IP Library › Granted Patent US 12,081,544
Granted Patent B2
US 12,081,544 · App. 17/170,024 · Granted Sep 3, 2024

Systems and methods for preventing unauthorized network access

Inventors: Galen Rafferty (Mahomet, IL); Austin Walters (Savoy, IL); Jeremy Edward Goodsitt (Champaign, IL); Anh Truong (Champaign, IL); Ernest Kwak (Urbana, IL); Vincent Pham (Champaign, IL)
Assignee: CAPITAL ONE SERVICES, LLC
H04L63/0876H04L63/102H04L63/107
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,081,544
App. No.
17/170,024
Filed
Feb 8, 2021
Granted
Sep 3, 2024
Kind
B2
Art Unit
2439
USPC
726/3
Abstract

A system configured to execute instructions to perform steps of a method for preventing unauthorized network access is disclosed. The system may receive an authorization request from a first user device and determine a device fingerprint. The system may store the device fingerprint as an authorization fingerprint. The system may receive a login request from a second user device. When the authorization fingerprint matches the device fingerprint, the system may authorize the login request from the second user device. In some embodiments, the system may determine a device state and temporal identifier and create a first device hash to be stored as an authorization hash. The system may receive a login request and cause the first user device to create one or more second device hashes. If at least one second device hash is a match, the system may authorize the login request from the second user device.

Claims (60)

1. A system for preventing unauthorized access, comprising:

one or more authorization processors; and

a memory in communication with the one or more authorization processors and storing instructions that, when executed by the one or more authorization processors, are configured to cause the system to:

receive an authorization request from a first user device to register the first user device to access an account;

scan the first user device to determine a first device fingerprint;

store the first device fingerprint to the memory as an authorization fingerprint;

receive a login request from a second user device that has not previously been used to access the account;

responsive to receiving the login request from the second user device, scan the first user device to determine a second device fingerprint;

determine whether (i) the first user device is within a predetermined proximity to the second user device and (ii) the authorization fingerprint matches the second device fingerprint beyond a predetermined threshold; and

responsive to (i) the first user device being within the predetermined proximity to the second user device and (ii) the authorization fingerprint matching the second device fingerprint beyond the predetermined threshold, authorize the login request from the second user device that has not previously been used to access the account.

2. The system of claim 1 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises:

receiving a GPS signal from the first user device;

determining an IP address associated with the second user device; and

determining whether the GPS signal of the first user device is within the predetermined proximity to a source location of the IP address associated with the second user device.

3. The system of claim 1 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises determining whether the first user device is connected to a same local network as the second user device.

4. The system of claim 1 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises determining whether the first user device is within a connectable range to the second user device via a short-range wireless communication protocol.

5. The system of claim 1 , wherein determining the first device fingerprint and the authorization fingerprint further comprises:

scanning the first user device to determine a device state and an associated temporal identifier;

creating a first device hash based on the determined device state;

storing the first device hash to the memory as the authorization fingerprint; and

causing the first user device to create a second device hash based on the device state associated with the temporal identifier.

6. The system of claim 1 , wherein the first device fingerprint is determined based on one or more of an operating system (OS) version, a screen size of the first user device, a mobile application version, one or more installed applications on the first user device, a media access control (MAC) address associated with the first user device, a processor type of the first user device, application history associated with the first user device, camera statistics associated with the first user device, and device management profiles associated with the first user device.

7. The system of claim 1 , wherein the memory comprises further instructions, that when executed by the one or more authorization processors, are configured to cause the system to:

responsive to (i) the first user device not being within a predetermined proximity to the second user device or (ii) the authorization fingerprint not matching the second device fingerprint beyond a predetermined threshold, execute one or more security actions.

8. The system of claim 7 , wherein the one or more security actions further comprises requesting a second factor authentication before authorizing the login request from the second user device.

9. The system of claim 7 , wherein the one or more security actions further comprises denying the login request from the second user device.

10. A method for preventing unauthorized access, comprising:

receiving an authorization request from a first user device to register the first user device to access an account;

scanning the first user device to determine a device state and an associated temporal identifier;

creating a first device hash based on the determined device state;

storing the first device hash to a memory as an authorization hash, the authorization hash including the temporal identifier;

receiving a login request from a second user device that has not previously been used to access the account;

responsive to the login request from the second user device, causing the first user device to create a second device hash based on the device state associated with the temporal identifier;

receiving the second device hash;

determining that the received second device hash matches the authorization hash; and

responsive to the authorization hash matching the received second device hash, authorizing the login request from the second user device that has not previously been used to access the account.

11. The method of claim 10 , wherein authorizing the login request is further based on determining whether the first user device is within a predetermined proximity to the second user device.

12. The method of claim 11 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises:

receiving a GPS signal from the first user device;

determining an IP address associated with the second user device; and

determining whether the GPS signal of the first user device is within the predetermined proximity to a source location of the IP address associated with the second user device.

13. The method of claim 11 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises determining whether the first user device is connected to a same local network as the second user device.

14. The method of claim 11 , wherein determining whether the first user device is within the predetermined proximity to the second user device further comprises determining whether the first user device is within a connectable range to the second user device via a short-range wireless communication protocol.

15. The method of claim 10 , wherein the authorization hash and the second device hash are determined based on one or more of an operating system (OS) version, a screen size of the first user device, a mobile application version, one or more installed applications on the first user device, a media access control (MAC) address associated with the first user device, a processor type of the first user device, application history associated with the first user device, camera statistics associated with the first user device, and device management profiles associated with the first user device.

16. The method of claim 11 , further comprising:

responsive to (i) the first user device not being within the predetermined proximity to the second user device or (ii) the authorization hash not matching the second device hash, execute one or more security actions.

17. The method of claim 16 , wherein the one or more security actions further comprise (i) requesting a second factor authentication before authorizing the login request from the second user device and (ii) denying the login request from the second user device.

18. A method for preventing an unauthorized login, comprising:

receiving an authorization request from a first user device to register the first user device to access an account;

scanning the first user device to determine a first device state and a temporal identifier associated with the first device state;

creating a first device hash based on the first device state;

storing the first device hash to a memory as an authorization hash;

receiving a login request from a second user device that has not previously been used to access the account;

causing the first user device to create one or more second device hashes based on one or more previous device states;

responsive to receiving the login request from the second user device, receiving the one or more second device hashes;

determining that at least one of the one or more second devices hashes matches the authorization hash; and

authorizing the login request from the second user device that has not previously been used to access the account.

19. The method of claim 18 , wherein the first device hash and the one or more second device hashes are determined based on one or more of an operating system (OS) version, a screen size of the first user device, a mobile application version, one or more installed applications on the first user device, a media access control (MAC) address associated with the first user device, a processor type of the first user device, application history associated with the first user device, camera statistics associated with the first user device, and device management profiles associated with the first user device.

20. The method of claim 18 , further comprising:

responsive to the authorization hash not matching at least one of the one or more second device hashes, execute a security action selected from requesting a second factor authentication before authorizing the login request from the second user device and denying the login request from the second user device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 8, 2021
From: RAFFERTY, GALEN; WALTERS, AUSTIN; GOODSITT, JEREMY EDWARD; TRUONG, ANH; KWAK, ERNEST; PHAM, VINCENT
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 055181/0613 →
Continuity (1)
Related Publication 20220255929A1 · Aug 11, 2022