Systems and methods for providing location-based application authentication using location token service

摘要

Systems and methods for implementing a location token service (LTS) to enhance the security of mobile device identity tokens by using the location of the mobile device to augment the tokens. The LTS enforces re-authentication (login) of the mobile device to one or more applications if the mobile device moves beyond a threshold distance from the location of the last use of the token within a time period defined in a temporal threshold. The LTS increases authentication strength and drastically reduces the potential for spoofing or otherwise permitting unauthorized access to one or more applications on the mobile device.

主权项

1. A method, for authenticating a mobile device associated with a user to permit the mobile device to access an application, comprising:
receiving, by a location token service server, from the mobile device, a first message including a first location of the mobile device, a universal unique identifier associated with the mobile device, a telephone number of the mobile device, a user identification associated with the mobile device, and a password corresponding to the user identification; creating, by the location token service server, in response to the first message, a user session associated with the mobile device; receiving, by the location token service server, from the mobile device, a second message including a second location of the mobile device, the universal unique identifier, the telephone number, the user identification, and the password; determining, by the location token service server, whether the second location is within a threshold distance of the first location; and returning, by the location token service server, to the mobile device, in response to determining that the second location is within the threshold distance of the first location, a token for use by the mobile device in obtaining access to the application.