IP Library Granted Patent US 11,361,101
Granted Patent B2
US 11,361,101 · App. 16/019,847 · Granted Jun 14, 2022

Multi-party authentication and authorization

Inventors: Sachin Vas (Bangalore, IN); Ramani Panchapakesan (Bangalore, IN); Vijaykumar Bhat (Bangalore, IN); Sushilvas Vasavan (Bangalore, IN)
Assignee: AirWatch LLC
G06F21/6245G06F21/40H04L9/321H04L63/107H04L63/083H04L63/0823H04W12/63
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,361,101
App. No.
16/019,847
Granted
Jun 14, 2022
Kind
B2
Abstract

Disclosed are various examples for multi-party authentication and authentication. In one example, a user can gain access to secured data stored by a managed device based on the presence of the minimum quantity of other users within a threshold proximity of the user who desires access.

Claims (55)

1. A method, comprising:

receiving an access request from a first user to access secured data stored in an encrypted state on a first computing device;

receiving a security credential from the first user;

determining that the security credential received from the first user is incorrect;

in response to determining that the security credential received from the first user is incorrect, determining that access by the first user to the secured data requires that a minimum quantity of a set of second users be within a threshold proximity of the first computing device, wherein the minimum quantity comprises at least two second users;

determining a location of the first computing device;

determining respective locations of a plurality of second computing devices individually associated with the set of second users;

determining that the minimum quantity of the set of second users are within the threshold proximity based at least in part on the location and the respective locations of the plurality of second computing devices;

decrypting the secured data in response to determining that the minimum quantity of the set of second users are within the threshold proximity; and

facilitating access by the first user to the decrypted secured data.

2. The method of claim 1 , wherein at least one of the plurality of second computing devices also stores the secured data.

3. The method of claim 1 , further comprising communicating with a management server to determine the respective locations of the plurality of second computing devices.

4. The method of claim 1 , further comprising communicating directly with the plurality of second computing devices by way of a local wireless connection to determine the respective locations of the plurality of second computing devices.

5. The method of claim 1 , wherein the plurality of second computing devices are determined to be within the threshold proximity when direct communication between the first computing device and the plurality of second computing devices by way of a local wireless connection is successful.

6. The method of claim 1 , wherein the location of the first computing device is determined using a global positioning system (GPS) device.

7. The method of claim 1 , further comprising determining that the secured data is of a sufficient importance in spite of a required security credential being provided by the first user so that access by the first user to the secured data requires that the minimum quantity of the set of second users be within the threshold proximity of the first computing device.

8. A system, comprising:

a first computing device comprising a processor and a memory; and

executable instructions stored by the memory, wherein when executed by the processor causes the first computing device to at least:

receive an access request from a first user to access secured data stored in an encrypted state by the memory;

receive a security credential from the first user;

determine that the security credential received from the first user is incorrect;

in response to determining that the security credential received from the first user is incorrect, determine that access by the first user to the secured data requires that a minimum quantity of a set of second users be within a threshold proximity of the first computing device, wherein the minimum quantity comprises at least two second users;

determine a location of the first computing device;

determine respective locations of a plurality of second computing devices individually associated with the set of second users;

determine that the minimum quantity of the set of second users are within the threshold proximity based at least in part on the location and the respective locations of the plurality of second computing devices;

decrypt the secured data in response to determining that the minimum quantity of the set of second users are within the threshold proximity; and

facilitate access by the first user to the decrypted secured data.

9. The system of claim 8 , wherein a memory of at least one of the plurality of second computing devices also stores the secured data.

10. The system of claim 8 , wherein the executable instructions, when executed by the processor, further causes the first computing device to at least:

communicate with a management server to determine the respective locations of the plurality of second computing devices.

11. The system of claim 8 , wherein the executable instructions, when executed by the processor, further causes the first computing device to at least:

communicate directly with the plurality of second computing devices by way of a local wireless connection to determine the respective locations of the plurality of second computing devices.

12. The system of claim 8 , wherein the plurality of second computing devices are determined to be within the threshold proximity when direct communication between the first computing device and the plurality of second computing devices by way of a local wireless connection is successful.

13. A non-transitory computer-readable medium storing executable instructions that, when executed by a processor of a first computing device, cause the first computing device to at least:

receive an access request from a first user to access secured data stored in an encrypted state by the first computing device;

receive a security credential from the first user;

determine that the security credential received from the first user is incorrect;

in response to determining that the security credential received from the first user is incorrect, determine that access by the first user to the secured data requires that a minimum quantity of a set of second users be within a threshold proximity of the first computing device, wherein the minimum quantity comprises at least two second users;

determine a location of the first computing device;

determine respective locations of a plurality of second computing devices individually associated with the set of second users;

determine that the minimum quantity of the set of second users are within the threshold proximity based at least in part on the location and the respective locations of the plurality of second computing devices;

decrypt the secured data in response to determining that the minimum quantity of the set of second users are within the threshold proximity; and

facilitate access by the first user to the decrypted secured data.

14. The non-transitory computer-readable medium of claim 13 , wherein at least one of the plurality of second computing devices also stores the secured data.

15. The non-transitory computer-readable medium of claim 13 , wherein the executable instructions, when executed by the processor, further causes the first computing device to at least:

communicate with a management server to determine the respective locations of the plurality of second computing devices.

16. The non-transitory computer-readable medium of claim 13 , wherein the executable instructions, when executed by the processor, further causes the first computing device to at least:

communicate directly with the at least one second computing device by way of a local wireless connection to determine the respective locations of the plurality of second computing devices.

17. The non-transitory computer-readable medium of claim 13 , wherein the plurality of second computing devices are determined to be within the threshold proximity when direct communication between the first computing device and the plurality of second computing devices by way of a local wireless connection is successful.

18. The method of claim 1 , further comprising erasing the decrypted secured data from the first computing device in response to receiving a command from a management service.

19. The method of claim 1 , wherein determining that the minimum quantity of the set of second users are within the threshold proximity based at least in part on the location and the respective locations of the plurality of second computing devices further comprises:

determining respective distances between the location and the respective locations of the plurality of second computing devices; and

comparing the respective distances to the threshold proximity to determine whether the plurality of second devices are within the threshold proximity.

20. The method of claim 1 , wherein determining the respective locations of the plurality of second computing devices further comprises receiving the respective locations reported by the plurality of second computing devices via a peer-to-peer arrangement.

Assignments (2)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: AIRWATCH LLC
To: OMNISSA, LLC
Reel/Frame 068327/0670 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →