Locking Applications and Devices Using Secure Out-of-Band Channels

摘要

Systems and methods are provided for locking/unlocking a user account for accessing a client application. The systems and methods pair a user account for accessing a client application to a separate user authentication account. The user authentication server managing the user authentication account provides heightened measures for authenticating the identity of the user, such as by voice samples and human authenticator. After the heightened authentication of the user, the user may lock or unlock paired accounts from the user authentication account, wherein preventing all attempts to access the client application using the paired account. The client application may also capture information regarding login attempts to the paired user account. The captured information may be sent to the authentication server for providing reports of login attempts and generating alerts to automatically lock the paired account in cases of suspicious behavior.

主权项

1. A computer-implemented method for changing the lock status of a user account for a client application, the computer-implemented method comprising:
accessing a user authentication account via an authentication application configured on a user device, the user device communicatively coupled to the authentication server, and the user authentication account containing a pairing to the user account for the client application; selecting the pairing and an option to change the status of the pairing via the authentication application; in response to selection of the pairing, authenticating the selector as a registered user of the user authentication account; in response to authenticating the user, sending a request to the authentication server with a pairing code for the pairing and the changed lock status; transmitting, by the authentication server, an event to the client application identified in the pairing code, the event being received by the client application and the changed lock status saved at the client application for the pairing identified in the event; and determining login access to the paired user account by the client application based on the saved lock status stored at the client application.