Dynamic multifactor authentication using low-power and high-power monitoring
Access to a system is permitted by first polling a low-power device/connection on a user device for a low-power multifactor authentication (MFA), and; refraining from polling a high-power device/connection on the user device for a high-power MFA. An indication is received from a user that the user would like to access the system. The low-power MFA is identified via the polling of the low-power device/connection, and the user is authenticated via the low-power MFA. After authenticating the user via the low-power MFA, the high-power device/connection is woken and polled for the high-power MFA. The high-power MFA is identified via the polling of the high-power device/connection, and the user is authenticated via the high-power MFA. Access to the system is permitted when the user has been authenticated using the low-power MFA and the high-power MFA.
1. A process for permitting access to a system comprising:
polling a low-power device or a low-power connection on a user device for a low-power multifactor authentication (MFA);
refraining from polling a high-power device and a high-power connection on the user device for a high-power MFA;
receiving an indication from a user that the user would like to access the system;
identifying the low-power MFA via the polling of the low-power device or the low-power connection;
authenticating the user via the low-power MFA;
after authenticating the user via the low-power MFA, waking up and polling the high-power device or the high-power connection on the user device for the high-power MFA;
identifying the high-power MFA via the polling the high-power device or the high-power connection;
authenticating the user via the high-power MFA; and
permitting access to the system by the user when the user has been authenticated using the low-power MFA and the high-power MFA.
2. The process of claim 1 , comprising a plurality of low-power MFAs and high-power MFAs, the plurality of low-power and high-power MFAs being received from a system administrator.
3. The process of claim 2 , comprising a plurality of combinations of the low-power MFAs and high-power MFAs that are required for permitting the user to access the system.
4. The process of claim 2 , wherein each of the plurality of low-power MFAs and high-power MFAs comprise a weighting factor.
5. The process of claim 4 , wherein the weighting factor is static or the weighting factor is determined dynamically.
6. The process of claim 1 , wherein the low-power MFA and the high-power MFA are unique to the user device.
7. The process of claim 1 , wherein the low-power device and the low-power connection comprise one or more of a universal serial bus (USB) connection to a previously connected and trusted user device, a local area network (LAN) connection to the system, a password, a pin, or a specific Internet Protocol (IP) address.
8. The process of claim 1 , wherein the high-power device and the high-power connection comprise one or more of a fingerprint reader, a Bluetooth or wireless connection to a previously connected and trusted user device, a facial recognition device, a voice print, and a weight scale.
9. The process of claim 1 , comprising a plurality of low-power devices and connections and a plurality of high-power devices and connections, and wherein the polling of the low-power devices and connections and the polling of the high-power devices and connections are configurable by a system administrator.
10. A non-transitory machine-readable medium comprising instructions, that when executed by a processor execute a process for permitting access to a system, comprising:
polling a low-power device or a low-power connection on a user device for a low-power multifactor authentication (MFA);
refraining from polling a high-power device and a high-power connection on the user device for a high-power MFA;
receiving an indication from a user that the user would like to access the system;
identifying the low-power MFA via the polling of the low-power device or the low-power connection;
authenticating the user via the low-power MFA;
after authenticating the user via the low-power MFA, waking up and polling the high-power device or the high-power connection on the user device for the high-power MFA;
identifying the high-power MFA via the polling the high-power device or the high-power connection;
authenticating the user via the high-power MFA; and
permitting access to the system by the user when the user has been authenticated using the low-power MFA and the high-power MFA.
11. The non-transitory machine-readable medium of claim 10 , comprising a plurality of low-power MFAs and high-power MFAs, the plurality of low-power and high-power MFAs being received from a system administrator.
12. The non-transitory machine-readable medium of claim 11 , comprising a plurality of combinations of the low-power MFAs and high-power MFAs that are required for permitting the user to access the system.
13. The non-transitory machine-readable medium of claim 11 , wherein each of the plurality of low-power MFAs and high-power MFAs comprise a weighting factor.
14. The non-transitory machine-readable medium of claim 11 , wherein the weighting factor is static or the weighting factor is determined dynamically.
15. The non-transitory machine-readable medium of claim 10 , wherein the low-power MFA and the high-power MFA are unique to the user device.
16. The non-transitory machine-readable medium of claim 10 , wherein the low-power device and the low-power connection comprise one or more of a universal serial bus (USB) connection to a previously connected and trusted user device, a local area network (LAN) connection to the system, a password, a pin, or a specific Internet Protocol (IP) address.
17. The non-transitory machine-readable medium of claim 10 , wherein the high-power device and the high-power connection comprise one or more of a fingerprint reader, a Bluetooth or wireless connection to a previously connected and trusted user device, a facial recognition device, a voice print, and a weight scale.
18. A system comprising:
a computer processor; and
a memory coupled to the computer processor;
wherein the computer processor is operable for:
polling a low-power device or a low-power connection on a user device for a low-power multifactor authentication (MFA);
refraining from polling a high-power device and a high-power connection on the user device for a high-power MFA;
receiving an indication from a user that the user would like to access the system;
identifying the low-power MFA via the polling of the low-power device or the low-power connection;
authenticating the user via the low-power MFA;
after authenticating the user via the low-power MFA, waking up and polling the high-power device or the high-power connection on the user device for the high-power MFA;
identifying the high-power MFA via the polling the high-power device or the high-power connection;
authenticating the user via the high-power MFA; and
permitting access to the system by the user when the user has been authenticated using the low-power MFA and the high-power MFA.
19. The system of claim 18 , comprising:
a plurality of low-power MFAs and high-power MFAs, the plurality of low-power and high-power MFAs being received from a system administrator; and
a plurality of combinations of the low-power MFAs and high-power MFAs that are required for permitting the user to access the system;
wherein each of the plurality of low-power MFAs and high-power MFAs comprise a weighting factor; and
wherein the weighting factor is static or the weighting factor is determined dynamically.
20. The system of claim 18 , wherein the low-power MFA and the high-power MFA are unique to the user device.