Efficient logon

• US 10,325,085 B1
• Filed: 05/30/2018
• Issued: 06/18/2019
• Est. Priority Date: 04/30/2013
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Mortensen, Maland Keith, Buckingham, Thomas Bret, Fernandez, Gabriel Carlos, Casillas, Debra Randall
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Murphy, J. Brant
• Application Number:
  US15/993,464
• Time in Patent Office: 384 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

The technology described herein detects a first device associated with a user that is within a detectable range of a second device. The system requests authentication information. In response to receiving the authentication information, a token generator associated with the user can generate a secure token. The secure token can be sent to the server. Once the secure token is verified, the user is granted access to one or more services.

Claims

1. A method comprising:

detecting a first device associated with a user within a detectable range of a second device;

requesting authentication information based on an authentication challenge indicated in a user profile associated with the first device;

receiving the authentication information;

in response to receiving the authentication information, installing a token generator associated with the user on the second device;

generating, by the token generator associated with the user, a secure token;

sending, to a server, the secure token and a time stamp associated with the secure token;

granting, to the user, access to one or more services in response to receiving a verification of the secure token; and

in response to the user logging off the second device, removing the token generator.

2. The method of claim 1, wherein an indication that the first device is within the detectable range is received using at least one of near-field communications, radio frequency identification, or a short-range communication protocol.

3. The method of claim 1, wherein the secure token is a one-time token.

4. The method of claim 1, wherein the user profile further indicates access levels, wherein the authentication challenge is defined at least in part by the access levels.

5. The method of claim 1, wherein the authentication information includes:

authentication information associated with the user and received from the user; and

authentication information associated with the first device and received from the first device.

6. The method of claim 1, wherein the authentication information is received using one or more of a microphone, fingerprint scanner, camera, video camera, touch surface, keyboard, or motion sensor, wherein the authentication information includes at least one of biometric data, a password, a public key certification, or a personal identification number.

7. The method of claim 1, wherein the first device is enabled with short-range communication capabilities, wherein the first device is one of an identification card, tablet computer, personal device monitor, or a mobile device, wherein the second device is one of an automated transaction machine (“

ATM”

), tablet computer, desktop computer, mobile device, or a laptop computer.

8. The method of claim 1, wherein the method further comprises:

detecting that the first device is no longer within the detectable range of the second device; and

in response to detecting that the first device is no longer within the detectable range of the second device, taking an action,

wherein the action is one of logging the user off of the second device, locking the second device, or shutting down the second device.

9. The method of claim 1, wherein the authentication information is used to verify the secure token.

10. The method of claim 1, wherein the method further comprises:

submitting, to a third party, the secure token; and

receiving, from the third party, verification of the secure token.

11. A non-transitory computer-readable storage medium containing a set of instructions that, when executed by one or more processors, cause a machine to:

detect a first device associated with a user within a detectable range of a second device;

request authentication information based on an authentication challenge indicated in a user profile associated with the first device;

receive the authentication information;

in response to receiving the authentication information, install a token generator associated with the user on the second device;

generate, by the token generator associated with the user, a secure token;

send, to a server, the secure token and a time stamp associated with the secure token;

grant, to the user, access to one or more services in response to receiving a verification of the secure token; and

in response to the user logging off the second device, remove the token generator.

12. The non-transitory computer-readable storage medium of claim 11, wherein the secure token is a one-time token, wherein the set of instructions, when executed by the one or more processors, further causes the machine to install the token generator associated with the user on the second device.

13. The non-transitory computer-readable storage medium of claim 11, wherein the user profile further indicates access levels, wherein the authentication challenge is defined at least in part by the access levels.

14. The non-transitory computer-readable storage medium of claim 11, wherein the authentication information is used to verify the secure token.

15. The non-transitory computer-readable storage medium of claim 11, wherein the set of instructions, when executed by the one or more processors, further causes the machine to:

submit, to a third party, the secure token; and

receive, from the third party, verification of the secure token.

16. The non-transitory computer-readable storage medium of claim 11, wherein the set of instructions, when executed by the one or more processors, further cause the machine to:

detect that the first device is no longer within the detectable range of the second device; and

in response to detecting that the first device is no longer within the detectable range of the second device, take an action,

wherein the action is one of logging the user off of the second device, locking the second device, or shutting down the second device.

17. A system comprising:

a memory;

a processor in communication with the memory, the processor operable to execute software modules, the software modules comprising;

a detection module configured to;

detect a first device associated with a user within a detectable range of a second device;

an authentication request module configured to;

request authentication information based on an authentication challenge indicated in a user profile associated with the first device,

receive the authentication information,

in response to receiving the authentication information, install a token generator associated with the user on the second device,

generate, by a token generator associated with the user, a secure token,

send, to a server, the secure token and a time stamp associated with the secure token,

in response to the user logging off of the second device, remove the token generator; and

a logon module configured to;

grant, to the user, access to one or more services in response to receiving a verification of the secure token.

18. The system of claim 17, wherein the secure token is a one-time token.

19. The system of claim 17, wherein the authentication information is used to verify the secure token.