Granted Patent B2

US 12,598,180 · App. 18/123,023 · Granted Apr 7, 2026

Inventors: Jay Prakash Tiwari (Princeton, NJ); Praveen Kumar Sheena Poojary (Jersey city, NJ); Senthil Kumar Chadramohan (Karnataka, IN)

Assignee: Cisco Technology, Inc.

H04L63/0869H04L63/083H04W4/80H04W12/06

Abstract

Claims (55)

1 . A method comprising:

receiving, by a Multi-Factor Authentication (MFA) service and from an application service, an indication of a request for a user account to access the application service via a primary device, the request including login credentials associated with the user account;

determining, using a personal area networking (PAN) protocol, that the primary device and a secondary device are not within a threshold proximity to each other;

and

in response to determining that the primary device and the secondary device are not within the threshold proximity to each other, refraining from transmitting a push notification to the secondary device, wherein the push notification includes an authentication request generated by the MFA service requesting that the user account authenticate to gain access to the application service.

2 . The method of claim 1 , further comprising:

transmitting a notification to the secondary device that the login credentials associated with the user account may have been stolen; and

prompting for a change to a password associated with the user account.

3 . The method of claim 1 , further comprising receiving, from an agent running on the primary device, information indicating whether the primary device and secondary device are paired via the PAN protocol.

4 . The method of claim 3 , further comprising:

monitoring the PAN protocol pairing information received from the agent running on the primary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

5 . The method of claim 1 , wherein the request for the user account to access the application service via the primary device, also includes a Universally Unique Identifier (UUID) for the primary device and further comprising receiving, from the secondary device, PAN protocol pairing information indicating whether the secondary device is paired with the primary device having the UUID included in the request.

6 . The method of claim 5 , further comprising:

monitoring the PAN protocol pairing information received from the secondary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

7 . The method of claim 1 , further comprising:

determining, using the personal area networking (PAN) protocol, that the primary device and a secondary device have moved within a threshold proximity to each other; and

in response to the primary device and the secondary device being within the threshold proximity to each other, determining, at the MFA service, to allow a push notification to be transmitted to the secondary device requesting user input to grant access to the user account by the primary device.

8 . A system comprising:

one or more processors; and

one or more non-transitory computer-readable media storing instructions that, when executed, cause the one or more processors to perform operations comprising:

receiving, by a Multi-Factor Authentication (MFA) service and from an application service, an indication of a request for a user account to access the application service via a primary device, the request including login credentials associated with the user account;

determining, using a personal area networking (PAN) protocol, that the primary device and a secondary device are not within a threshold proximity to each other;

and

in response to determining that the primary device and the secondary device are not within the threshold proximity to each other, refraining from transmitting a push notification to the secondary device, wherein the push notification includes an authentication request generated by the MFA service requesting that the user account authenticate to gain access to the application service.

9 . The system of claim 8 , the operations further comprising:

transmitting a notification to the secondary device that the login credentials associated with the user account may have been stolen; and

prompting for a change to a password associated with the user account.

10 . The system of claim 8 , the operations further comprising receiving, from an agent running on the primary device, information indicating whether the primary device and secondary device are paired via the PAN protocol.

11 . The system of claim 10 , the operations further comprising:

monitoring the PAN protocol pairing information received from the agent running on the primary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

12 . The system of claim 8 , wherein the request for the user account to access the application service via the primary device, also includes a Universally Unique Identifier (UUID) for the primary device and the operations further comprising receiving, from the secondary device, PAN protocol pairing information indicating whether the secondary device is paired with the primary device having the UUID included in the request.

13 . The system of claim 12 , the operations further comprising:

monitoring the PAN protocol pairing information received from the secondary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

14 . The system of claim 8 , the operations further comprising:

determining, using the personal area networking (PAN) protocol, that the primary device and a secondary device have moved within a threshold proximity to each other; and

in response to the primary device and the secondary device being within the threshold proximity to each other, determining, at the MFA service, to allow a push notification to be transmitted to the secondary device requesting user input to grant access to the user account by the primary device.

15 . One or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform operations comprising:

receiving, by a Multi-Factor Authentication (MFA) service and from an application service, an indication of a request for a user account to access the application service via a primary device, the request including login credentials associated with the user account;

determining, using a personal area networking (PAN) protocol, that the primary device and a secondary device are not within a threshold proximity to each other;

in response to determining that the primary device and the secondary device are not within the threshold proximity to each other, refraining from transmitting a push notification to the secondary device, wherein the push notification includes an authentication request generated by the MFA service requesting that the user account authenticate to gain access to the application service.

16 . The one or more non-transitory computer-readable media of claim 15 , the operations further comprising:

transmitting a notification to the secondary device that the login credentials associated with the user account may have been stolen; and

prompting for a change to a password associated with the user account.

17 . The one or more non-transitory computer-readable media of claim 15 , the operations further comprising receiving, from an agent running on the primary device, information indicating whether the primary device and secondary device are paired via the PAN protocol.

18 . The one or more non-transitory computer-readable media of claim 17 , the operations further comprising:

monitoring the PAN protocol pairing information received from the agent running on the primary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

19 . The one or more non-transitory computer-readable media of claim 15 , wherein the request for the user account to access the application service via the primary device, also includes a Universally Unique Identifier (UUID) for the primary device and the operations further comprising receiving, from the secondary device, PAN protocol pairing information indicating whether the secondary device is paired with the primary device having the UUID included in the request.

20 . The one or more non-transitory computer-readable media of claim 19 , the operations further comprising:

monitoring the PAN protocol pairing information received from the secondary device; and

terminating a communication session between the primary device and the application service when the PAN protocol pairing information indicates the primary device and secondary device are not paired via the PAN protocol.

Assignments (1)

Continuity (1)

References Cited (63)