Secondary multifactor authentication
View Patent ↗Described embodiments provide systems, methods, non-transitory computer-readable medium for initiating one-factor or multi-factor authentication. A device comprising one or more processors and coupled to memory. The device can receive a request to authenticate a user to enable access to an application by the user. The request can originate from an Internet Protocol (IP) address external to a network hosting the application. The device can determine that a previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication by the user. The device can provide, responsive to the determination, the user with access to the application using one-factor authentication instead of the multi-factor authentication.
1. A method comprising:
receiving, by a device, a request to authenticate a user to enable access to an application by the user, the request originating from an Internet Protocol (IP) address external to a network hosting the application;
determining, by the device, that a previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication by the user; and
providing, by the device based on determining that the previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication, the user with access to the application using one-factor authentication instead of the multi-factor authentication.
2. The method of claim 1 , further comprising determining, by the device, that a number of times that the user had authenticated from that IP address is greater than a second threshold.
3. The method of claim 2 , further comprising using the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated the number of times from the IP address using the multi-factor authentication greater than the second threshold and within a threshold of a time period from the previous request.
4. The method of claim 1 , further comprising determining, by the device, that no other user has authenticated from the IP address within at least a time period from the previous request.
5. The method of claim 4 , further comprising using the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of the time period from the previous request and that no other user has authenticated from that IP address within at least the time period.
6. The method of claim 1 , further comprising determining, by the device, that a time of the request falls within an established time pattern for the user.
7. The method of claim 6 , further comprising using the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of a time period from the previous request and that the time of the request falls within the established time pattern for the user.
8. The method of claim 1 , further comprising identifying, by the device, that a second device with which the user has performed the multi-factor authentication is at a location of a third device having the IP address.
9. The method of claim 8 , further comprising using the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of a time period from the previous request and identifying that the second device is at the location of the third device.
10. A device comprising:
one or more processors, coupled to memory and configured to:
receive a request to authenticate a user to enable access to an application by the user, the request originating from an Internet Protocol (IP) address external to a network hosting the application;
determine that a previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication by the user; and
provide, based on determining that the previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication, the user with access to the application using one-factor authentication instead of the multi-factor authentication.
11. The device of claim 10 , wherein the one or more processors are further configured to determine that a number of times that the user had authenticated from that IP address is greater than a second threshold.
12. The device of claim 11 , wherein the one or more processors are further configured to use the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated the number of times from the IP address using the multi-factor authentication greater than the second threshold and within a threshold of a time period from the previous request.
13. The device of claim 10 , wherein the one or more processors are further configured to determine that no other user has authenticated from the IP address within at least a time period from the previous request.
14. The device of claim 13 , wherein the one or more processors are further configured to use
the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of the time period from the previous request and that no other user has authenticated from that IP address within at least the time period.
15. The device of claim 10 , wherein the one or more processors are further configured to determine that a time of the request falls within an established time pattern for the user.
16. The device of claim 15 , wherein the one or more processors are further configured to use the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of a time period from the previous request and that the time of the request falls within the established time pattern for the user.
17. The device of claim 10 , wherein the one or more processors are further configured to identify that a second device with which the user has performed the multi-factor authentication is at a location of a third device having the IP address.
18. The device of claim 17 , wherein the one or more processors are further configured to use the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of a time period from the previous request and identifying that the second device is at the location of the third device.
19. A non-transitory computer-readable medium storing program instructions to cause one or more processors to:
receive a request to authenticate a user to enable access to an application by the user, the request originating from an Internet Protocol (IP) address external to a network hosting the application;
determine that a previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication by the user; and
provide, based on determining that the previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication, the user with access to the application using one-factor authentication instead of the multi-factor authentication.
20. The non-transitory computer-readable medium of claim 19 , wherein the program instructions cause the one or more processors to use the one-factor authentication instead of another multi-factor authentication responsive to determining that the user had authenticated from the IP address using the multi-factor authentication within a threshold of a time period from the previous request and identifying that a second device with which the user has performed the multi-factor authentication is at a location of a third device having the IP address.