Automated authorization response techniques
Techniques are disclosed relating to automating permission requests, e.g., in the context of multi-factor authorization. A mobile device may allow a user to automate responses to future permission requests for multi-factor authorization procedures. The mobile device may automatically respond to subsequent permission requests based on one or more automation criteria. Authorized actions may include login, transaction approval, physical access, vehicle ignition, account recovery, etc. The automation criteria may include location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, image characteristics, etc. Disclosed techniques may increase authorization security while reducing user interaction for multi-factor authorization, in some embodiments.
1. A non-transitory computer-readable medium having computer instructions stored thereon that are capable of being executed by a first computing device to cause operations comprising:
processing a request received from a server system as a factor in a multi-factor authorization procedure initiated by a second computing device;
determining that one or more automation criteria are met based on current values of one or more parameters determined by the first computing device; and
in response to the determining, automatically sending a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request.
2. The non-transitory computer-readable medium of claim 1 , wherein the multi-factor authorization procedure is an authentication procedure.
3. The non-transitory computer-readable medium of claim 1 , wherein the one or more automation criteria are based on current values of multiple parameters determined by the first computing device and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied.
4. The non-transitory computer-readable medium of claim 3 , wherein the determining is based on weighting factors assigned to respective ones of the parameters.
5. The non-transitory computer-readable medium of claim 3 , wherein the multiple parameters include two or more parameters from the following set of parameters: location, acceleration, velocity, wireless connectivity, proximity to another device, temperature, lighting, noise, time, biometrics, altitude, pressure, and image characteristics.
6. The non-transitory computer-readable medium of claim 1 , wherein the one or more parameters include: location, wireless connectivity, and velocity.
7. The non-transitory computer-readable medium of claim 1 , wherein the operations further comprise:
in response to receiving a subsequent request for a multi-factor authorization procedure initiated by the second computing device, determining to require user input prior to responding to the subsequent request based on determining that the one or more automation criteria are not met.
8. The non-transitory computer-readable medium of claim 1 , wherein the operations further comprise:
in response a change in at least one of the one or more automation criteria, ending a session associated with the multi-factor authorization procedure.
9. The non-transitory computer-readable medium of claim 1 , wherein the one or more parameters include one or more visual characteristics in one or more images captured by the first computing device.
10. The non-transitory computer-readable medium of claim 1 , wherein the operations further comprise:
prior to receiving the request, storing an indication based on user input, wherein the indication indicates that responses by the first computing device are to be automated based on the one or more automation criteria.
11. The non-transitory computer-readable medium of claim 10 , wherein the user input specifies the one or more automation criteria.
12. An apparatus, comprising:
one or more processors;
one or more memories having program instructions stored thereon that are capable of being executed by the one or more processors to cause the apparatus to:
process a request received from a server system as a factor in a multi-factor authorization procedure initiated by another computing device;
determine that one or more automation criteria are met based on current values of one or more parameters determined by the apparatus; and
in response to the determination, automatically send a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request.
13. The apparatus of claim 12 , wherein the apparatus is configured to generate hardware identifier information based on components included in the apparatus and transmit the hardware identifier information in conjunction with the response.
14. The apparatus of claim 12 , wherein the one or more automation criteria are based on current values of multiple parameters determined by the apparatus and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied.
15. The apparatus of claim 12 , wherein the instructions are further executable to cause the apparatus to:
in response to receiving a subsequent request for a multi-factor authorization procedure initiated by the other computing device, require user input prior to responding to the subsequent request based on determining that the one or more automation criteria are not met.
16. The apparatus of claim 12 , wherein the instructions are further executable to cause the apparatus to:
in response a change in at least one of the one or more automation criteria, end a session associated with the multi-factor authorization procedure.
17. A method, comprising:
processing, by a first computing device, a request received from a server system as a factor in a multi-factor authorization procedure initiated by a second computing device;
determining, by the first computing device, that one or more automation criteria are met based on current values of one or more parameters determined by the first computing device; and
in response to the determining, the first computing device automatically sending a response to the request that satisfies the factor in the multi-factor authorization procedure, without receiving user input indicating to respond to the request.
18. The method of claim 17 , wherein the multi-factor authorization procedure is an authentication procedure.
19. The method of claim 17 , wherein the one or more automation criteria are based on current values of multiple parameters determined by the first computing device and wherein the determining that the one or more automation criteria are met includes determining that a particular combination of criteria for values of the multiple parameters is satisfied.
20. The method of claim 19 , wherein the determining is based on weighting factors assigned to respective ones of the parameters.