# US 10,454,960 B2 · Method of and system for user authentication in electronic service for transmission of digital objects > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,454,960 B2 - Document ID: US10454960B2 - Status: Granted - Kind: B2 - Application number: 15/699,050 - Filed: 2017-09-08 - Published: 2018-03-15 - Granted: 2019-10-22 - Earliest claimed: 2016-09-13 - Assignees: Yandex Europe AG - Applicants: Yandex Europe AG - Inventors: Dmitriy Nikolaevich Kovega; Ekaterina Aleksandrovna Kovega - Web page: https://patentgrep.com/patent/US10454960B2 ## CPC - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - G06F 3/048: Interaction techniques based on graphical user interfaces [GUI] - G06Q 10/107: Computer-aided management of electronic mailing [e-mailing] - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/102: {Entity profiles} - H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)} - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A method of and a system for user authentication in an electronic service for transmitting digital objects, the electronic service accessible by a client device via a client application, the client application associated with at least one native network protocol. The method includes receiving a request for access to a user profile in the electronic service, including user account data and at least one user behavior parameter; responsive to at least one user behavior parameter being different from the user behavior parameters stored in the user profile, creating a digital object with an indication of a verification routine; transmitting the digital object via the native network protocol to the client application, the digital object configured to cause the client device to perform the verification routine via at least one non-native network protocol; responsive to the verification routine rendering a positive outcome, granting access to the user profile. ## Claims ### Claim 1 A method of user authentication in an electronic service, the electronic service for transmitting, via a communication network, digital objects from a server to a client device associated with a user, the electronic service executable by the server and configured to be accessed by the client device via a client application executable by the client device, the client application configured to transmit data using at least one native network protocol, the method comprising: receiving, by the server from the client device, via the at least one native network protocol, a request for access to a user profile in the electronic service, the request having been generated by the client application; the request including user account data and at least one user behavior parameter; responsive to at least one user behavior parameter being different from the user behavior parameters stored in the user profile, creating a digital object with an indication of a verification routine; creating a user pseudo profile, the user pseudo profile being an abbreviated version of the user profile, the user pseudo profile including a portion of the user profile data that includes previously downloaded digital objects and the digital object with the indication of the verification routine; granting access to the user pseudo profile via the at least one native network protocol to the client application used for sending the request; the digital object with the indication of the verification routine accessible in the user pseudo profile being configured to cause the client device to perform the verification routine via at least one non-native network protocol; responsive to the verification routine having been executed via the at least one non-native network protocol, rendering a positive outcome, granting access to the user profile in the electronic service for the client device. ### Claim 2 (depends on 1) The method of claim 1, wherein the verification routine is configured to be performed through at least one non-native network protocol in a different application, the different application being configured to communicate via at least one non-native protocol. ### Claim 3 (depends on 2) The method of claim 2, wherein the different application comprises a browser application. ### Claim 4 (depends on 1) The method of claim 1, wherein the user behavior parameter stored in the user profile comprises at least one of the following: a network address regularly used to access the electronic service; geolocation data related to a typical location of the client device when accessing the electronic service; a version of an operating system of the client device accessing the electronic service; user's typical service access time pattern. ### Claim 5 (depends on 1) The method of claim 1, wherein responsive to the request for access to the user profile, the method further comprises retrieving the user profile and comparing at least one user behavior parameter contained in the request with the user behavior parameters stored in the user profile, the user behaviour parameters stored in the user profile having been generated on the basis of a plurality of past user's interactions with the electronic service. ### Claim 6 (depends on 1) The method of claim 1, wherein the non-native network protocol is one of: HTTP or HTTPS. ### Claim 7 (depends on 1) The method of claim 1, wherein the electronic service is also accessible through a web interface and the digital object comprises a link to the verification routine, the link to be accessed by the web interface. ### Claim 8 (depends on 1) The method of claim 1, the method further comprising storing, in the user profile, the user behavior parameter received in the request for access. ### Claim 9 (depends on 1) The method of claim 1, wherein responsive to an absence of a confirmation of the verification routine, the method further comprises creating an additional digital object with an indication of an additional verification routine and transmitting the additional digital object through the native network protocol to the client device. ### Claim 10 (depends on 1) The method of claim 1, wherein responsive to an absence of a confirmation of the verification routine, the method further comprises blocking access to the user profile for the client device. ### Claim 11 (depends on 1) The method of claim 1, wherein the electronic service for transmission of digital objects comprises an instant messaging service, and wherein the native network protocol comprises XMPP. ### Claim 12 (depends on 1) The method of claim 1, wherein the electronic service for data transmission comprises an email service, and wherein the native network protocol comprises at least one of: POP3, or SMTP, or IMAP. ### Claim 13 (depends on 1) The method of claim 1, wherein the electronic service for data transmission comprises a personal cloud storage, and wherein the native network protocol comprises at least one of: WebDav, or FTP, or SSH, RSync, or SCP, or SFTP or FTPS. ### Claim 14 (depends on 1) The method of claim 1, wherein responsive to an absence of a confirmation of the verification routine, the method further comprises creating an additional digital object with an indication of an additional verification routine and transmitting the additional digital object through the native network protocol to the client, and wherein the method further comprises after transmitting the additional digital object: initiating display of the additional digital object with an indication of the additional verification routine in the client application in the user pseudo-profile. ### Claim 15 (depends on 1) The method of claim 1, wherein at least one digital object associated with the user profile in the electronic service is hidden in the user pseudo-profile. ### Claim 16 A server for user authentication in a service for transmission of digital objects, the server comprising a processor, the processor executing an electronic service, the electronic service for transmitting, via a communication network, digital objects from the server to a client device associated with a user, the electronic service configured to be accessed by the client device via a client application executable by the client device, the client application configured to transmit data using at least one native network protocol, the processor is configured to: receive from the client device, via the at least one native network protocol, a request for access to a user profile in the electronic service, the request having been generated by the client application; the request including user account data and at least one user behavior parameter; responsive to at least one user behavior parameter being different from the user behavior parameters stored in the user profile, create a digital object with an indication of a verification routine; create a user pseudo profile, the user pseudo profile being an abbreviated version of the user profile, the user pseudo profile including a portion of the user profile data that includes previously downloaded digital objects and the digital object with the indication of the verification routine; grant access to the user pseudo profile via the at least one native network protocol to the client application used for sending the request; the digital object with the indication of the verification routine accessible in the user pseudo profile being configured to cause the client device to perform the verification routine via at least one non-native network protocol; responsive to the verification routine, having been executed via the at least one non-native network protocol, rendering a positive outcome, grant access to the user profile in the electronic service for the client device. ### Claim 17 A method of user authentication in an electronic service, the electronic service for transmitting, via a communication network, digital objects from a server to a client device associated with a user, the electronic service executable by the server and configured to be accessed by the client device via a client application executable by the client device, the client application configured to transmit data using at least one native network protocol, the native network protocol being at least one of: POP3, or SMTP, or IMAP, or XMPP; the method comprising: receiving, by the server from the client device, via the at least one native network protocol, a request for access to a user profile in the electronic service, the request having been generated by the client application; the request including user account data and at least one user behavior parameter; responsive to at least one user behavior parameter being different from the user behavior parameters stored in the user profile, creating a digital object with an indication of a verification routine; creating a user pseudo profile, the user pseudo profile being an abbreviated version of the user profile, the user pseudo profile including a portion of the user profile data that includes previously downloaded digital objects and the digital object with the indication of the verification routine; granting access to the user pseudo profile via the at least one native network protocol to the client application used for sending the request; the digital object with the indication of the verification routine accessible in the user pseudo profile being configured to cause the client device to perform the verification routine via at least one non-native network protocol; receiving a response to the verification routine sent via the client application through the at least one native network protocol; responsive to the verification routine, having been executed via the native network protocol, rendering a positive outcome, granting access to the user profile in the electronic service for the client device.