Methods and devices for user authorization

A method for user authorization, the method comprising:

• sending, to an electronic device via a data communication network, a request for an access for a user;
• receiving, from the electronic device via the data communication network in a case that a user risk score indicates medium risk, instructions to run a program to generate the user risk score, wherein the generating is based on data associated with the request, and the user risk score indicating a high risk in a case that the user risk score is above a first threshold value, indicating a medium risk in a case that the user risk score is below the first threshold value and above a second threshold value, or indicating a low risk in a case that the user risk score is below the second threshold value that the user is a non-authorized user;
• running the program, in response to receiving the instructions, to generate a device generated risk score indicating a risk that the request was sent by a non-authorized user;
• sending, via the data communication network, the device generated risk score;
• receiving, from the electronic device via the data communication network in a case that the user risk score indicates high risk, a first indication that the request is rejected;
• and
• receiving, from the electronic device via the data communication network in a case that the user risk score indicates low risk, a second indication that the request is allowed.

An electronic device, comprising:

• a transceiver configured to transmit data to another electronic device and receive data from the another electronic device, via a data communication network;
• and
• processing circuitry configured to
• receive, from the another electronic device via the data communication network, a request for an access for a user;
• generate, based on data associated with the request, a user risk score indicating a risk that the request was sent by a non-authorized user, wherein the user risk score indicates a high risk in a case that the user risk score is above a first threshold value, a medium risk in a case that the user risk scare is below the first threshold value and above a second threshold value, or a low risk in a case that the user risk score is below the second threshold value that the user is a non-authorized user;
• in a case that the user risk score indicates medium risk:
• send, to the another electronic device via the data communication network, instructions to run a program to generate a device generated risk score at the another electronic device;
• receive, from the another electronic device via the data communication network in response to sending the instructions, the device generated risk score from the another electronic device;
• and
• assess authorization of the user based on the device generated risk score;
• in a case that the user risk score indicates high risk, reject the request and/or generate a fraud detection signal to signal a high probability of the request being from a non-authorized user;
• and
• in a case that the user risk score indicates low risk, allow the request.