Authentication based on proximity to mobile device
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for performing multi-factor authentication. In one aspect, a method includes determining that a user has successfully completed an authentication factor, determining whether a mobile device associated with the user is proximate to a computer; and authenticating the user based on determining that the user has successfully completed the authentication factor, and that the mobile device is proximate to the computer.
1. A computer-implemented method comprising:
determining that a user has successfully completed an authentication factor;
determining whether a mobile device associated with the user is proximate to a computer, the determining comprising:
receiving first wireless triangulation position data corresponding to a mobile device position;
receiving second wireless triangulation position data corresponding to a computer position;
determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;
determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and
authenticating, by one or more computers, the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.
2. The method of claim 1 , wherein determining that the mobile device associated with the user is proximate to the computer further comprises determining the existence of a connection between the mobile device and the computer.
3. The method of claim 1 , further comprising:
determining, in response to determining that the mobile device is not proximate to the computer by determining that the distance between the mobile device position and the computer position exceeds the maximum threshold, that the user has successfully completed an additional authentication factor; and
authenticating the user based on determining that the user has successfully completed both the authentication factor and the additional authentication factor.
4. The method of claim 1 , wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor for gaining access to a computer software application executing on the computer.
5. The method of claim 1 , wherein the computer comprises a node of a centralized network and wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor through interaction with the node.
6. The method of claim 1 , further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the mobile device.
7. The method of claim 1 , further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the computer.
8. The method of claim 1 , further comprising:
determining that the mobile device can no longer be used to authenticate any user prior to determining whether the mobile device associated with the user is proximate to the computer; and
eliminating an association between the mobile device and the user.
9. The method of claim 1 , wherein the mobile device and the computer are connected to a same wireless network.
10. The method of claim 1 , wherein determining the mobile device position and determining the computer position are determined within a resolution of one foot or less of an actual mobile device position or an actual computer position, respectively.
11. The method of claim 1 , further comprising:
transmitting the first wireless triangulation position data and the second wireless triangulation position data; and
receiving the distance between the mobile device position and the computer position.
12. The method of claim 11 , further comprising receiving an indication the mobile device is proximate the computer based on a determination the distance between the mobile device position and the computer position does not exceed the maximum threshold.
13. A computer-readable storage medium storing computer software instructions executable by one or more data processing apparatus which, upon such execution, cause the one or more data processing apparatus to perform operations comprising:
determining that a user has successfully completed an authentication factor;
determining whether a mobile device associated with the user is proximate to a computer, the determining comprising:
receiving first wireless triangulation position data corresponding to a mobile device position;
receiving second wireless triangulation position data corresponding to a computer position;
determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;
determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and
authenticating the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.
14. The medium of claim 13 , wherein determining that the mobile device associated with the user is proximate to the computer further comprises determining the existence of a wireless connection between the mobile device and the computer.
15. The medium of claim 13 , the operations further comprising:
determining, in response to determining that the mobile device is not proximate to the computer, that the user has successfully completed an additional authentication factor; and
authenticating the user based on determining that the user has successfully completed both the authentication factor and the additional authentication factor.
16. The medium of claim 13 , wherein the computer comprises a node of a centralized network and wherein determining that the user has successfully completed the authentication factor comprises determining that the user has successfully completed an authentication factor through interaction with the node.
17. The medium of claim 13 , the operations further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the mobile device.
18. The medium of claim 13 , the operations further comprising associating, prior to determining whether the mobile device associated with the user is proximate to the computer, the mobile device with the user, the association formed through user interaction with the computer.
19. The medium of claim 13 , the operations further comprising:
determining that the mobile device can no longer be used to authenticate any user prior to determining whether the mobile device associated with the user is proximate to the computer; and
eliminating an association between the mobile device and the user.
20. A system comprising:
one or more computers; and
a computer-readable storage medium storing computer software instructions executable by the one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:
determining that a user has successfully completed an authentication factor;
determining whether a mobile device associated with the user is proximate to a computer, the determining comprising:
receiving first wireless triangulation position data corresponding to a mobile device position;
receiving second wireless triangulation position data corresponding to a computer position;
determining, based on the first wireless triangulation position data and the second wireless triangulation position data, a distance between the mobile device position and the computer position;
determining the mobile device is proximate the computer by determining the distance between the mobile device position and the computer position does not exceed a maximum threshold; and
authenticating the user based on determining that the user has successfully completed the authentication factor and that the mobile device is proximate to the computer.