Enhanced security with multiple factor authentication at devices using partitions
A computing device may configure a plurality of device partitions. The computing device may send, to a one time password (OTP) server and via an interface of a first partition of the plurality of device partitions, a login request. The computing device may receive, at a second partition of the plurality of device partitions, an OTP. The computing device may access, by validating authentication credentials corresponding to the second partition of the plurality of device partitions, the OTP. The computing device may send, to the OTP server, the OTP. The computing device may access, upon receiving confirmation of validation of the OTP, services hosted by the OTP server.
1. A computing device comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing device to:
configure a plurality of device partitions;
send, to a one time password (OTP) server and via an interface of a first partition of the plurality of device partitions, a login request;
receive, from the OTP server, a notification indicating a decoy OTP, wherein the notification identifies characteristics of an interface, to be displayed based on the login request, to warn of the decoy OTP, and wherein the decoy OTP is selectively sent in response to a portion of login requests, wherein the characteristics comprise one or more of: an indication that a particular number of decoy OTPs will be sent in advance of a valid OTP, an indication that OTPs may be sent for only a portion of login attempts, or an indication of how to distinguish between valid and decoy OTPs;
receive, at a second partition of the plurality of device partitions, an OTP;
access, by validating authentication credentials corresponding to the second partition of the plurality of device partitions, the OTP;
send, to the OTP server, the OTP; and
access, upon receiving confirmation of validation of the OTP, services hosted by the OTP server.
2. The computing device of claim 1 , wherein the plurality of device partitions include: one or more hardware partitions and one or more virtual partitions.
3. The computing device of claim 1 , wherein receiving, at the second partition of the plurality of device partitions, the OTP comprises receiving a first portion of the OTP, wherein a second portion of the OTP is received at a third partition of the plurality of device partitions.
4. The computing device of claim 3 , wherein the memory stores additional computer readable instructions that, when executed by the at least one processor, cause the computing device to:
automatically assemble, after validating authentication credentials corresponding to the third partition of the plurality of device partitions, the OTP using the first portion and the second portion.
5. The computing device of claim 4 , wherein the authentication credentials corresponding to the second partition of the plurality of device partitions are different than the authentication credentials corresponding to the third partition of the plurality of device partitions.
6. The computing device of claim 1 , wherein accessing the OTP comprises accessing a decoy OTP prior to accessing the OTP.
7. The computing device of claim 6 , wherein the memory stores additional computer readable instructions that, when executed by the at least one processor, cause the computing device to:
enroll, prior to sending the login request, with the OTP server.
8. The computing device of claim 6 , wherein the OTP server is configured to:
identify use of the decoy OTP by a different computing device, and
initiate, based on identification of the decoy OTP by the different computing device, one or more security actions.
9. The computing device of claim 8 , wherein the one or more security actions comprise one or more of:
tracing the different computing device, wiping the computing device, locking at least one of the plurality of device partitions, prompting for entry of a code at the computing device, or notifying an authority.
10. The computing device of claim 1 , wherein the authentication credentials comprise biometric credentials.
11. The computing device of claim 1 , wherein the OTP is sent to a randomly selected partition of the plurality of device partitions each time a login request is received.
12. The computing device of claim 1 , wherein the indication comprises a natural language indication to distinguish between valid and decoy OTPs, and wherein the natural language indication indicates a particular phrase indicating that a subsequently received OTP will be a valid OTP.
13. The computing device of claim 1 , wherein the indication comprises a numeric value displayed within the interface, wherein the numeric value indicates which OTP of a series of received OTPs is valid.
14. The computing device of claim 1 , wherein a position of the indication within the interface indicates which OTP of a series of received OTPs is valid.
15. The computing device of claim 1 , wherein a position of the indication within the interface indicates a numeric value corresponding to a correct partition for use in accessing the OTP.
16. The computing device of claim 1 , wherein the second partition is accessed based on detection of a swipe input during access of the first partition.
17. The computing device of claim 1 , wherein the first partition is configured only for receipt of OTPs, and wherein the second partition is configured to perform all other functions of the computing device.
18. The computing device of claim 1 , wherein authentication credentials for the first partition comprise a single finger biometric scan and wherein authentication credentials for the second partition comprise a multi-finger biometric scan.
19. A method comprising:
at a computing device comprising at least one processor, a communication interface, and memory:
configuring a plurality of device partitions;
sending, to a one time password (OTP) server and via an interface of a first partition of the plurality of device partitions, a login request;
receiving, from the OTP server, a notification indicating a decoy OTP, wherein the notification identifies characteristics of an interface, to be displayed based on the login request, to warn of the decoy OTP, and wherein the decoy OTP is selectively sent in response to a portion of login requests, wherein the characteristics comprise one or more of: an indication that a particular number of decoy OTPs will be sent in advance of a valid OTP, an indication that OTPs may be sent for only a portion of login attempts, or an indication of how to distinguish between valid and decoy OTPs;
receiving, at a second partition of the plurality of device partitions, an OTP;
accessing, by validating authentication credentials corresponding to the second partition of the plurality of device partitions, the OTP;
sending, to the OTP server, the OTP; and
accessing, upon receiving confirmation of validation of the OTP, services hosted by the OTP server.
20. One or more non-transitory computer-readable media storing instructions that, when executed by a computing device comprising at least one processor, a communication interface, and memory, cause the computing device to:
configure a plurality of device partitions;
send, to a one time password (OTP) server and via an interface of a first partition of the plurality of device partitions, a login request;
receive, from the OTP server, a notification indicating a decoy OTP, wherein the notification identifies characteristics of an interface, to be displayed based on the login request, to warn of the decoy OTP, and wherein the decoy OTP is selectively sent in response to a portion of login requests, wherein the characteristics comprise one or more of: an indication that a particular number of decoy OTPs will be sent in advance of a valid OTP, an indication that OTPs may be sent for only a portion of login attempts, or an indication of how to distinguish between valid and decoy OTPs;
receive, at a second partition of the plurality of device partitions, an OTP;
access, by validating authentication credentials corresponding to the second partition of the plurality of device partitions, the OTP;
send, to the OTP server, the OTP; and
access, upon receiving confirmation of validation of the OTP, services hosted by the OTP server.