IP Library Granted Patent US 10,172,001
Granted Patent B1
US 10,172,001 · App. 15/797,229 · Granted Jan 1, 2019

Authentication mechanism

Inventors: Yao Xing Li (Beijing, CN); Han Ying Song (Xian, CN); Jian Dong Yin (Beijing, CN); Jun Feng Yuan (Beijing, CN)
Assignee: International Business Machines Corporation
H04W12/06H04L9/0869H04L63/0876H04L9/32H04W8/26
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,172,001
App. No.
15/797,229
Granted
Jan 1, 2019
Kind
B1
Abstract

Aspects provide an authentication mechanism wherein processors are configured to extract encoded identification indicia of a cellular service base station from authentication credentials received from a mobile cellular device for access to a secure networked resource on a network device connection. The identification indicia uniquely identify the base station relative to other, different base stations. Configured processors grants access by the mobile device to the secure networked resource in response to determining that the mobile device is currently using the identified base station for cellular services to transmit the authentication credentials; and deny access by the mobile device to the secure networked resource in response to determining that the mobile device is currently using another base station for cellular services to transmit the authentication credentials.

Claims (59)

1. A computer-implemented method for an authentication mechanism, the method comprising executing on a computer processor:

in response to a cellular services request from a mobile cellular device to generate authentication credentials for access to a secure networked resource via an identified cellular service base station, determining unique numeric identification indicia of the identified base station;

randomly generating a plurality of numeric characters;

generating authentication credentials by encoding the unique numeric identification indicia of the identified base station as a function of the randomly generated plurality of numeric characters;

in response to a receipt of the authentication credentials from the mobile cellular device for access to the secure networked resource on a network device connection, extracting encoded identification indicia of the identified base station from the authentication credentials, wherein the identification indicia uniquely identify the identified base station relative to another base station that is different from the identified base station;

granting access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the identified base station for cellular services to transmit the authentication credentials; and

denying access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the another base station for cellular services to transmit the authentication credentials.

2. The method of claim 1 , further comprising:

determining a geographic location of the mobile device transmitting the authentication credentials;

granting access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is within a threshold range for establishing cellular communication services with the identified base station; and

denying access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is outside of the threshold range.

3. The method of claim 1 , further comprising:

integrating computer-readable program code into a computer system comprising a processor, a computer readable memory in circuit communication with the processor, and a computer readable storage medium in circuit communication with the processor; and

wherein the processor executes program code instructions stored on the computer-readable storage medium via the computer readable memory and thereby performs the determining the unique numeric identification indicia of the identified base station, the randomly generating the plurality of numeric characters, the generating the authentication credentials, the extracting the encoded identification indicia of the identified base station from the authentication credentials in response to the receipt of the authentication credentials from the mobile cellular device for access to the secure networked resource on the network device connection, the granting access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the identified base station for cellular services to transmit the authentication credentials; and the denying access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the another base station for cellular services to transmit the authentication credentials.

4. The method of claim 3 , wherein the computer-readable program code is provided as a service in a cloud environment.

5. The method of claim 1 , wherein the generating the authentication credentials further comprises:

using a binary-to-text encoding scheme to translate binary data in an American Standard Code for Information Interchange string format into a radix-64 representation.

6. The method of claim 1 , wherein the determining the unique numeric identification indicia of the identified base station as global positioning system coordinates for an address of an identified base station.

7. The method of claim 6 , wherein the generating the authentication credentials by encoding the unique numeric identification indicia of the identified base station as the function of the randomly generated plurality of numeric characters further comprises:

mapping non-numeric characters of the unique numeric identification indicia to numeric replacement characters.

8. A system, comprising:

a processor;

a computer readable memory in circuit communication with the processor; and

a computer readable storage medium in circuit communication with the processor;

wherein the processor executes program instructions stored on the computer-readable storage medium via the computer readable memory and thereby:

in response to a cellular services request from a mobile cellular device to generate authentication credentials for access to a secure networked resource via an identified cellular service base station, determines unique numeric identification indicia of the identified base station;

randomly generates a plurality of numeric characters;

generates authentication credentials by encoding the unique numeric identification indicia of the identified base station as a function of the randomly generated plurality of numeric characters;

in response to a receipt of the authentication credentials from the mobile cellular device for access to the secure networked resource on a network device connection, extracts encoded identification indicia of the identified base station from the authentication credentials, wherein the identification indicia uniquely identify the identified base station relative to another base station that is different from the identified base station;

grants access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the identified base station for cellular services to transmit the authentication credentials; and

denies access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the another base station for cellular services to transmit the authentication credentials.

9. The system of claim 8 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby further:

determines a geographic location of the mobile device transmitting the authentication credentials;

grants access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is within a threshold range for establishing cellular communication services with the identified base station; and

denies access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is outside of the threshold range.

10. The system of claim 8 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby further:

generates the authentication credentials by using a binary-to-text encoding scheme to translate binary data in an American Standard Code for Information Interchange string format into a radix-64 representation.

11. The system of claim 8 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby further:

determines the unique numeric identification indicia of the identified base station as global positioning system coordinates for an address of an identified base station.

12. The system of claim 11 , wherein the processor executes the program instructions stored on the computer-readable storage medium via the computer readable memory and thereby further:

generates the authentication credentials by mapping non-numeric characters of the unique numeric identification indicia to numeric replacement characters.

13. A computer program product for an authentication mechanism, the computer program product comprising:

a computer readable storage medium having computer readable program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the computer readable program code comprising instructions for execution by a processor that cause the processor to:

in response to a cellular services request from a mobile cellular device to generate authentication credentials for access to a secure networked resource via an identified cellular service base station, determine unique numeric identification indicia of the identified base station:

randomly generate a plurality of numeric characters;

generate authentication credentials by encoding the unique numeric identification indicia of the identified base station as a function of the randomly generated plurality of numeric characters;

in response to a receipt of the authentication credentials from the mobile cellular device for access to the secure networked resource on a network device connection, extract encoded identification indicia of the identified cellular service base station from the authentication credentials, wherein the identification indicia uniquely identify the identified base station relative to another base station that is different from the identified base station;

grant access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the identified base station for cellular services to transmit the authentication credentials; and

deny access for the mobile device to the secure networked resource in response to determining that the mobile device is currently using the another base station for cellular services to transmit the authentication credentials.

14. The computer program product of claim 13 , wherein the computer readable program code instructions for execution by the processor further cause the processor to:

determine a geographic location of the mobile device transmitting the authentication credentials;

grant access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is within a threshold range for establishing cellular communication services with the identified base station; and

deny access for the mobile device to the secure networked resource in response to determining that the geographic location of the mobile device is outside of the threshold range.

15. The computer program product of claim 13 , wherein the computer readable program code instructions for execution by the processor further cause the processor to:

generate the authentication credentials by using a binary-to-text encoding scheme to translate binary data in an American Standard Code for Information Interchange string format into a radix-64 representation.

16. The computer program product of claim 13 , wherein the computer readable program code instructions for execution by the processor further cause the processor to:

determine the unique numeric identification indicia of the identified base station as global positioning system coordinates for an address of an identified base station.

17. The computer program product of claim 16 , wherein the computer readable program code instructions for execution by the processor further cause the processor to:

generate the authentication credentials by mapping non-numeric characters of the unique numeric identification indicia to numeric replacement characters.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 30, 2017
From: LI, YAO XING; SONG, HAN YING; YIN, JIAN DONG; YUAN, JUN FENG
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 043981/0087 →
Cited By (1)
US 12,425,384