said server via a third channel;

wherein said primary personal computing device sets said one or more contextual authentications;

wherein said server populates said first template based on said one or more contextual authentications, such that a one-time contextual server signature is constructed by said server based on said first template;

wherein said authentication application on said one or more secondary computing devices populates said one or more provided contextual authentications into said second template, such that a one-time contextual device signature is constructed; and

wherein said server compares said one-time contextual server signature with said one-time contextual device signature and determines whether to grant access to said one or more tagged resources.

8. The method of claim 1, wherein said one or more secondary personal computing devices are enabled to retrieve said second template based on said one or more secondary personal computing devices'"'"' ability to scan, sense, enter, input, consume or respond to said one or more tagged resources on said intermediate host.

9. The method of claim 1, said primary personal computing device and said intermediate host each require an individual and discrete authentication with said one or more secondary personal computing device.

10. The method of claim 7, said primary personal computing device and said intermediate host each requiring an individual and discrete authentication with said secondary personal computing device.

11. A contextual authentication system, comprising:

an authentication server, which comprises a memory; and

an authentication application, wherein said authentication application is configured to be run on at least a primary personal computing device and one or more secondary personal computing devices;

wherein said primary personal computing device and said one or more secondary personal computing devices are networked with each other and with said authentication server;

wherein said primary personal computing device comprises one or more resources;

wherein a direct connection is initiated between said primary personal computing device and said one or more secondary personal computing devices;

wherein said authentication application running on said primary personal computing device tags one or more resources associated with an authentication request object that requires one or more contextual authentications;

wherein said primary personal computing device and said one or more secondary personal computing devices are networked with an intermediate host;

wherein said intermediate host comprises a presentation;

wherein said presentation comprises one or more tagged resources;

wherein said intermediate host, via a second channel, presents said one or more tagged resources to said one or more secondary personal computing devices;

wherein said server sends to said one or more secondary personal computing devices said one or more tagged resources associated with said authentication request object; and

wherein said authentication application on said one or more secondary personal computing devices requires one or more users to provide one or more provided contextual authentications when said one or more tagged resources are accessed by said one or more secondary personal computing devices.

12. The system of claim 11, wherein said authentication server receives said one or more provided contextual authentications and determines whether said one or more provided contextual authentications are valid.

13. The system of claim 12, wherein if a particular provided contextual authentication is not valid, then said authentication server denies access to said one or more tagged resources.

14. The system of claim 12, wherein if a particular provided contextual authentication is valid, then said authentication server grants access to said one or more tagged resources.

15. The system of claim 12, wherein said one or more contextual authentications are interactive.

16. The system of claim 12, wherein said one or more contextual authentications are selected from the group of contextual authentications consisting of:

device identification;

a behavior;

a touch;

a gesture;

proximity; and

knowledge.