IP Library Granted Patent US 11,632,366
Granted Patent B1
US 11,632,366 · App. 16/582,548 · Granted Apr 18, 2023

Multi-device authentication

Inventors: Yaniv Shemesh (Sammamish, WA); Mark Ernest Quevedo (Issaquah, WA)
Assignee: F5, Inc.
H04L63/0853H04L67/01H04W12/65H04W28/0226
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,632,366
App. No.
16/582,548
Filed
Sep 25, 2019
Granted
Apr 18, 2023
Kind
B1
Art Unit
2438
USPC
726/3
Abstract

Technology related to multi-device authentication is disclosed. In one example, a method can include receiving a request from a requesting client device to access a secured server. A command can be sent to an authenticating device to capture environmental information in proximity to the authenticating device. The captured environmental information can be used to verify the requesting client device and the authenticating device are near each other. The received request can be forwarded to the secured server in response to verifying the requesting client device and the authenticating device are near each other.

Claims (40)

1. A multi-device authentication method implemented by a network traffic management system comprising one or more network traffic apparatuses, client devices, or server devices, the method comprising:

receiving a request from a requesting client device to access a secured server;

sending a command to an authenticating device for environmental information in proximity to the authenticating device, wherein the environmental information comprises learned information about a network to which a user of the authenticating device repeatedly connects;

using the environmental information to verify the requesting client device and the authenticating device are near each other, wherein verifying the requesting client device and the authenticating device are near each other comprises verifying that the requesting client device and the authenticating device are both connected the network to which the user of the authenticating device repeatedly connects; and

forwarding the received request to the secured server in response to verifying the requesting client device and the authenticating device are near each other.

2. The method of claim 1 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that sonic information generated by the requesting client device was captured by the authenticating device.

3. The method of claim 1 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that the authenticating device was physically moved within an authentication time period.

4. The method of claim 1 , wherein verifying the requesting client device and the authenticating device are near each other further comprises:

capturing ambient signals in the environment of the requesting client device and the authenticating device and correlating the captured ambient signals.

5. The method of claim 1 , wherein verifying the requesting client device and the authenticating device are near each other further comprises using respective network addresses of the requesting client device and the authenticating device to determine the locations of the respective devices.

6. The method of claim 1 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that an electromagnetic signal generated by the requesting client device was captured by the authenticating device and using the electromagnetic signal to determine a round-trip time between the requesting client device and the authenticating device using a local area network broadcast or multicast communication.

7. A non-transitory computer-readable medium having stored thereon instructions for performing multi-device authentication, the instructions comprising executable code which when executed by one or more processors, causes the processors to:

receive a request from a requesting client device to access a secured server;

send a command to an authenticating device for environmental information in proximity to the authenticating device, wherein the environmental information comprises learned information about a network to which a user of the authenticating device repeatedly connects;

use the environmental information to verify the requesting client device and the authenticating device are near each other, wherein verifying the requesting client device and the authenticating device are near each other comprises verifying that the requesting client device and the authenticating device are both connected to the network to which the user of the authenticating device repeatedly connects; and

forward the received request to the secured server in response to verifying the requesting client device and the authenticating device are near each other.

8. The computer-readable medium of claim 7 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that sonic information generated by the requesting client device was captured by the authenticating device.

9. The computer-readable medium of claim 7 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that the authenticating device was physically moved within an authentication time period.

10. The computer-readable medium of claim 7 , wherein verifying the requesting client device and the authenticating device are near each other further comprises:

capturing ambient signals in the environment of the requesting client device and the authenticating device and correlating the captured ambient signals.

11. The computer-readable medium of claim 7 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that an electromagnetic signal generated by the requesting client device was captured by the authenticating device and using the electromagnetic signal to determine a round-trip time between the requesting client device and the authenticating device using a local area network broadcast or multicast communication.

12. A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and one or more processors configured to be capable of executing the programmed instructions stored in the memory to:

receive a request from a requesting client device to access a secured server;

send a command to an authenticating device for environmental information in proximity to the authenticating device, wherein the environmental information comprises learned information about a network to which a user of the authenticating device repeatedly connects;

use the environmental information to verify the requesting client device and the authenticating device are near each other, wherein verifying the requesting client device and the authenticating device are near each other comprises verifying that the requesting client device and the authenticating device are both connected to one network to which the user of the authenticating device repeatedly connects; and

forward the received request to the secured server in response to verifying the requesting client device and the authenticating device are near each other.

13. The apparatus of claim 12 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that sonic information generated by the requesting client device was captured by the authenticating device.

14. The apparatus of claim 12 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that the authenticating device was physically moved within an authentication time period.

15. The apparatus of claim 12 , wherein verifying the requesting client device and the authenticating device are near each other further comprises:

capturing ambient signals in the environment of the requesting client device and the authenticating device and correlating the captured ambient signals.

16. The apparatus of claim 12 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that an electromagnetic signal generated by the requesting client device was captured by the authenticating device and using the electromagnetic signal to determine a round-trip time between the requesting client device and the authenticating device using a local area network broadcast or multicast communication.

17. A network traffic management system, comprising one or more traffic

management apparatuses, client devices, or server devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:

receive a request from a requesting client device to access a secured server;

send a command to an authenticating device for environmental information in proximity to the authenticating device, wherein the environmental information comprises learned information about a network to which a user of the authenticating device repeatedly connects;

use the environmental information to verify the requesting client device and the authenticating device are near each other, wherein verifying the requesting client device and the authenticating device are near each other comprises verifying that the requesting client device and the authenticating device are both connected to the network to which the user of the authenticating device repeatedly connects; and

forward the received request to the secured server in response to verifying the requesting client device and the authenticating device are near each other.

18. The system of claim 17 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that sonic information generated by the requesting client device was captured by the authenticating device.

19. The system of claim 17 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that the authenticating device was physically moved within an authentication time period.

20. The system of claim 17 , wherein verifying the requesting client device and the authenticating device are near each other further comprises verifying that an electromagnetic signal generated by the requesting client device was captured by the authenticating device and using the electromagnetic signal to determine a round-trip time between the requesting client device and the authenticating device using a local area network broadcast or multicast communication.

Assignments (2)
CHANGE OF NAME Recorded Dec 27, 2022
From: F5 NETWORKS, INC.
To: F5, INC.
Reel/Frame 062220/0273 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 2, 2019
From: SHEMESH, YANIV; QUEVEDO, MARK ERNEST
To: F5 NETWORKS, INC.
Reel/Frame 050593/0749 →
Continuity (1)
Provisional Application 62738781 · Sep 28, 2018
Cited By (4)
US 12,248,546 US 12,302,424 US 12,526,315 US 12,547,694