Mutual identity verification
A method, system, and computer program product for frictionless mutual authentication of unsolicited communications may detect an incoming communication. A verification interface may be displayed on a consumer device. On the consumer device, a first valid verification may be received via the verification interface. In response to receiving the first valid verification, a challenge interface may be presented to an enterprise device. On the enterprise device, a second valid verification may be received via the challenge interface. In response to receiving the second valid verification, a verification credential may be presented to both the consumer device and the enterprise device. A connection for the incoming communication may be established between the consumer device and the enterprise device.
1. A method for mutual authentication of communications, comprising:
detecting an incoming communication to a consumer device from an enterprise device;
in response to detecting the incoming communication, causing a verification interface to be displayed on the consumer device;
receiving, from the consumer device, a first valid verification via the verification interface;
in response to receiving the first valid verification, causing a challenge interface to be displayed on the enterprise device;
receiving, from the enterprise device, a second valid verification via the challenge interface;
in response to receiving the second valid verification, presenting, to both the consumer device and the enterprise device, a verification credential; and
based on the second valid verification, establishing, between the consumer device and the enterprise device, a new connection for the incoming communication.
2. The method of claim 1 , wherein the first valid verification includes an authentic biometric measurement of a user of the consumer device, wherein the biometric measurement confirms the identity of the user of the consumer device.
3. The method of claim 1 , wherein an invalid verification is received via the verification interface, the method further comprising:
determining a security criterion has been met; and
in response to determining the security criterion has been met, adding an identifier for the consumer device to a lockout list.
4. The method of claim 1 , wherein an invalid verification is received via the challenge interface, the method further comprising:
determining a security criterion has been met; and
in response to determining the security criterion has been met, adding an identifier for the enterprise device to a lockout list.
5. The method of claim 1 , wherein the first and second valid verifications are executed via an out-of-band line of communication.
6. The method of claim 3 , further comprising:
determining the identifier was erroneously added to the lockout list; and
in response to determining the identifier was erroneously added, removing the identifier from the lockout list.
7. The method of claim 4 , further comprising:
determining the identifier was erroneously added to the lockout list; and
in response to determining the identifier was erroneously added, removing the identifier from the lockout list.
8. The method of claim 5 , wherein the first and second valid verifications include keys derived from unique identifiers of the consumer device and the enterprise device, respectively.
9. A computer program product for mutual authentication of communications, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a device to cause the device to:
detect an incoming communication to a consumer device from an enterprise device;
in response to detecting the incoming communication, causing a verification interface to be displayed on the consumer device;
receive, from the consumer device, a first valid verification via the verification interface;
in response to receiving the first valid verification, causing a challenge interface to be displayed on the enterprise device;
receive, from the enterprise device, a second valid verification via the challenge interface;
in response to receiving the second valid verification, present, to both the consumer device and the enterprise device, a verification credential; and
based on the second valid verification, establish, between the consumer device and the enterprise device, a new connection for the incoming communication.
10. The computer program product of claim 9 , wherein the first valid verification includes an authentic biometric measurement of a user of the consumer device, wherein the biometric measurement confirms the identity of the user of the consumer device.
11. The computer program product of claim 9 , wherein an invalid verification is received via the verification interface, the program instructions further causing the device to:
determine a security criterion has been met; and
in response to determining the security criterion has been met, add an identifier for the consumer device to a lockout list.
12. The computer program product of claim 9 , wherein an invalid verification is received via the challenge interface, the program instructions further causing the device to:
determine a security criterion has been met; and
in response to determining the security criterion has been met, add an identifier for the enterprise device to a lockout list.
13. The computer program product of claim 9 , wherein the first and second valid verifications are executed via an out-of-band line of communication.
14. The computer program product of claim 11 , wherein the program instructions further cause the device to:
determine the identifier was erroneously added to the lockout list; and
in response to determining the identifier was erroneously added, remove the identifier from the lockout list.
15. The computer program product of claim 12 , wherein the program instructions further cause the device to:
determine the identifier was erroneously added to the lockout list; and
in response to determining the identifier was erroneously added, remove the identifier from the lockout list.
16. The computer program product of claim 13 , wherein the first and second valid verifications include keys derived from unique identifiers of the consumer device and the enterprise device, respectively.
17. A system for mutual authentication of communications, comprising:
a memory with program instructions stored thereon; and
a processor in communication with the memory, wherein the program instructions are executable by the processor to cause the system to:
detect an incoming communication to a consumer device from an enterprise device;
in response to detecting the incoming communication, causing a verification interface to be displayed on the consumer device;
receive, from the consumer device, a first valid verification via the verification interface;
in response to receiving the first valid verification, causing a challenge interface to be displayed on the enterprise device;
receive, from the enterprise device, a second valid verification via the challenge interface;
in response to receiving the second valid verification, present, to both the consumer device and the enterprise device, a verification credential; and
based on the second valid verification, establish, between the consumer device and the enterprise device, a new connection for the incoming communication.
18. The system of claim 17 , wherein the first valid verification includes an authentic biometric measurement of a user of the consumer device, wherein the biometric measurement confirms the identity of the user of the consumer device.
19. The system of claim 17 , wherein the first and second valid verifications are executed via an out-of-band line of communication.
20. The system of claim 19 , wherein the first and second valid verifications include keys derived from unique identifiers of the consumer device and the enterprise device, respectively.