Enhanced security using wearable device with authentication system
An approach is provided for securing a network-accessible site such as a bank, financial institution, or a user's home system. A request is received from a user of the network-accessible site. While the request is from a user, the system further verifies that the user is the authorized user and not an imposter, such as a hacker. To this end, the approach transmits a state inquiry to a wearable device registered to the user. The current state of the user is received from the wearable device, such as whether the user is sitting, standing, walking, sleeping, etc. If the system determines that the current user state allows the action to be performed at the site by the user, then the action is performed. Likewise, if the system determines that the current user state disallows the action, then the system inhibits, or otherwise prevents, the action from being performed.
1. A method for securing a network-accessible site, the method comprising:
receiving a registration request from a user to register a wearable device, wherein the registration request comprises a set of acceptable states of the user corresponding to a set of body positions of the user to perform a set of actions;
registering the wearable device at the network-accessible site, wherein the registering further comprises:
verifying an identity of the user; and
associating the wearable device with the user;
in response to registering the wearable device, receiving a request from the user of the network-accessible site to perform a selected one of the set of actions;
transmitting a state inquiry to the wearable device registered to the user in response to receiving the request;
receiving a current state of the user from the wearable device responding to the transmitted state inquiry;
performing the selected action at the network-accessible site in response to determining that the received current state of the user matches one of the set of acceptable states; and
inhibiting the action at the network-accessible site in response to determining that the received current state of the user fails to match at least one of the set of acceptable states.
2. The method of claim 1 further comprising:
prior to receiving the request from the user:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials.
3. The method of claim 1 further comprising:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials, wherein the request is a logon request that includes the set of logon credentials, and wherein the selected action is a site logon action.
4. The method of claim 1 wherein the user from which the request was received is an unauthorized user, wherein the wearable device is being worn by an authorized user of the network-accessible site, and wherein the method further comprises:
wirelessly transmitting the state inquiry to the registered wearable device that is being worn by the authorized user;
receiving the current state of the user from the registered wearable device; and
preventing access to the network-accessible site by the unauthorized user in response to determining that the authorized user is in a current state that disallows the action.
5. The method of claim 1 further comprising:
terminating a session established between the user and the network-accessible site in response to determining that the action is disallowed while the user is in the current state.
6. The method of claim 1 wherein at least one of the set of acceptable states is selected from the group consisting of a sitting state and a standing state.
7. An information handling system comprising:
one or more processors;
a memory coupled to at least one of the processors;
a telecommunications adapter, accessible by at least one of the processors; and
a set of instructions stored in the memory and executed by at least one of the processors to secure a network-accessible site, wherein the set of instructions perform actions of:
receiving a registration request from a user to register a wearable device, wherein the registration request comprises a set of acceptable states of the user corresponding to a set of body positions of the user to perform a set of actions;
registering the wearable device at the network-accessible site, wherein the registering further comprises:
verifying an identity of the user; and
associating the wearable device with the user;
in response to registering the wearable device, receiving a request from the user of the network-accessible site to perform a selected one of the set of actions;
transmitting a state inquiry to the wearable device registered to the user in response to receiving the request;
receiving a current state of the user from the wearable device responding to the transmitted state inquiry;
performing the selected action at the network-accessible site in response to determining that the received current state of the user matches one of the set of acceptable states; and
inhibiting the action at the network-accessible site in response to determining that the received current state of the user fails to match at least one of the set of acceptable states.
8. The information handling system of claim 7 wherein the actions further comprise:
prior to receiving the request from the user:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials.
9. The information handling system of claim 7 wherein the actions further comprise:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials, wherein the request is a logon request that includes the set of logon credentials, and wherein the selected action is a site logon action.
10. The information handling system of claim 7 wherein the user from which the request was received is an unauthorized user, wherein the wearable device is being worn by an authorized user of the network-accessible site, and the wherein the actions further comprise:
wirelessly transmitting the state inquiry to the registered wearable device that is being worn by the authorized user;
receiving the current state of the user from the registered wearable device; and
preventing access to the network-accessible site by the unauthorized user in response to determining that the authorized user is in a current state that disallows the action.
11. The information handling system of claim 7 wherein the actions further comprise:
terminating a session established between the user and the network-accessible site in response to determining that the action is disallowed while the user is in the current state.
12. The information handling system of claim 7 wherein at least one of the set of acceptable states is selected from the group consisting of a sitting state and a standing state.
13. A computer program product stored in a computer readable storage medium, comprising computer instructions that, when executed by an information handling system, causes the information handling system to perform actions comprising:
receiving a registration request from a user to register a wearable device, wherein the registration request comprises a set of acceptable states of the user corresponding to a set of body positions of the user to perform a set of actions;
registering the wearable device at the network-accessible site, wherein the registering further comprises:
verifying an identity of the user; and
associating the wearable device with the user;
in response to registering the wearable device, receiving a request from the user of the network-accessible site to perform a selected one of the set of actions;
transmitting a state inquiry to the wearable device registered to the user in response to receiving the request;
receiving a current state of the user from the wearable device responding to the transmitted state inquiry;
performing the selected action at the network-accessible site in response to determining that the received current state of the user matches one of the set of acceptable states; and
inhibiting the action at the network-accessible site in response to determining that the received current state of the user fails to match at least one of the set of acceptable states.
14. The computer program product of claim 13 wherein the actions further comprise:
prior to receiving the request from the user:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials.
15. The computer program product of claim 13 wherein the actions further comprise:
receiving a set of logon credentials from the user; and
successfully verifying the received set of logon credentials, wherein the request is a logon request that includes the set of logon credentials, and wherein the selected action is a site logon action.
16. The computer program product of claim 13 wherein the user from which the request was received is an unauthorized user, wherein the wearable device is being worn by an authorized user of the network-accessible site, and wherein the actions further comprise:
wirelessly transmitting the state inquiry to the registered wearable device that is being worn by the authorized user;
receiving the current state of the user from the registered wearable device; and
preventing access to the network-accessible site by the unauthorized user in response to determining that the authorized user is in a current state that disallows the action.
17. The computer program product of claim 13 wherein the actions further comprise:
terminating a session established between the user and the network-accessible site in response to determining that the action is disallowed while the user is in the current state.
18. The computer program product of claim 13 wherein at least one of the set of acceptable states is selected from the group consisting of a sitting state and a standing state.