Enhanced secure authentication
A method for authenticating a user of a mobile electronic computing device to perform operations on a first electronic computing device includes receiving a request to access the first electronic computing device. In response to the request to access, a first identifier is sent to the mobile electronic computing device. A second identifier is received from a second electronic computing device. The second electronic computing device is different from the mobile electronic computing device. A determination is made as to whether the first identifier matches the second identifier. When the first identifier matches the second identifier, a trust score is calculated for the user. A determination is made as to whether the trust score is equal to or greater than a threshold. When the trust score is equal to or greater than the threshold, the user is authenticated to login to the first electronic computing device.
1. A first server computing device comprising:
a processing unit; and
system memory, the system memory including instructions which, when executed by the processing unit, cause the first server computing device to:
receive a request from a mobile electronic computing device to access the first server computing device;
establish a communication session with the mobile electronic computing device;
send a user identifier for a user and a communication identifier for the communication session to the mobile electronic computing device;
after establishing the communication session with the mobile electronic computing device, receive a message from a second server computing device, the second server computer device being associated with an electronic sensor device;
determining that the message from the second server computing device includes the user identifier for the user, the communication identifier for the communication session with the mobile electronic computing device and a device identifier for the electronic sensor device;
when the message includes the device identifier for the electronic sensor device, determining that the device identifier matches an identifier previously registered at the electronic computing device for the electronic sensor device;
when the device identifier matches the device identifier previously registered for the electronic sensor device and when the message includes the user identifier for the user and the communication identifier for the communication session, calculate an authentication trust score, the authentication trust score being based on an identity of the electronic sensor device;
receive a location of the mobile electronic computing device;
adjust the authentication trust score based on where the user is currently located, comprising:
determine that the current location of the user is in a safe zone user;
when a determination is made that the user is in the safe zone, increase the authentication trust score; and
when a determination is made that the user is not in the safe zone,
decrease the authentication trust score; and
when the authentication trust score is greater than or equal to a predetermined threshold, authenticate the user at the electronic computing device.