Apparatus and Method for Authenticating a User via Multiple User Devices

摘要

A method includes forming, during access to a site, an association between a user and a first device. Contact information for a second device associated with the user is obtained. During a subsequent access to the site the first device is recognized. The user is prompted to authenticate without inputting identifying information. The user is authenticated at the site relying upon the association and a positively acknowledged message from the second device.

主权项

1. A method, comprising:
forming, during access to a server, an association between a user and a first device used to access the server, wherein the association constitutes a first possession factor linking the user to the first device; sending a code to the first device; receiving the code and contact information for a second device associated with the user, wherein the contact information facilitates a second possession factor linking the user to the second device; recognizing, during a subsequent access to the server, the first device and therefore establish the first possession factor; sending a message to the second device in response to recognizing; obtaining a positively acknowledged message from the second device and therefore establish the second possession factor; and authenticating the user based upon the first possession factor and the second possession factor.