Multi-factor authentication for audio meeting participants
Multi-factor authentication techniques are used to verify an identity of an audio-only caller requesting to join a video-enabled virtual meeting. A request for an audio-only caller to join a video-enabled virtual meeting is received from a phone device of the audio-only caller, in which the audio-only caller is using the phone device to call into the video-enabled virtual meeting. An authentication request is transmitted to the phone device to verify an identity of the audio-only caller. A response to the authentication request is received from the phone device and includes an authentication code generated based on the request for the audio-only caller to join the video-enabled virtual meeting. The identity of the audio-only caller is then verified using the authentication code and information associated with the phone device, and the request for the audio-only caller to join the video-enabled virtual meeting is allowed or denied based on the verification.
1. A method, comprising:
receiving, from a phone device of an audio-only caller, a request for the audio-only caller to join a video-enabled virtual meeting;
based on the request for the audio-only caller to join the video-enabled virtual meeting:
causing the phone device to obtain an authentication code generated based on the request for the audio-only caller to join the video-enabled virtual meeting; and
transmitting an authentication request to the phone device to verify an identity of the audio-only caller;
receiving a response to the authentication request from the phone device wherein the response to the authentication request includes the authentication code; and
responsive to verifying the identity of the audio-only caller using the response to the authentication request, allowing the audio-only caller to join the video-enabled virtual meeting.
2. The method of claim 1 , wherein the authentication code is a time-limited single-use code, and wherein verifying the identity of the audio-only caller using the response to the authentication request comprises:
determining whether a time-limit associated with the authentication code has elapsed.
3. The method of claim 2 , comprising:
responsive to determining that the time-limit has elapsed, denying the request for the audio-only caller to join the video-enabled virtual meeting.
4. The method of claim 1 , wherein causing the phone device to obtain the authentication code comprises:
generating the authentication code; and
transmitting the authentication code to the phone device.
5. The method of claim 4 , wherein the authentication code is transmitted to the phone device using a messaging service.
6. The method of claim 1 , wherein causing the phone device to obtain the authentication code comprises:
transmitting instructions for generating the authentication code to the phone device.
7. The method of claim 1 , comprising:
responsive to the request for the audio-only caller to join the video-enabled virtual meeting, obtaining information associated with the phone device, wherein the identity of the audio-only caller is verified using the response to the authentication request and using the information associated with the phone device.
8. The method of claim 7 , wherein the information associated with the phone device includes one or more of caller ID information, contact record information, proximity information, and device owner information.
9. The method of claim 7 , wherein transmitting the authentication request to verify the identity of the audio-only caller comprises:
transmitting the authentication request to the phone device responsive to detecting, using the information associated with the phone device, that the audio-only caller is using the phone device to call into the video-enabled virtual meeting.
10. The method of claim 1 , wherein the request for the audio-only caller to join the video-enabled virtual meeting includes a meeting identifier for the video-enabled virtual meeting, and wherein transmitting the authentication request to verify the identity of the audio-only caller comprises:
transmitting the authentication request to the phone device responsive to verifying the meeting identifier.
11. A non-transitory computer readable medium storing instructions operable to cause one or more processors to perform operations comprising:
receiving, from a phone device of an audio-only caller, a request for the audio-only caller to join a video-enabled virtual meeting;
based on the request for the audio-only caller to join the video-enabled virtual meeting:
causing the phone device to obtain an authentication code generated based on the request for the audio-only caller to join the video-enabled virtual meeting; and
transmitting an authentication request to the phone device to verify an identity of the audio-only caller;
receiving a response to the authentication request from the phone device, wherein the response to the authentication request includes the authentication code; and
responsive to verifying the identity of the audio-only caller using the response to the authentication request, allowing the audio-only caller to join the video-enabled virtual meeting.
12. The non-transitory computer readable medium of claim 11 , the operations comprising:
detecting that the audio-only caller is using the phone device to call into the video-enabled virtual meeting using information associated with the phone device.
13. The non-transitory computer readable medium of claim 12 , wherein the information associated with the phone device includes one or more of caller ID information, contact record information, proximity information, and device owner information.
14. The non-transitory computer readable medium of claim 12 , wherein transmitting the authentication request to verify the identity of the audio-only caller comprises:
transmitting the authentication request to the phone device responsive to verifying a meeting identifier for the video-enabled virtual meeting received from the phone device.
15. The non-transitory computer readable medium of claim 11 , wherein the authentication code is a time-limited single-use code, and wherein verifying the identity of the audio-only caller using the authentication code comprises:
determining whether a time-limit associated with the authentication code has elapsed.
16. The non-transitory computer readable medium of claim 11 , wherein causing the phone device to obtain the authentication code comprises one of:
transmitting the authentication code to the phone device; or
transmitting instructions for generating the authentication code to the phone device.
17. An apparatus, comprising:
a memory; and
a processor configured to execute instructions stored in the memory to:
receive, from a phone device of an audio-only caller, a request for the audio-only caller to join a video-enabled virtual meeting;
based on the request for the audio-only caller to join the video-enabled virtual meeting:
cause the phone device to obtain an authentication code generated based on a—the request for an audio-only caller to join a video-enabled virtual meeting; and
transmit an authentication request to the phone device to verify an identity of the audio-only caller;
receive a response to the authentication request from the phone device, wherein the response to the authentication request includes the authentication code; and
responsive to verifying an identity of the audio-only caller using the response to the authentication request, allowing the audio-only caller to join the video-enabled virtual meeting.
18. The apparatus of claim 17 , wherein, to transmit the authentication request to the phone device, the processor is configured to execute the instructions to:
detect, based on information associated with the phone device, that the audio-only caller is using the phone device to call into the video-enabled virtual meeting.
19. The apparatus of claim 18 , wherein the information associated with the phone device is obtained responsive to the request for the audio-only caller to join the video-enabled virtual meeting and includes one or more of caller ID information, contact record information, proximity information, and device owner information.
20. The apparatus of claim 17 , wherein, to cause the phone device to obtain the authentication code, the processor is configured to execute the instructions to:
transmit the authentication code to the phone device; or
transmit instructions for generating the authentication code to the phone device.