Intelligent authentication gateway
AssigneeIntuit Inc.
InventorsBernard Samuel Diwakar, Gaurav Varma, Mark Joseph Hughes
Life of this patent
Estimating the term…
Abstract
Systems and methods for user authentication are disclosed. An example method includes receiving a request for access to a first secured service, the request corresponding to a first user, determining whether or not the request for access is valid, in response to determining that the request for access is valid, determining whether or not the first user has successfully performed a secondary authentication within a predetermined time period of the request for access, and in response to determining that the first user has successfully performed the secondary authentication within the predetermined time period of the valid request for access, providing the first user with access to the secured service.
Claims17
A computer-implemented method for user authentication, the method performed by an intelligent authentication gateway (IAG) and comprising:
- receiving a request for access to a first secured service, the request corresponding to a first user;
- determining whether or not the request for access is valid;
- in response to determining that the request for access is valid, determining whether or not the first user has successfully performed a secondary authentication within a predetermined time period of the request for access, the secondary authentication corresponding to a previous request for access to a second secured service associated with the first secured service;
- in response to determining that the first user has not successfully performed the secondary authentication within the predetermined time period of the request for access, denying the first user access to the first secured service;
- and
- in response to determining that the first user has successfully performed the secondary authentication within the predetermined time period of the valid request for access, providing the first user with access to the first secured service.
An authentication system, comprising:
- one or more processors;
- and
- a memory storing instructions that, when executed by the one or more processors, causes the system to perform operations comprising:
- receiving a request for access to a first secured service, the request corresponding to a first user;
- determining whether or not the request for access is valid;
- in response to determining that the request for access is valid, determining whether or not the first user has successfully performed a secondary authentication within a predetermined time period of the request for access, the secondary authentication corresponding to a previous request for access to a second secured service associated with the first secured service;
- in response to determining that the first user has not successfully performed the secondary authentication within the predetermined time period of the request for access, denying the first user access to the first secured service;
- and
- in response to determining that the first user has successfully performed the secondary authentication within the predetermined time period of the request for access, providing the first user with access to the first secured service.
A computer-implemented method for user authentication, the method performed by an intelligent authentication gateway (IAG) and comprising:
- receiving a non-browser based request for access to a first database, the request corresponding to a first user;
- determining whether or not the non-browser based request for access is valid;
- in response to determining that the non-browser based request for access is valid, determining whether or not the first user has successfully performed a single sign-on authentication using a browser-based interface within a predetermined time period of the request for access, the single sign-on authentication corresponding to a previous request for access to a second secured service associated with the first database;
- in response to determining that the first user has not successfully performed the secondary authentication within the predetermined time period of the request for access, denying the first user access to the first secured service;
- and
- in response to determining that the first user has successfully performed the single sign-on authentication within the predetermined time period of the request for access, providing the first user with access to the first database.
Dependencies are inferred from the claim text.