Back to results
US 10,885,162 B2Granted
Automated determination of device identifiers for risk-based access control in a computer network
AssigneeRSA Security Inc.
InventorAviv Avital
Life of this patent
Estimating the term…
Abstract
A processing device in an illustrative embodiment includes a processor coupled to a memory and is configured to receive user credentials from a user device in conjunction with an access request, to apply one or more automated tests in order to determine one or more device identifiers of the user device, to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers, and to grant or deny the access request based at least in part on the risk score.
Claims20
A method comprising:
- receiving user credentials from a user device in conjunction with an access request;
- determining one or more device identifiers of the user device;
- generating a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers;
- and
- granting or denying the access request based at least in part on the risk score;
- wherein generating the risk score based at least in part on the received user credentials and the one or more determined device identifiers comprises:
- generating the risk score as an initial risk score for the access request utilizing the received user credentials and without utilizing the one or more determined device identifiers;
- and
- responsive to the initial risk score being above a specified threshold, utilizing the one or more determined device identifiers to generate a modified risk score;
- wherein granting or denying the access request is based at least in part on the modified risk score;
- and
- wherein the method is performed by at least one processing device comprising a processor coupled to a memory.
9 more elements
An apparatus comprising:
- at least one processing device comprising a processor coupled to a memory;
- said at least one processing device being configured:
- to receive user credentials from a user device in conjunction with an access request;
- to determine one or more device identifiers of the user device;
- to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers;
- and
- to grant or deny the access request based at least in part on the risk score;
- wherein generating the risk score based at least in part on the received user credentials and the one or more determined device identifiers comprises:
- generating the risk score as an initial risk score for the access request utilizing the one or more determined device identifiers;
- determining that one or more additional device identifiers of the user device are missing from a desired set of device identifiers;
- determining the one or more additional device identifiers;
- and
- generating a modified risk score utilizing the one or more additional device identifiers;
- wherein granting or denying the access request is based at least in part on the modified risk score.
11 more elements
A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device:
- to receive user credentials from a user device in conjunction with an access request;
- to determine one or more device identifiers of the user device;
- to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers;
- and
- to grant or deny the access request based at least in part on the risk score;
- wherein generating the risk score based at least in part on the received user credentials and the one or more determined device identifiers comprises:
- generating the risk score as an initial risk score for the access request utilizing the received user credentials and without utilizing the one or more determined device identifiers;
- and
- responsive to the initial risk score being above a specified threshold, utilizing the one or more determined device identifiers to generate a modified risk score;
- wherein granting or denying the access request is based at least in part on the modified risk score.
7 more elements
An apparatus comprising:
- at least one processing device comprising a processor coupled to a memory;
- said at least one processing device being configured:
- to receive user credentials from a user device in conjunction with an access request;
- to determine one or more device identifiers of the user device;
- to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers;
- and
- to grant or deny the access request based at least in part on the risk score;
- wherein generating the risk score based at least in part on the received user credentials and the one or more determined device identifiers comprises:
- generating the risk score as an initial risk score for the access request utilizing the received user credentials and without utilizing the one or more determined device identifiers;
- and
- responsive to the initial risk score being above a specified threshold, utilizing the one or more determined device identifiers to generate a modified risk score;
- wherein granting or denying the access request is based at least in part on the modified risk score.
9 more elements
Dependencies are inferred from the claim text.