Patent ID: 9722984
Date: 2017-08-01
CPC Classifications: H04L,H04W

Claim:
1. A method, comprising: authenticating, by a server through a first authentication, a request to access a resource, the request that is sent from a first device by a user, and the resource requiring multifactor authentication for successful access by user, wherein authenticating further includes authenticating the user for a first factor of the multifactor authentication as the first authentication; sending, by the server, an audio message to the first device operated by the user in response to successfully authenticating the user through the first factor of the multifactor authentication to access the resource, wherein sending further includes creating the audio message as a portion of the second factor processed for the multifactor authentication required for accessing the resource; receiving, by the server, a response message in response to the audio message that was sent to the first device, wherein receiving, by the server, further includes receiving the response message automatically and without any interaction from the user and automatically sending from a second device operated by the user the response message, and wherein receiving further includes automatically capturing, by the second device, the response message that is to be sent to the server as the first device plays the audio message that originated from the server without any action by the user as output through speakers associated with the first device, wherein automatically capturing further includes capturing, by the second device, the audio message played through the speakers as the response message that is automatically sent by the second device to the server, wherein the response message represents a second portion of the second factor processed for the multifactor authentication required for accessing the resource; and determining, by the server, whether to provide the first device access to the resource in a second authentication by evaluating the audio message as the first portion of the multifactor authentication against the response message as the second portion of the multifactor authentication for the second authentication, and wherein determining further includes verifying a digital signature of the second device from the response message in a third authentication when determining whether to provide the first device access to the resource, and wherein determining further includes pushing a key, by the server, to the second device that a mobile application executing on the second device processes for signing the response message before the second device automatically sends the response message to the server.