Network device proximity-based authentication
A wireless system can be used to authenticate a user device via proximity information of wireless network devices. The system can include the user device, the wireless network devices, and a server. At least some of the wireless network devices can be wirelessly connected to the user device and at least some other wireless network devices can be wirelessly unconnected to the user device. The server can use proximity information about the user device with respect to the wireless network devices to authenticate a user.
1 . A system comprising:
a processor device; and
a non-transitory computer-readable medium comprising instructions that are executable by the processor device to:
receive first proximity information from a user device of a user, the first proximity information indicating a first set of wireless network devices in wireless range of the user device during a set-up phase;
generate a fingerprint identifying the first set of wireless network devices;
store the fingerprint in a user profile for the user, wherein the stored fingerprint includes identifications of the first set of wireless network devices, the first set of wireless network devices including at least one device that is wirelessly connected to the user device and at least one other device that is not wirelessly connected to the user device; and
subsequent to the set-up phase:
receive second proximity information from the user device, the second proximity information indicating a second set of wireless network devices in wireless range of the user device subsequent to the set-up phase;
access the stored fingerprint in the user profile;
compare the second proximity information to the stored fingerprint to determine that the second set of wireless network devices does not match the stored fingerprint; and
in response to determining that the second set of wireless network devices does not match the stored fingerprint, update the stored fingerprint in the user profile to include at least one wireless network device from the second set of wireless network devices that is not already present in the stored fingerprint;
wherein the system is configured to prevent the user device from accessing sensitive information prior to authenticating the user of the user device.
2 . The system of claim 1 , wherein the non-transitory computer-readable medium further comprises instructions that are executable by the processor device for causing the processor device to conduct the set-up phase by:
authenticating the user of the user device;
outputting a request to the user device to receive the first proximity information; and
storing the first proximity information as at least part of the fingerprint.
3 . The system of claim 1 , wherein the non-transitory computer-readable medium further comprises instructions that are executable by the processor device for causing the processor device to:
in response to determining that the second set of wireless network devices does not match the first set of wireless network devices, authenticate the user of the user device to access the sensitive information.
4 . The system of claim 1 , wherein the non-transitory computer-readable medium further comprises instructions that are executable by the processor device for causing the processor device to:
determine a level of closeness of the second proximity information to the stored fingerprint by comparing the second set of wireless network devices to the first set of wireless network devices; and
execute one or more authentication actions based on the determined level of closeness, wherein the one or more authentication actions include authenticating the user of the user device to access the sensitive information in response to determining that the level of closeness is a first level of closeness, wherein the one or more authentication actions include performing a second-factor authentication process in response to determining that the level of closeness is a second level of closeness, and wherein the one or more authentication actions include preventing the user from accessing the sensitive information in response to determining that the level of closeness is a third level of closeness.
5 . The system of claim 4 , wherein the non-transitory computer-readable medium further comprises instructions that are executable by the processor device for causing the processor device to:
adjust the first level of closeness based on a date or time at which the second proximity information is received from the user device.
6 . A non-transitory computer-readable medium comprising program code that is executable by a processor device for causing the processor device to:
receive first proximity information from a user device of a user, the first proximity information indicating a first set of wireless network devices in wireless range of the user device during a set-up phase;
generate a fingerprint identifying the first set of wireless network devices;
store the fingerprint in a user profile for the user, wherein the stored fingerprint includes identifications of the first set of wireless network devices, the first set of wireless network devices including at least one device that is wirelessly connected to the user device and at least one other device that is not wirelessly connected to the user device;
subsequent to the set-up phase:
receive second proximity information from the user device, the second proximity information indicating a second set of wireless network devices in wireless range of the user device subsequent to the set-up phase;
access the stored fingerprint in the user profile;
compare the second proximity information to the stored fingerprint to determine that the second set of wireless network devices does not match the stored fingerprint; and
in response to determining that the second set of wireless network devices does not match the stored fingerprint, update the stored fingerprint in the user profile to include at least one wireless network device from the second set of wireless network devices that is not already present in the stored fingerprint; and
prevent the user device from accessing sensitive information prior to authenticating the user of the user device.
7 . The non-transitory computer-readable medium of claim 6 , further comprising program code that is executable by the processor device for causing the processor device to conduct the set-up phase by:
authenticating the user of the user device;
outputting a request to the user device to receive the first proximity information; and
storing the first proximity information as at least part of fingerprint.
8 . The non-transitory computer-readable medium of claim 6 , further comprising program code that is executable by the processor device for causing the processor device to:
in response to determining that the second set of wireless network devices does not match the first set of wireless network devices, authenticate the user of the user device to access the sensitive information.
9 . The non-transitory computer-readable medium of claim 6 , further comprising program code that is executable by the processor device for causing the processor device to:
determine a level of closeness of the second proximity information to the stored fingerprint by comparing the second set of wireless network devices to the first set of wireless network devices; and
execute one or more authentication actions based on the determined level of closeness, wherein the one or more authentication actions include modifying the stored fingerprint and authenticating the user of the user device to access the sensitive information in response to determining that the level of closeness is a first level of closeness, wherein the one or more authentication actions include performing a second-factor authentication process in response to determining that the level of closeness is a second level of closeness, and wherein the one or more authentication actions include preventing the user from accessing the sensitive information in response to determining that the level of closeness is a third level of closeness.
10 . The non-transitory computer-readable medium of claim 9 , further comprising program code that is executable by the processor device for causing the processor device to:
adjust the first level of closeness based on a date or time at which the second proximity information is received from the user device.
11 . A method comprising:
receiving, by a processor device, first proximity information from a user device of a user, the first proximity information indicating a first set of wireless network devices in wireless range of the user device during a set-up phase;
generating, by the processor device, a fingerprint identifying the first set of wireless network devices;
storing, by the processor device, the fingerprint in a user profile for the user, wherein the stored fingerprint includes identifications of the first set of wireless network devices, the first set of wireless network devices including at least one device that is wirelessly connected to the user device and at least one other device that is not wirelessly connected to the user device;
subsequent to the set-up phase:
receiving, by the processor device, second proximity information from the user device, the second proximity information indicating a second set of wireless network devices in wireless range of the user device subsequent to the set-up phase;
accessing, by the processor device, the stored fingerprint in the user profile;
comparing, by the processor device, the second proximity information to the stored fingerprint to determine that the second set of wireless network devices does not match the stored fingerprint; and
in response to determining that the second set of wireless network devices does not match the stored fingerprint, updating, by the processor device, the stored fingerprint in the user profile to include at least one wireless network device from the second set of wireless network devices that is not already present in the stored fingerprint; and
preventing the user device from accessing sensitive information prior to authenticating the user of the user device.
12 . The method of claim 11 , further comprising conducting the set-up phase by:
authenticating, by the processor device, the user of the user device;
transmitting, by the processor device, a request to the user device to receive the first proximity information; and
storing, by the processor device, the first proximity information as at least part of fingerprint.
13 . The method of claim 11 , further comprising:
determining, by the processor device, a level of closeness of the second proximity information to the stored fingerprint by comparing the second set of wireless network devices to the first set of wireless network devices; and
executing, by the processor device, one or more authentication actions based on the determined level of closeness, wherein the one or more authentication actions include modifying the fingerprint and authenticating the user of the user device to access the sensitive information in response to determining that the level of closeness is a first level of closeness, wherein the one or more authentication actions include performing a second-factor authentication process in response to determining that the level of closeness is a second level of closeness, and wherein the one or more authentication actions include preventing the user from accessing the sensitive information in response to determining that the level of closeness is a third level of closeness.
14 . The method of claim 13 , wherein the second level of closeness is less of a match than the first level of closeness, and wherein the third level of closeness is less of a match than the second level of closeness.
15 . The method of claim 13 , further comprising:
adjusting, by the processor device, the first level of closeness based on a date or time at which the second proximity information is received from the user device.