User authentication by geo-location and proximity to user's close network

• US 9,185,117 B2
• Filed: 02/07/2014
• Issued: 11/10/2015
• Est. Priority Date: 02/07/2014
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Grigg, David M., Bertanzetti, Peter John, Toth, Michael E., Hanson, Carrie Anne
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/175,954
• Publication Number:
  US 20150229650A1
• Time in Patent Office: 641 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Embodiments provide user authentication based on proximity to a close network of a user. Embodiments receive from a user a request to execute a user action associated with an application, wherein execution of the user action requires validation of one or more authentication credentials; collect a set of data comprising information related to a physical location of the user; determine a close network score associated with the user; determine a level of authentication associated with the close network score; determine which one or more authentication types are associated with the level of authentication associated with the close network score; request one or more authentication credentials corresponding to the determined one or more authentication types; receive credentials from the user; validate the credentials, thereby resulting in a successful validation of the credentials; and, in response to the successful validation of the credentials, execute the user action.

Claims

1. An apparatus for user authentication based on proximity to a close network of a user, the apparatus comprising:

a memory;

a processor; and

computer-executable instructions stored in the memory, executable by the processor, and configured to cause the processor to;

receive from a user, a request to execute a user action associated with an application, wherein execution of the user action requires validation of one or more authentication credentials;

collect a set of data comprising information related to a physical location of the user;

determine a close network score associated with the user, comprising;

selecting at least one member of a close network of the user;

determining a proximity threshold associated with the at least one member and the user;

determining whether the at least one member is within the proximity threshold, comprising;

determining a location of the apparatus of the user by a GPS application running on the apparatus of the user and a location of an apparatus associated with the at least one member by a GPS application running on the apparatus of the at least one member;

calculating a distance between the determined location of the user apparatus and the at least one member apparatus;

comparing the calculated distance to the determined proximity threshold; and

based at least in part on the determination of whether the at least one member is within the proximity threshold, assigning a close network score;

determine a level of authentication associated with the determined close network score;

determine which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the close network score;

request one or more authentication credentials corresponding to the determined one or more authentication types;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, execute the user action.

2. The apparatus of claim 1, wherein determining the close network score associated with the user further comprises:

selecting at least one member of a secondary network of the user;

determining a second proximity threshold associated with the at least one member of the secondary network of the user;

determining whether the at least one member of the secondary network of the user is within the second proximity threshold; and

wherein determining the close network score is further based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold.

3. The apparatus of claim 2, wherein determining the close network score comprises:

determining a first partial score based at least in part on the determination of whether the at least one member is within the proximity threshold, wherein the first partial score is weighted by a first weighting factor;

determining a second partial score based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold, wherein the second partial score is weighted by a second weighting factor; and

combining the first partial score and the second partial score, thereby determining the close network score.

4. The apparatus of claim 1, wherein the module is further configured to:

receive user input regarding which of a plurality of network members should be used during authentication.

5. The apparatus of claim 1, wherein determining the level of authentication associated with the assigned close network score comprises:

accessing a database comprising a plurality of entries each corresponding to a unique close network score; and

determining, from the database, the level of authentication based on an entry in the database matching the determined close network score.

6. The apparatus of claim 1, wherein the module is further configured to:

collect a second set of data comprising information related to a physical location of the at least one member of the close network of the user;

wherein determining whether the at least one member is within the proximity threshold comprises;

determining a distance between the user and the at least one member of the close network of the user; and

comparing the distance to the proximity threshold.

7. A computer-implemented method for user authentication based on proximity to a close network of a user, the method comprising:

receiving, by a processor of a mobile device and from a user, a request to execute a user action associated with an application, wherein execution of the user action requires validation of one or more authentication credentials;

collecting, by the processor of the mobile device, a set of data comprising information related to a physical location of the user;

determining, by the processor of the mobile device, a close network score associated with the user, comprising;

selecting at least one member of a close network of the user;

determining a proximity threshold associated with the at least one member and the user;

determining whether the at least one member is within the proximity threshold, comprising;

determining a location of the apparatus of the user by a GPS application running on the apparatus of the user and a location of an apparatus associated with the at least one member by a GPS application running on the apparatus of the at least one member;

calculating a distance between the determined location of the user apparatus and the at least one member apparatus;

comparing the calculated distance to the determined proximity threshold; and

based at least in part on the determination of whether the at least one member is within the proximity threshold, assigning a close network score;

determining, by the processor of the mobile device, a level of authentication associated with the determined close network score;

determining, by the processor of the mobile device, which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the close network score;

requesting, by the processor of the mobile device, one or more authentication credentials corresponding to the determined one or more authentication types;

receiving, by the processor of the mobile device, one or more authentication credentials from the user;

validating, by the processor of the mobile device, the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, executing, by the processor of the mobile device, the user action.

8. The method of claim 7, wherein determining the close network score associated with the user further comprises:

selecting at least one member of a secondary network of the user;

determining a second proximity threshold associated with the at least one member of the secondary network of the user;

determining whether the at least one member of the secondary network of the user is within the second proximity threshold; and

wherein determining the close network score is further based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold.

9. The method of claim 8, wherein determining the close network score comprises:

determining a first partial score based at least in part on the determination of whether the at least one member is within the proximity threshold, wherein the first partial score is weighted by a first weighting factor;

determining a second partial score based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold, wherein the second partial score is weighted by a second weighting factor; and

combining the first partial score and the second partial score, thereby determining the close network score.

10. The method of claim 7, further comprising:

receiving user input regarding which of a plurality of network members should be used during authentication.

11. The method of claim 7, wherein determining the level of authentication associated with the assigned close network score comprises:

accessing a database comprising a plurality of entries each corresponding to a unique close network score; and

determining, from the database, the level of authentication based on an entry in the database matching the determined close network score.

12. The method of claim 7, further comprising:

collecting a second set of data comprising information related to a physical location of the at least one member of the close network of the user;

wherein determining whether the at least one member is within the proximity threshold comprises;

determining a distance between the user and the at least one member of the close network of the user; and

comparing the distance to the proximity threshold.

13. A computer program product for user authentication based on proximity to a close network of a user, the computer program product comprising a non-transitory computer-readable medium comprising code causing a first apparatus to:

receive from a user, a request to execute a user action associated with an application, wherein execution of the user action requires validation of one or more authentication credentials;

collect a set of data comprising information related to a physical location of the user;

determine a close network score associated with the user, comprising;

selecting at least one member of a close network of the user;

determining a proximity threshold associated with the at least one member and the user;

determining whether the at least one member is within the proximity threshold, comprising;

determining a location of the apparatus of the user by a GPS application running on the apparatus of the user and a location of an apparatus associated with the at least one member by a GPS application running on the apparatus of the at least one member;

calculating a distance between the determined location of the user apparatus and the at least one member apparatus;

comparing the calculated distance to the determined proximity threshold; and

based at least in part on the determination of whether the at least one member is within the proximity threshold, assigning a close network score;

determine a level of authentication associated with the determined close network score;

determine which one or more authentication types from a plurality of authentication types are associated with the level of authentication associated with the close network score;

request one or more authentication credentials corresponding to the determined one or more authentication types;

receive one or more authentication credentials from the user;

validate the one or more authentication credentials, thereby resulting in a successful validation of the one or more authentication credentials; and

in response to the successful validation of the one or more authentication credentials, executing the user action.

14. The computer program product of claim 13, wherein determining the close network score associated with the user further comprises:

selecting at least one member of a secondary network of the user;

determining a second proximity threshold associated with the at least one member of the secondary network of the user;

determining whether the at least one member of the secondary network of the user is within the second proximity threshold; and

wherein determining the close network score is further based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold.

15. The computer program product of claim 14, wherein determining the close network score comprises:

determining a first partial score based at least in part on the determination of whether the at least one member is within the proximity threshold, wherein the first partial score is weighted by a first weighting factor;

determining a second partial score based at least in part on the determination of whether the at least one member of the secondary network of the user is within the second proximity threshold, wherein the second partial score is weighted by a second weighting factor; and

combining the first partial score and the second partial score, thereby determining the close network score.

16. The computer program product of claim 13, wherein the code further causes the first apparatus to:

receive user input regarding which of a plurality of network members should be used during authentication.

17. The computer program product of claim 13, wherein determining the level of authentication associated with the assigned close network score comprises:

accessing a database comprising a plurality of entries each corresponding to a unique close network score; and

determining, from the database, the level of authentication based on an entry in the database matching the determined close network score.