Two-factor authentication systems and methods

摘要

Systems and methods for authenticating defined user actions over a computer network. An authentication service receives an authentication request from an authenticating service to perform an action on behalf of a user. The authentication service then sends a permission request to a mobile device associated with the user, asking the user whether or not the action should be allowed. The user sends a permission response via the mobile device to the authentication service, granting or denying the action. The user may automate future similar responses so long as at least one automation criterion is met (e.g., the physical location of the mobile device), eliminating the need to manually provide a response to future permission requests. Information necessary to determine whether the automation criterion is met is stored locally on the mobile device.

主权项

1. A non-transitory computer-readable medium having computer instructions stored thereon that are capable of causing a mobile device to perform operations comprising:
transmitting login information for a user of the mobile device to an authorization system and receiving confirmation of a login of the user to a user account; while the user is logged in to the user account, receiving a first permission request from the authorization system to perform an action related to the user account; causing display of a message that permits a user to select whether to automate a response for future permission requests if at least one automation criterion is satisfied; receiving first user input responsive to the message; after receiving the first user input, receiving a second permission request from the authorization system while the user is logged in to the user account, wherein the second permission request is to perform an action related to the user account; determining that the at least one automation criterion is met for the second permission request; and in response to the determining, automatically responding to the second permission request based on the first user input without requesting additional user input indicating whether to grant or deny the second permission request.