System and method for verifying status of an authentication device
A system and method that includes receiving a first device profile and associating the first device profile with a first application instance that is assigned as an authentication device of a first account; receiving a second device profile for a second application instance, wherein the second application instance is making a request on behalf of the first account; comparing the second device profile to the first device profile; and completing the request of the second application instance according to results of comparing the second device profile and the first device profile.
1. A method comprising:
enrolling a first device instance as an authentication device of a first account in a multi-factor authentication system;
on a first electronic device running the first device instance, generating a reference digital fingerprint from characteristics of the first electronic device;
transmitting the reference digital fingerprint to the multi-factor authentication system;
at the multi-factor authentication system, associating the reference digital fingerprint with the first account;
initiating enrollment of a second device instance of the first account;
on a second electronic device running the second device instance, generating a second digital fingerprint from characteristics of the second electronic device;
transmitting the second digital fingerprint to the multi-factor authentication system;
comparing the second digital fingerprint to the reference digital fingerprint associated with the first account; wherein the comparison of the second digital fingerprint to the reference digital fingerprint is dependent on the characteristics of the first electronic device and the characteristics of the second electronic device; and
completing the enrollment of the second device instance according to a result of the comparison of the second digital fingerprint to the reference digital fingerprint.
2. The method of claim 1 , wherein the enrolling of the first device instance comprises establishing, on the first device instance, a first set of authentication credentials for a set of accounts; and wherein the completing the enrollment of the second device instance comprises, when the second digital fingerprint is confirmed to correspond to the reference digital fingerprint, establishing, on the second device instance, a second set of authentication credentials for the set of the accounts.
3. The method of claim 2 , wherein the second set of authentication credentials is a copy of the first set of authentication credentials stored at the multi-factor authentication system.
4. The method of claim 2 , further comprising updating the first set of authentication credentials used by the first device instance at least one time after the enrolling of the first device instance.
5. The method of claim 2 , wherein the completing the enrollment of the second device instance comprises invalidating the first set of authentication credentials.
6. The method of claim 2 , wherein the completing the enrollment of the second device instance according to the result of the comparison of the second digital fingerprint to the reference digital fingerprint comprises: when the second digital fingerprint is confirmed to not correspond to the reference digital fingerprint, rejecting the enrollment of the second device instance.
7. The method of claim 1 , wherein the first electronic device is the second electronic device.
8. The method of claim 1 , wherein the generating the reference digital fingerprint and the generating the second digital fingerprint comprise accessing intrinsic device information and compiling the intrinsic device information into a digital fingerprint; wherein the comparison of the second digital fingerprint to the reference digital fingerprint is dependent on the intrinsic device information; wherein the intrinsic device information comprises one of an international mobile subscriber identity (IMSI) and an international mobile station equipment identity (IMEI).
9. The method of claim 1 , wherein the generating the reference digital fingerprint and the generating the second digital fingerprint comprise accessing device usage information and compiling the device usage information into a digital fingerprint; wherein the comparison of the second digital fingerprint to the reference digital fingerprint is dependent on the device usage information.