Fraud deterrence for secure transactions

A non-transitory storage medium storing instructions that, when executed, cause one or more processors to perform a method comprising:

• receiving a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
• receiving designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
• obtaining at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the plurality of verification parameter to be met when the acceptable value correlates to a current value determined for the one of the verification parameters during execution of the identity verification process;
• storing a modifiable paradigm, usable as part of the identity verification process, including at least a threshold number of the verification parameters to be met to constitute automatic verification of the user identity, based on correlation between current values of respective ones of the verification parameters, the current values obtained based on a request from the identified user, when compared to the acceptable values for the corresponding respective ones of the verification parameters, the paradigm further defining what constitutes correlation for at least one of the verification parameters;
• determining, based on the first request, the current values of the verification parameters;
• comparing the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met based on the paradigm;
• determining whether the threshold number of the verification parameters are met to automatically verify the user identity;
• in the absence of the threshold number of the verification parameters being met, sending a second request, that requests confirmation of validity of the first request, to a second program that includes at least one designated fraud prevention aspect, to trigger the fraud prevention aspect to request a user response to the second request to verify the first request, the second program installed on an out-of-band device, having a stored prior association with the user identity, and validated for use in conjunction with the identity verification process;
• receiving a transmitted response from the second program, the transmitted response generated by the second program based on the user response and indicating validity of the first request;
• and
• responsive to the transmitted response indicating that the first request is valid, verifying the user identity of the identified user in conjunction with the received first request.

A system comprising:

• one or more processors that are configured, based on execution of instructions stored in a memory accessible to the one or more processors, to:
• receive a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
• receive designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
• obtain at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the verification parameters to be met when the acceptable value correlates to a current value determined for the one of the verification parameters during execution of the identity verification process;
• store a modifiable a paradigm, usable as part of the identity verification process, including at least a definition of sufficient instances of verification parameters being met to constitute automatic verification of the user identity, based on correlation between current values of respective ones of the plurality of verification parameters the current values obtained based on a request from the identified user for which identity verification is performed, when compared to the acceptable values for the corresponding respective ones of the verification parameters, the paradigm further defining what constitutes correlation for at least one of the verification parameters, wherein
• the definition of sufficient instances of verification parameters being met includes at least one of:
• a predefined threshold number of the verification parameters being met, predefined specific ones of the verification parameters being met, or a combination of both;
• receive a first request from the identified user for remote access to the first software program;
• determine, based on the first request, the current values of the verification parameters;
• compare the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met based on the paradigm;
• determining whether the sufficient instances of the verification parameters are met to automatically verify a the user identity;
• in the absence of sufficient instances of the verification parameters being met, send a second request, that requests confirmation of validity of the first request, to a second program that includes at least one designated fraud prevention aspect, to trigger the fraud prevention aspect to present identification of the first request and, in conjunction with the presentation, to request a user response to verify the first request, the second program installed on an out-of-band mobile phone, having a stored prior association with the requesting-user identity, and validated for use in conjunction with the identity verification process;
• receive a transmitted response from the second program, the transmitted response generated by the second program based on the user response and indicating validity of the first request;
• and
• responsive to the transmitted response indicating that the request is valid, verify the user identity of the identified user in conjunction with the received first request.