IP Library Granted Patent US 9,390,242
Granted Patent B2
US 9,390,242 · App. 14/175,646 · Granted Jul 12, 2016

Determining user authentication requirements based on the current location of the user being within a predetermined area requiring altered authentication requirements

Inventors: David M. Grigg (Rock Hill, SC); Peter John Bertanzetti (Charlotte, NC); Charles Jason Burrell (Middleburg, FL); Carrie Anne Hanson (Charlotte, NC); Joseph Neil Johansen (Rock Hill, SC); Michael E. Toth (Charlotte, NC)
Assignee: Bank of America Corporation
G06F21/31
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,390,242
App. No.
14/175,646
Granted
Jul 12, 2016
Kind
B2
Abstract

Systems, apparatus, methods, and computer program products are provided for determining a user's authentication requirements/credentials for a specific network access session based on the current location of the user in comparison to predetermined boundaries of location that have altered authentication requirements, in the form of, increased or decreased authentication requirements/credentials that differ from the standard authentication requirements.

Claims (36)

1. An apparatus for determining authentication requirements for accessing a network service, the apparatus comprising:

a computing platform including a memory and a processor in communication with the memory;

an authentication requirements module stored in the memory, executable by the processor and configured to,

receive, from a mobile communication device, a request for a user to access a network service, accessible via an executable application stored on the mobile communication device, that requires user authentication,

in response to receiving the request, determine a current physical location of the user and a time associated with the request,

determine that the current location of the user and the time within a predefined physical area during a designated time period associated with the predefined physical area, wherein the predefined physical area has altered authentication requirements, and wherein the altered authentication requirements provide for one of (1) increased or (2) decreased authentication requirements in comparison to standard authentication requirements used to access the network service, and

identify the altered authentication requirements associated with the predefined physical area and the designated time period,

wherein the user is provided access to the network service in response to the user meeting the altered authentication requirements.

2. The apparatus of claim 1 , wherein the authentication requirements module is further configured to determine that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by an entity providing the network service.

3. The apparatus of claim 1 , wherein the authentication requirements module is further configured to determine that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by the user.

4. The apparatus of claim 1 , further comprising a service access module stored in the memory, executable by the processor and configured to determine that the current location of the user is within the predefined physical area having an altered level of access within the network service, wherein the altered level of access provides for one of (1) increased or (2) decreased access to functionality within the network service once the user has met the altered authentication requirements.

5. The apparatus of claim 1 , wherein the authentication requirements module is further configured to determine a level of authentication required based on the current location of the user and the time being within the predefined physical area during the designated time period.

6. The apparatus of claim 1 , wherein the authentication requirements module is further configured to determine that the current location of the user and the time are within a predefined physical area during a designated time period associated with the predefined physical area, wherein the predefined physical area has altered authentication requirements, wherein the predefined physical area is associated with a physical area in which unsecure wireless communication is prevalent and the altered authentication requirements are increased authentication requirements.

7. A method for determining user authentication requirements, the method comprising:

receiving, from a mobile communication device, a request for a user to access a network service, accessible via an executable application stored on the mobile communication device, requiring that requires user authentication;

in response to receiving the request, determining, by a computing device processor, a current physical location of the user and a time associated with the request;

determining, by a computing device processor, that the current location of the user and the time are within a predefined physical area during a designated time period associated with the predefined physical area, wherein the predefined physical area has altered authentication requirements, wherein the altered authentication requirements provide for one of (1) increased or (2) decreased authentication requirements in comparison to standard authentication requirements used to access the network service; and

identifying, by a computing device processor, the altered authentication requirements associated with the predefined physical area and the designated time period,

wherein the user is provided access to the network service in response to the user meeting the determined altered authentication requirements.

8. The method of claim 7 , wherein determining that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by the entity providing the network service.

9. The method of claim 7 , wherein determining that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by the user.

10. The method of claim 7 , further comprising determining, by a computing device processor, that the current location of the user is within the predefined physical area having an altered level of access within the network service, wherein the altered level of access provides for one of (1) increased or (2) decreased access to functionality within the network service once the user has met the altered authentication requirements.

11. The method of claim 7 , wherein determining that the current location of the user is proximate to the predefined physical area having altered authentication requirements further comprises determining a level of authentication required based on the current location of the user and the time being within the predefined physical area during the designated time period.

12. The method of claim 7 , wherein determining that the current location of the user is proximate to or within the predefined physical area further comprises determining, by the computing device processor, that the current location of the user and the time are within a predefined physical area during a designated time period associated with the predefined physical area, wherein the predefined physical area has altered authentication requirements, wherein the predefined physical area is associated with a physical area in which unsecure wireless communication is prevalent and the altered authentication requirements are increased authentication requirements.

13. A computer program product comprising:

a non-transitory computer-readable medium comprising:

a first set of codes for causing a computer to receive, from a mobile communication device, a request for a user to access a network service, accessible via an executable application stored on the mobile communication device, that requires user authentication;

a second set of codes for causing a computer to, in response to receiving the request, determine a current physical location of the user and a time associated with the request; and

a third set of codes for causing a computer to determine that the current location of the user and the time are within a predefined physical area during a designated time period associated with the predefined physical area, wherein the predefined physical area has altered authentication requirements, wherein the altered authentication requirements provide for one of (1) increased or (2) decreased authentication requirements in comparison to standard authentication requirements used to access the network service;

a fourth set of codes for causing a computer to identify the altered authentication requirements associated with the predefined physical area and the designated time period,

wherein the user is provided access to the network service in response to the user meeting the determined altered authentication requirements.

14. The computer program product of claim 13 , wherein the third set of codes is further configured to cause the computer to determine that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by the entity providing the network service.

15. The computer program product of claim 13 , wherein the third set of codes is further configured to cause the computer to determine that the current location of the user is within a predefined physical area having altered authentication requirements, wherein the predefined physical area is defined by the user.

16. The computer program product of claim 13 , further comprising a fifth set of codes for causing the computer to determine that the current location of the user is within the predefined physical area having an altered level of access within the network service, wherein the altered level of access provides for one of (1) increased or (2) decreased access to functionality within the network service once the user has met the altered authentication requirements.

17. The computer program product of claim 13 , wherein the third set of codes is further configured to cause the computer to determine a level of authentication required based on the current location of the user and the time being within the predefined physical area during the designated time period.

18. The computer program product of claim 13 , wherein the third set of codes is further configured to cause the computer to determine that the current location of the user and the time are within a predefined physical area during a designated time period, wherein the predefined physical area has altered authentication requirements, wherein the predefined physical area is associated with a physical area in which unsecure wireless communication is prevalent and the altered authentication requirements are increased authentication requirements.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 7, 2014
From: GRIGG, DAVID M.; BERTANZETTI, PETER JOHN; BURRELL, CHARLES JASON; HANSON, CARRIE ANNE; JOHANSEN, JOSEPH NEIL; TOTH, MICHAEL E.
To: BANK OF AMERICA CORPORATION
Reel/Frame 032176/0588 →
Continuity (1)
Related Publication 20150227728A1 · Aug 13, 2015