Determining authentication challenge timing and type

• US 8,918,079 B2
• Filed: 11/19/2007
• Issued: 12/23/2014
• Est. Priority Date: 11/19/2007
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Bentley, Jon Louis, Erhart, George William, O'Gorman, Lawrence, Sammon, Michael J., Skiba, David Joseph
• Primary Examiner(s): DOAN, PHUOC HUU
• Application Number:
  US11/942,670
• Publication Number:
  US 20090131015A1
• Time in Patent Office: 2,591 Days
• Field of Search: 455/411
• US Class Current: 455/411
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An apparatus and methods are disclosed for authenticating users of wireless telecommunications terminals. In particular, the present invention enables the timing and type of authentication challenges to vary based on one or more of: the user'"'"'s current geo-location, the current day and time, the presence or absence of other nearby users, and the identity of any nearby users. In accordance with the illustrative embodiment, the re-authentication time period (i.e., the length of time between authenticating and re-authenticating a user) and the authentication challenge type (e.g., username/password, fingerprint recognition, etc.) can be determined based on these factors. The present invention is advantageous in that it enables the shortening of the re-authentication time and the selection of a more secure type of authentication challenge when it is more likely that a user'"'"'s wireless telecommunications terminal might be accidentally left behind or stolen.

Claims

1. A method comprising:

determining a first location of a first wireless device at a point in time;

determining input capabilities of the first wireless device;

based on the first location of the first wireless device, determining a second location of a second wireless device relative to the first location of the first wireless device at the point in time; and

generating, via a processor, an authentication challenge, wherein a type of the authentication challenge is based on the second location of the second wireless device relative to the first location of the first wireless device, and based on the input capabilities of the first wireless device.

2. The method of claim 1, wherein the type of authentication challenge is also based on a history of a geo-location of the first wireless device.

3. The method of claim 1, wherein the type of authentication challenge is also based on a current day and time at the first wireless device.

4. The method of claim 1, wherein the first wireless device is registered to a user, and wherein the type of authentication challenge is also based on an identity of a second user to which the second wireless device is registered to.

5. The method of claim 1, wherein the type of the authentication challenge is based on a geo-location of the first wireless device, a current day and time at the first wireless device, a presence of a user around a vicinity of the first wireless device, and an identity of the user around the vicinity of the first wireless device.

6. The method of claim 5, further comprising determining a re-authentication period for a user authenticated at the first wireless device based on the second location of the second wireless device.

7. The method of claim 1, wherein the type of authentication challenge comprises a biometric authentication challenge when the first wireless device is located at a public place and when an unknown user is located within a vicinity of the first wireless device.

8. The method of claim 1, wherein the second location of the second wireless device comprises a distance of the second wireless device to the first wireless device and the point in time comprises a current day and time, and wherein a re-authentication period is based on the second location and the point in time.

9. A system comprising:

a processor; and

a computer-readable storage medium having stored therein instructions which, when executed by the processor, cause the processor to perform operations comprising;

determining a first location of a first wireless device at a point in time;

determining input capabilities of the first wireless device;

based on the first location of the first wireless device, determining a second location of a second wireless device relative to the first location of the first wireless device at the point in time; and

generating an authentication challenge, wherein a type of the authentication challenge is based on the second location of the second wireless device relative to the first location of the first wireless device, and based on the input capabilities of the first wireless device.

10. The system of claim 9, wherein the type of authentication challenge is also based on a schedule that has one or more entries associated with a user.

11. The system of claim 9, wherein the first wireless device is registered to a user, and wherein the type of authentication challenge is also based on whether there is a second wireless device that is registered to a different user than the user.

12. A method comprising:

generating, via a processor, an authentication challenge for a current user of a first wireless device, wherein the first wireless device is registered to the current user, wherein the authentication challenge is generated based on determined input capabilities of the first wireless device, and wherein a type of the authentication challenge is based on whether there is a second wireless device that;

(i) is in a vicinity of the first wireless device, and

(ii) is registered to a different user than the current user in a user-terminal registration store.

13. The method of claim 12, wherein the type of the authentication challenge is also based on an identity of the current user.

14. The method of claim 12, wherein the type of the authentication challenge is also based on whether a user associated with the second wireless device has been authenticated.