System and method for collaborative authentication

摘要

Systems and methods are disclosed for collaborative authentication of a person based on an interaction with another person. A request for collaborative authentication is sent to the computing device of a person wanting to access a system, including an authentication ID unique to the request. The person collaborates with another person associated with the system and provides the second person with the authentication ID. The second person sends the authentication ID to the system such that the system associates the second person with the first person. Data is sent to the second person in order to challenge the first person. The first person responds to the challenge using the computing device and the system receives the response. The system compares the response to an expected answer and can either allow or deny the first person access to the system based on the comparison. Co-location may also be verified.

主权项

1. A method for collaborative authentication, comprising:
sending from a server to a collaborative authentication participant an authentication identifier associated with a user at a first computing device; receiving a message at the server from a collaborative authenticator, the message including the authentication identifier, wherein the authentication identifier was provided from the collaborative authentication participant to the collaborative authenticator; determining authentication data based on information associated with the user stored in a database; sending the authentication data from the server to a second computing device based on receiving the message, the authentication data comprising a challenge relating to the user at the first computing device; receiving an authentication response at the server, the authentication response comprising a response to the challenge, wherein the response to the challenge was determined from an interaction between the collaborative authenticator and the collaborative authentication participant: and providing an authentication notification to the user based on the authentication response.