IP Library Granted Patent US 11,349,833
Granted Patent B2
US 11,349,833 · App. 16/826,231 · Granted May 31, 2022

Multi-factor authentication utilizing device pairing

Inventors: Sarin Kumar Thayyilsubramanian (Bangalore, IN); Debasisha Padhi (Bangalore, IN); Anuradha Bhamidipaty (Yorktown Heights, NY); Firas Bouz (Lexington, KY)
Assignee: KYNDRYL, INC.
H04L63/0853G06Q20/4012H04L63/083H04L63/0815H04W4/80H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,349,833
App. No.
16/826,231
Granted
May 31, 2022
Kind
B2
Abstract

Aspects of the present invention disclose a method, computer program product, and system for multi-factor authentication. In response to a request for an action, the method includes one or more processors whether a first authentication credential passes validation. In response to determining that the first authentication credential does pass validation, the method further includes one or more processors determining a second authentication credential, wherein the second authentication credential includes an indication of a wireless connection between a first computing device and a second computing device. The method further includes one or more processors determining whether the second authentication credential passes validation. In response to determining that the second authentication credential passes validation, the method further includes one or more processors allowing execution of the requested response.

Claims (50)

1. A method comprising:

in response to a request for an action, determining, by one or more processors, whether a first authentication credential passes validation;

in response to determining that the first authentication credential does pass validation,

validating, by the one or more processors, a paired connection between a first computing device and a second computing device, wherein the paired connection generates a unique identifier that corresponds to a pairing registration between the first computing device and the second computing device;

in response to determining a validated paired connection between the first computing device and the second computing device, determining, by one or more processors, a second authentication credential, wherein the second authentication credential includes an indication of a wireless connection between the first computing device and the second computing device, and further comprising comparing a device identifier corresponding to the second computing device with the unique identifier corresponding to the pairing registration, wherein determining that the device identifier matches the unique identifier indicates validity of the second authentication credential;

determining, by one or more processors, whether the second authentication credential passes validation;

in response to determining that the second authentication credential passes validation, generating a dynamic identifier corresponding to the requested action to indicate that the requested action is authorized, and allowing execution of the requested action, by the one or more processors; and

generating, by one or more processors, an instance of the dynamic identifier that indicates success for authentication of both the first authentication credential and the second authentication credential for the requested action, wherein the instance of the dynamic identifier corresponds to one of a plurality of paired device registrations having a plurality of corresponding unique identifiers.

2. The method of claim 1 , wherein:

the first computing device is a chip card, and the second computing device is a mobile device.

3. The method of claim 1 , wherein the wireless connection between the first computing device and the second computing device is a wireless connection selected from the group consisting of: a near-field communication (NFC) connection and a wireless personal area network (W PAN) connection.

4. The method of claim 1 , wherein the requested action is selected from the group consisting of: access to a resource, a financial transaction, a point-of-sale transaction, a ticket authentication, and a banking transaction.

5. The method of claim 1 , wherein the first authentication credential is a personal identification number (PIN).

6. The method of claim 1 , further comprising:

charging of the first device by the second device while the first and second device are in an active paired connection.

7. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising:

in response to a request for an action, program instructions to determine whether a first authentication credential passes validation;

in response to determining that the first authentication credential does pass validation,

program instructions to validate a paired connection between a first computing device and a second computing device, wherein the paired connection generates a unique identifier that corresponds to a pairing registration between the first computing device and second computing device;

in response to determining a validated paired connection between the first computing device and second computing device, program instructions to determine a second authentication credential, wherein the second authentication credential includes an indication of a wireless connection between the first computing device and the second computing device, and further comprising program instructions to compare a device identifier corresponding to the second computing device with the unique identifier corresponding to the pairing registration, wherein determining that the device identifier matches the unique identifier indicates validity of the second authentication credential;

program instructions to determine whether the second authentication credential passes validation;

in response to determining that the second authentication credential passes validation,

program instructions to generate a dynamic identifier corresponding to the requested action to indicate that the requested action is authorized, and to allow execution of the requested action, and

program instructions to generate an instance of the dynamic identifier that indicates success for authentication of both the first authentication credential and the second authentication credential for the requested action, wherein the instance of the dynamic identifier corresponds to one of a plurality of paired device registrations having a plurality of corresponding unique identifiers; and

in response to determining that the second authentication credential does not pass validation, program instructions to initiate another request for the second authentication credential from the second computing device.

8. The computer program product of claim 7 , wherein: the first computing device is a chip card, and the second computing device is a mobile device.

9. The computer program product of claim 7 , wherein the wireless connection between the first computing device and the second computing device is a wireless connection selected from the group consisting of: a near-field communication (NFC) connection and a wireless personal area network (W PAN) connection.

10. The computer program product of claim 7 , wherein the requested action is selected from the group consisting of: access to a resource, a financial transaction, a point-of-sale transaction, a ticket authentication, and a banking transaction.

11. The computer program product of claim 7 , further comprising program instructions to:

charge the first computing device by the second computing device while the first computing device and the second computing device are in an active paired connection.

12. A computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:

in response to a request for an action, program instructions to determine whether a first authentication credential passes validation;

in response to determining that the first authentication credential does pass validation,

program instructions to validate a paired connection between a first computing device and a second computing device, wherein the paired connection generates a unique identifier that corresponds to a pairing registration between the first computing device and second computing device;

in response to determining a validated paired connection between the first computing device and second computing device, program instructions to determine a second authentication credential, wherein the second authentication credential includes an indication of a wireless connection between the first computing device and the second computing device, and further comprising program instructions to compare a device identifier corresponding to the second computing device with the unique identifier corresponding to the pairing registration, wherein determining that the device identifier matches the unique identifier indicates validity of the second authentication credential;

program instructions to determine whether the second authentication credential passes validation; and

in response to determining that the second authentication credential passes validation,

program instructions to generate a dynamic identifier corresponding to the requested action to indicate that the requested action is authorized, and to allow execution of the requested action, and

program instructions to generate an instance of the dynamic identifier that indicates success for authentication of both the first authentication credential and the second authentication credential for the requested action, wherein the instance of the dynamic identifier corresponds to one of a plurality of paired device registrations having a plurality of corresponding unique identifiers.

13. The computer system of claim 12 , wherein:

the first computing device is a chip card, and the second computing device is a mobile device.

14. The computer system of claim 12 , wherein the wireless connection between the first computing device and the second computing device is a wireless connection selected from the group consisting of: a near-field communication (NFC) connection and a wireless personal area network (W PAN) connection.

15. The computer system of claim 12 , wherein the requested action is selected from the group consisting of: access to a resource, a financial transaction, a point-of-sale transaction, a ticket authentication, and a banking transaction.

16. The computer system of claim 12 , wherein the first authentication credential is a personal identification number (PIN).

17. The computer system of claim 12 , further comprising program instructions to:

responsive to initiation of an active paired connection between the first computing device and the second computing device, power on an NFC tag of the first device by the second computing device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 058213/0912 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 21, 2020
From: THAYYILSUBRAMANIAN, SARIN KUMAR; PADHI, DEBASISHA; BHAMIDIPATY, ANURADHA; BOUZ, FIRAS
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 052185/0847 →
Continuity (1)
Related Publication 20210297412A1 · Sep 23, 2021