IP Library › Granted Patent US 11,563,739
Granted Patent B2
US 11,563,739 · App. 17/247,627 · Granted Jan 24, 2023

Authenticating a user device via a monitoring device

Inventors: Joshua Edwards (Philadelphia, PA); Adam Vukich (Alexandria, VA); Abdelkadar M'Hamed Benkreira (Washington, DC)
Assignee: Capital One Services, LLC
H04L63/0853H04L61/5007H04L63/083H04L63/0861H04L63/0876H04L63/101H04W12/63G06F40/00H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,563,739
App. No.
17/247,627
Granted
Jan 24, 2023
Kind
B2
Abstract

A server device receives, from a user device, a session initiation request and information identifying a location of the user device, and receives, from a monitoring device that is separate from the user device, an authentication request and information identifying a location of the monitoring device. The server device processes the session initiation request and the authentication request to authenticate a user of the user device, and determines, based on the location of the user device and the location of the monitoring device, that the user device and the monitoring device are collocated. The server device creates, after authenticating the user of the user device and determining that user device and the monitoring device are collocated, a session token, and sends the session token to the user device to enable the user device to access at least one resource of the server device.

Claims (83)

1. A method, comprising:

receiving, by a server device and from a user device, a session initiation request and information that identifies a location associated with the user device;

receiving, by the server device and from a monitoring device, an authentication request and information that identifies a location associated with the monitoring device,

the authentication request being generated based on an audible command or gesture command received from a user associated with the user device;

processing, by the server device, the session initiation request to determine the user associated with the user device;

processing, by the server device, the authentication request to determine identification information included in the authentication request;

authenticating, by the server device, the user associated with the user device based on the identification information;

determining, by the server device, that the user device and the monitoring device are connected to a same network at a same time based on the location associated with the user device and the location associated with the monitoring device; and

causing the user device to access at least one resource associated with the server device based on the user device and the monitoring device being connected to the same network.

2. The method of claim 1 , further comprising:

determining, based on determining the user associated with the user device, profile information that includes one or more of:

an audio profile of the user,

a video profile of the user, or

biometric profile of the user.

3. The method of claim 2 , wherein authenticating the user comprises:

authenticating the user based on comparing the profile information to the identification information to determine that the profile information matches one or more characteristics of the identification information within a threshold.

4. The method of claim 1 , further comprising:

creating, after determining that the user device and the monitoring device are connected to the same network, a session token; and

sending the session token to the user device to permit the user device to access the at least one resource associated with the server device.

5. The method of claim 1 , wherein processing the session initiation request comprises:

determining, based on the session initiation request, the user of the user device,

receiving biometric data associated with the user, and

processing the biometric data using a biometric identification technique to identify at least one biometric characteristic; and

wherein authenticating the user comprises:

authenticating, based on the at least one biometric characteristic, the user of the user device.

6. The method of claim 1 , wherein the location associated with the user device is a network address of the user device and wherein the location associated with the monitoring device is a network address of the monitoring device.

7. The method of claim 1 , further comprising

determining, after receiving the session initiation request, a period of time during which the authentication request is to be received; and

determining, after receiving the authentication request, that the server device received the authentication request within the period of time.

8. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions, when executed by one or more processors, cause the one or more processors of a server device to:

receive, from a user device, a session initiation request and information that identifies a location associated with the user device;

receive, from a monitoring device, an authentication request and information that identifies a location associated with the monitoring device,

the authentication request being generated based on an audible command or gesture command received from a user associated with the user device;

process the session initiation request to determine the user associated with the user device;

process the authentication request to determine identification information included in the authentication request;

authenticate the user associated with the user device based on the identification information;

determine that the user device and the monitoring device are connected to a same local network based on the location associated with the user device and the location associated with the monitoring device; and

cause the user device to access at least one resource associated with the server device based on the user device and the monitoring device being connected to the same local network.

9. The non-transitory computer-readable medium of claim 8 , wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

determine, based on determining the user associated with the user device, profile information that includes one or more of:

an audio profile of the user,

a video profile of the user, or

biometric profile of the user; and

wherein the one or more instructions, that cause the one or more processors to authenticate the user, cause the one or more processors to:

authenticate the user based on comparing the profile information to the identification information to determine that the profile information matches one or more characteristics of the identification information within a threshold.

10. The non-transitory computer-readable medium of claim 8 , wherein the one or more instructions, that cause the one or more processors to authenticate the user, cause the one or more processors to:

authenticate the user based on determining that a visual gesture profile of the user matches one or more visual expressions of video data within a particular threshold.

11. The non-transitory computer-readable medium of claim 8 , wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

create, after determining that the user device and the monitoring device are connected to the same local network, a session token; and

send the session token to the user device to permit the user device to access the at least one resource associated with the server device.

12. The non-transitory computer-readable medium of claim 8 , wherein the one or more instructions, that cause the one or more processors to process the session initiation request, cause the one or more processors to:

determine, based on the session initiation request, the user of the user device,

receive biometric data associated with the user, and

process the biometric data using a biometric identification technique to identify at least one biometric characteristic; and

wherein the one or more instructions, that cause the one or more processors to authenticate the user, cause the one or more processors to:

authenticate, based on the at least one biometric characteristic, the user of the user device.

13. The non-transitory computer-readable medium of claim 8 , wherein the location associated with the user device is a network address of the user device and wherein the location associated with the monitoring device is a network address of the monitoring device.

14. The non-transitory computer-readable medium of claim 8 , wherein the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

determine, after receiving the session initiation request, a period of time during which the authentication request is to be received; and

determine, after receiving the authentication request, that the server device received the authentication request within the period of time.

15. A server device, comprising:

one or more memories; and

one or more processors, communicatively coupled to the one or more memories, to:

receive, from a user device, a session initiation request and information that identifies a location associated with the user device;

receive, from a monitoring device, an authentication request and information that identifies a location associated with the monitoring device,

the authentication request being generated based on an audible command or gesture command received from a user associated with the user device;

process the session initiation request to determine the user associated with the user device;

process the authentication request to determine identification information included in the authentication request;

authenticate the user associated with the user device based on the identification information;

determine that the user device and the monitoring device are connected to a same network at a same time based on the location associated with the user device and the location associated with the monitoring device; and

cause the user device to access at least one resource associated with the server device based on the user device and the monitoring device being connected to the same network.

16. The server device of claim 15 , wherein the one or more processors, when authenticating the user, are to:

authenticate the user based on determining that a voice profile of the user matches one or more voice characteristics of audio data within a particular threshold.

17. The server device of claim 15 , wherein the one or more processors, when authenticating the user, are to:

authenticate the user based on determining that a visual profile of the user matches one or more visual characteristics of video data within a particular threshold.

18. The server device of claim 15 , wherein the one or more processors are further to:

create, after determining that the user device and the monitoring device are connected to the same network, a session token; and

send the session token to the user device to permit the user device to access the at least one resource associated with the server device.

19. The server device of claim 15 , wherein the location associated with the user device is a network address of the user device and wherein the location associated with the monitoring device is a network address of the monitoring device.

20. The server device of claim 15 , wherein the one or more processors are further to:

determine, after receiving the session initiation request, a period of time during which the authentication request is to be received; and

determine, after receiving the authentication request, that the server device received the authentication request within the period of time.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 18, 2020
From: EDWARDS, JOSHUA; VUKICH, ADAM; BENKREIRA, ABDELKADAR M'HAMED
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 054697/0069 →
Continuity (3)
Continuation 16534270 · Aug 7, 2019
Continuation 16249526 · Jan 16, 2019
Related Publication 20210112055A1 · Apr 15, 2021