Back to results
US 10,097,527 B2Granted
Authentication management
AssigneeInternational Business Machines Corporation
InventorsKevin C. Brown, Peter W. Jenkins, Stephen D. Pipes, Larissa C. Romualdo Suzuki
Life of this patent
Estimating the term…
Abstract
A method of managing authentication during a user session comprises the steps of operating a user session for a specific user, maintaining a user authentication level for the user session, monitoring one or more factors relating to the user's activity, applying one or more rules to the monitored factors, detecting that a rule has indicated the user's current authentication level is too high, and lowering the user's authentication level, without ending the user's session.
Claims15
A computer-implemented method of managing authentication during a currently active user session, the computer-implemented method comprising:
- accessing, by a server, an online service for a user of a mobile device connected to a local wireless network inside a residence of the user, wherein the local wireless network is connected to an external network connecting the mobile device to the server;
- operating, by the server, the currently active user session specific to the user at a current high authentication level corresponding to a high-risk activity performed by the user on the online service;
- monitoring, by the server, a current location of the user during the currently active user session on the online service specific to the user based the mobile device being connected to the local wireless network inside the residence of the user, wherein a rule defines a current authentication level of the user that exceeds a predetermined threshold for intent of the user when the monitored current location of the user during the currently active user session on the online service specific to the user is outside of the residence of the user;
- detecting, by the server, whether the monitored current location of the user during the currently active user session on the online service specific to the user is outside the residence of the user based on the mobile device no longer being connected to the local wireless network inside the residence of the user;
- and
- lowering, by the server, the current high authentication level of the user to a lower level of authentication autonomously during the currently active user session on the online service specific to the user and without ending the currently active user session on the online service specific to the user in response to the server detecting that the monitored current location of the user during the currently active user session on the online service specific to the user being outside the residence of the user based on the mobile device not being connected to the local wireless network inside the residence of the user.
3 more elements
A computer system for managing authentication during a currently active user session, the computer system comprising:
- a processor within a server;
- and
- a computer readable storage medium, in communication with the processor, having computer readable program instructions stored thereon, when executed by the processor directs the computer system to:
- access an online service for a user of a mobile device connected to a local wireless network inside a residence of the user, wherein the local wireless network is connected to an external network connecting the mobile device to the server;
- operate the currently active user session specific to the user at a current high authentication level corresponding to a high-risk activity performed by the user on the online service;
- monitor a current location of the user during the currently active user session on the online service specific to the user based the mobile device being connected to the local wireless network inside the residence of the user, wherein a rule defines a current authentication level of the user that exceeds a predetermined threshold for intent of the user when the monitored current location of the user during the currently active user session on the online service specific to the user is outside of the residence of the user;
- detect whether the monitored current location of the user during the currently active user session on the online service specific to the user is outside the residence of the user based on the mobile device no longer being connected to the local wireless network inside the residence of the user;
- and
- lower the current high authentication level of the user to a lower level of authentication autonomously during the currently active user session on the online service specific to the user and without ending the currently active user session on the online service specific to the user in response to detecting that the monitored current location of the user during the currently active user session on the online service specific to the user being outside the residence of the user based on the mobile device not being connected to the local wireless network inside the residence of the user.
6 more elements
A computer program product for managing authentication during a currently active user session, the computer program product comprising a non-transitory computer readable medium having instructions embodied thereon when executed by a computer direct the computer to:
- access an online service for a user of a mobile device connected to a local wireless network inside a residence of the user, wherein the local wireless network is connected to an external network connecting the mobile device to the computer;
- operate the currently active user session specific to the user at a current high authentication level corresponding to a high-risk activity performed by the user on the online service;
- monitor a current location of the user during the currently active user session on the online service specific to the user based the mobile device being connected to the local wireless network inside the residence of the user, wherein a rule defines a current authentication level of the user that exceeds a predetermined threshold for intent of the user when the monitored current location of the user during the currently active user session on the online service specific to the user is outside of the residence of the user;
- detect whether the monitored current location of the user during the currently active user session on the online service specific to the user is outside the residence of the user based on the mobile device no longer being connected to the local wireless network inside the residence of the user;
- and
- lower the current high authentication level of the user to a lower level of authentication autonomously during the currently active user session on the online service specific to the user and without ending the currently active user session on the online service specific to the user in response to detecting that the monitored current location of the user during the currently active user session on the online service specific to the user being outside the residence of the user based on the mobile device not being connected to the local wireless network inside the residence of the user.
3 more elements
Dependencies are inferred from the claim text.