Systems and methods for location-based authentication
Systems and methods are disclosed for performing location-based authentication using location-aware devices. One method includes: receiving an access request comprising authentication credentials and a first location from a first location-aware device; receiving a second location from a second location-aware device associated with the authentication credentials; and upon determining that the first location and second location are within a pre-determined distance, authenticating the authentication credentials.
1. A method, comprising:
receiving, by an authentication server, an access request comprising authentication credentials from a first location-aware user device, wherein the first location-aware user device is associated with a user account of a first user, and wherein the access request includes a first location from the first location-aware user device;
receiving, by the authentication server, a second location from a second location-aware user device of the first user, wherein the second location-aware user device is associated with the user account and the authentication credentials;
determining, by the authentication server, whether the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credentials;
whereupon determining that the first location and second location are not within a pre-determined threshold distance, receiving, by the authentication server, a third location from the first location-aware user device;
determining, by the authentication server, the speed and direction of movement of the first location-aware user device based on the first location and the third location;
determining, by the authentication server, a fourth location of the first location-aware user device based on the speed and direction of movement of the first location-aware user device; and
determining, by the authentication server, whether the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credentials.
2. The method of claim 1 , further comprising:
in response to determining that a number of successful authentications within a pre-determined threshold distance of the first location is above a pre-determined threshold, designating the first location as a trusted location.
3. The method of claim 1 , wherein authenticating the authentication credentials further comprises:
upon determining that the first location is not a trusted location, sending an acknowledgement request to the second location-aware user device.
4. The method of claim 3 , further comprising:
upon receiving a confirmation of the acknowledgement request from the second location-aware user device, determining whether the first location and second location are within a pre-determined threshold distance from each other; and
upon determining that the first location and second location are within a pre-determined threshold distance, authenticating the authentication credentials.
5. The method of claim 3 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware user device, denying the access request.
6. The method of claim 3 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware user device, disallowing further access requests from the first location-aware user device.
7. A system for performing location-based authentication, the system including:
a storage device storing instructions for managing location-based authentication; and
a processor configured to execute the instructions to perform a method including:
receiving, by an authentication server, an access request comprising authentication credentials from a first location-aware user device, wherein the first location-aware user device is associated with a user account of the first user, and wherein the access request includes a first location from the first location-aware user device;
receiving, by the authentication server, a second location from a second location-aware user device of the first user, wherein the second location-aware user device is associated with the user account and the authentication credentials;
determining, by the authentication server, whether the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credentials;
whereupon determining that the first location and second location are not within a pre-determined threshold distance, receiving, by the authentication server, a third location from the first location-aware user device;
determining, by the authentication server, the speed and direction of movement of the first location-aware user device based on the first location and the third location;
determining, by the authentication server, a fourth location of the first location-aware user device based on the speed and direction of movement of the first location-aware user device; and
determining, by the authentication server, whether the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credentials.
8. The system of claim 7 , further comprising:
in response to determining that a number of successful authentications within a pre-determined threshold distance of the first location is above a pre-determined threshold, designating the first location as a trusted location.
9. The system of claim 7 , wherein authenticating the authentication credential comprises, upon determining that the first location is not a trusted location, sending an acknowledgement request to the second location-aware user device.
10. The system of claim 9 , further comprising:
upon receiving a confirmation of the acknowledgement request from the second location-aware user device, determining whether the first location and second location are within a pre-determined threshold distance from each other; and
upon determining that the first location and second location are within a pre-determined threshold distance, authenticating the authentication credentials.
11. The system of claim 9 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware user device, denying the access request.
12. The system of claim 9 , further comprising:
in response to receiving a denial of the acknowledgment request from the second location-aware user device, disallowing further access requests from the first location-aware user device.
13. A non-transitory computer-readable medium that, when executed by a computer system, cause the computer system to perform a method for performing location-based authentication, the method including:
receiving, by an authentication server, an access request comprising authentication credentials from a first location-aware user device, wherein the first location-aware user device is associated with a user account of the first user, and wherein the access request includes a first location from the first location-aware user device;
receiving, by the authentication server, a second location from a second location-aware user device of the first user, wherein the second location-aware user device is associated with the user account and the authentication credentials;
determining, by the authentication server, whether the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the first location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credentials;
whereupon determining that the first location and second location are not within a pre-determined threshold distance, receiving, by the authentication server, a third location from the first location-aware user device;
determining, by the authentication server, the speed and direction of movement of the first location-aware user device based on the first location of the third location;
determining, by the authentication server, a fourth location of the first location-aware user device based on the speed and direction of movement of the first location-aware user device; and
determining, by the authentication server, whether the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance,
whereupon determining, by the authentication server, that the third location of the first location-aware user device and the second location of the second location-aware user device are within a pre-determined threshold distance of each other, authenticating the authentication credential.
14. The non-transitory computer-readable medium of claim 13 , further comprising:
in response to determining that a number of successful authentications within a pre-determined threshold distance of the first location is above a pre-determined threshold, designating the first location as a trusted location.
15. The non-transitory computer-readable medium of claim 13 , wherein authenticating the authentication credentials comprises, upon determining that the first location is not a trusted location, sending an acknowledgement request to the second location-aware user device.
16. The non-transitory computer-readable medium of claim 15 , further comprising:
upon receiving a confirmation of the acknowledgement request from the second location-aware user device, determining whether the first location and second location are within a pre-determined threshold distance from each other; and
upon determining that the first location and second location are within a pre-determined threshold distance, authenticating the authentication credentials.