Computer readable storage media for multi-factor authentication and methods and systems utilizing same
Systems and methods for providing multi-factor authentication are discloses herein. A method for multi-factor authentication may include a step for receiving an authentication window request from an electronic device. The authentication window request may be configured to identify a user. The method may further include enabling an authentication window responsive, at least in part, to receipt of the authentication window request. The method may further include receiving a login verification request from an application server. The method may further include providing a response to the application server responsive, at least in part, to receiving the login verification request. The response may indicate whether the user may be selectively authenticated.
1. A method, comprising:
receiving an authentication window request from a first electronic device, the authentication window request not including any user-provided credential;
receiving, from a second electronic device that is separate from the first electronic device, a login verification request including a user-provided credential associated with a user that was inputted at the second electronic device;
responsive to determining that the second electronic device is located within a certain proximity of the first electronic device, enabling an authentication window including a limited time period, having a beginning and an end, during which the user can be authenticated; and
responsive to determining that the login verification request has been received within the beginning and the end of the limited time period associated with the authentication window, providing an authentication response based on the user-provided credential.
2. The method of claim 1 , wherein the authentication window request corresponds to an application executing on the second electronic device.
3. The method of claim 1 , further comprising disabling the authentication window upon expiration of the limited time period associated with the authentication window.
4. The method of claim 1 , wherein an application executing on the first electronic device is configured to generate the authentication window request responsive to a receiving an input by the user at the first electronic device and not responsive to any user-provided credential being inputted at the first electronic device.
5. At least one non-transitory computer-readable storage medium encoded with instructions that when executed by at least one processing unit cause the processing unit to:
receive an authentication window request from a first electronic device, the authentication window request not including any user-inputted credential;
receive, from a second electronic device that is separate from the first electronic device, a login verification request including a user-provided credential associated with a user that was inputted at the second electronic device;
responsive to determining that the second electronic device is located within a certain proximity of the first electronic device, enable an authentication window including a limited time period, having a beginning and an end, during which the user can be authenticated; and
responsive to determining that the login verification request has been received within the beginning and the end of the limited time period associated with the authentication window, provide an authentication response based on the user-provided credential.
6. The non-transitory computer-readable storage medium of claim 5 , wherein an application executing on the first electronic device is configured to generate the authentication window request responsive to receiving a user input at the first electronic device and not responsive to any user-provided credential being inputted at the first electronic device.
7. A computer system comprising:
at least one processing unit coupled to at least one memory, wherein the at least one memory is encoded with computer executable instructions that when executed cause the at least one processing unit to:
receive an authentication window request from a first electronic device, the authentication window request not including any user-inputted credential;
receive, from a second electronic device that is separate from the first electronic device, a login verification request including a user-provided credential associated with a user that was inputted at the second electronic device;
responsive to determining that the second electronic device is located within a certain proximity of the first electronic device, enable an authentication window including a limited time period, having a beginning and an end, during which the user can be authenticated; and
responsive to determining that the login verification request has been received within the beginning and the end of the limited time period associated with the authentication window, provide an authentication response based on the user-provided credential.
8. The computer system of claim 7 , wherein an application executing on the first electronic device is configured to generate the authentication window request responsive to receiving a user input at the first electronic device and not responsive to any user-provided credential being inputted at the first electronic device.
9. The computer system of claim 7 , wherein the computer executable instructions, when executed, further cause the at least one processing unit to disable the authentication window upon expiration of the limited time period associated with the authentication window.
10. The computer system of claim 7 , wherein the authentication window request corresponds to an application executing on the second electronic device.
11. The method of claim 4 , wherein the input includes at least one of a push of a button, a press of a finger, a slide of a finger, or a click of a mouse.
12. The method of claim 1 , wherein:
the first electronic device is a smartphone associated with the user; and
the second electronic device is an automated teller machine (ATM).
13. The method of claim 1 , wherein the authentication window request includes a unique identification code identifying the user.
14. The method of claim 1 , wherein the authentication window request is encrypted.
15. The method of claim 1 , wherein the enabling of the authentication window is further responsive to determining that the first electronic device is associated with the user.
16. The non-transitory computer-readable storage medium of claim 5 , wherein the enabling of the authentication window is further responsive to determining that the first electronic device is associated with the user.
17. The computer system of claim 7 , wherein the enabling of the authentication window is further responsive to determining that the first electronic device is associated with the user.
18. The non-transitory computer-readable storage medium of claim 5 , wherein:
the first electronic device is a smartphone associated with the user; and
the second electronic device is an automated teller machine (ATM).
19. The computer system of claim 7 , wherein:
the first electronic device is a smartphone associated with the user; and
the second electronic device is an automated teller machine (ATM).