Intelligent authentication

A method, comprising:

• receiving transaction metadata associated with a transaction attempted by a user;
• accessing an activity log associated with the user, wherein the activity log includes values corresponding to previous transactions made by the user;
• comparing the transaction metadata to the values in the activity log, wherein the comparing comprises identifying a previous transaction of the previous transactions that matches the transaction metadata within a predetermined range of similarity based on a value of the previous transaction;
• determine a threshold indicating whether the transaction is being attempted by the user based, at least in part on the comparison;
• and
• selecting an authentication level for the attempted transaction from a plurality of authentication levels based, at least in part, on the threshold and an authentication class of the previous transaction,
• wherein the authentication level is associated with a likelihood that the user is the same as the user associated with the previous transactions based at least in part on factors of the authentication class;
• and
• wherein the determining manages the values for the factors by assigning and reassigning the values to classes, wherein classes are based at least in part on an activity log of the identified user.

A non-transitory computer-readable medium storing computer-executable instructions that when executed by a computer cause the computer to perform a method, the method comprising:

• receiving transaction metadata associated with a transaction attempted by a user;
• accessing an activity log associated with the user, wherein the activity log includes values corresponding to previous transactions made by the user;
• determining factors of an authentication class corresponding to previous transactions made by the user;
• determining whether the user has a definition corresponding to the values, wherein the definition is associated with a defined authentication level;
• in response to determining that the user does not have a definition, calculating a score for the transaction based on a comparison of the transaction metadata to the values of the previous transactions, wherein the score is associated with a likelihood of an identification of the user based at least in part on factors of the authentication class;
• comparing the score to a plurality of predetermined thresholds;
• and
• selecting an authentication level to implement from the plurality of authentication levels based, at least in part, on the score satisfying the predetermined thresholds;
• and
• wherein the determining manages the values for the factors by assigning and reassigning the values to classes, wherein classes are based at least in part on an activity log of the identified user.