Transaction verification through enhanced authentication
AssigneeeBay Inc.
InventorsKevin Sugihara, Bradley Wardman
Life of this patent
Estimating the term…
Abstract
Systems and methods for authenticating requests to use an Application Programming Interface (“API”) are described. In some embodiments, a request to use an API is received. Based on a comparison of the request to use the API with a pattern of activity associated with the client, a determination is made whether the client deviates from an expected behavior. Once a determination that the client deviates from the expected behavior is made, an authentication challenge is generated and issued. In some embodiments, the comparison of the request to use the API with a pattern of activity involves comparing transactional attributes of the request to use the API with past client behavior.
Claims20
A computer-implemented method, comprising:
- receiving a request to use an application programming interface (API) from a client;
- determining that the client deviates from an expected behavior based on comparing the request to use the API with a pattern of activity associated with the client;
- responsive to determining that the client deviates from the expected behavior, generating an authentication challenge;
- and
- issuing the authentication challenge.
One or more non-transitory machine-readable media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations, the operations comprising:
- receiving a request to use an application programming interface (API) from a client;
- determining that the client deviates from an expected behavior based on comparing the request to use the API with a pattern of activity associated with the client;
- responsive to determining that the client deviates from the expected behavior, generating an authentication challenge;
- and
- issuing the authentication challenge.
A computer system comprising:
- one or more processors;
- and
- one or more non-transitory machine-readable media storing computer-useable instructions that, when used by the one or more processors, cause the one or more processors to:
- receive a request to use an application programming interface (API) from a client;
- determine that the client deviates from an expected behavior based on comparing the request to use the API with a pattern of activity associated with the client;
- responsive to determining that the client deviates from the expected behavior, generate an authentication challenge;
- and
- issue the authentication challenge.
Dependencies are inferred from the claim text.