Patent ID: 8639926
Filing Date: 2014-01-28
Classification: G06F,H04L,H04W

Abstract:
1. A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors configured to perform the method, comprising: initially authenticating a mobile device for a user a first time; acquiring policy that defines information that the mobile device is to collect for multifactor authentication, the policy also defines types of information to collect for the mobile device and where the mobile device can collect those types of information; dynamically pushing the policy to the mobile device; receiving from the mobile device the information, which the mobile device collected without interaction from the user based on the policy and at least some of the information external to the mobile device for an external physical environment of the mobile device that captures identifiers for other devices that are communicating with the mobile device; and performing authentication a second time using the information, and changing the policy ensuring that the policy is different for a next multifactor authentication for the user a subsequent time after the first time.