Back to results
US 12,182,235 B1Granted
System and method for authenticating users using weak authentication techniques, with differences for different features
AssigneeCharles Schwab & Co., Inc.
InventorsValery Zubovsky, Charles E. Gotlieb
Life of this patent
Estimating the term…
Abstract
A system and method uses different authentication techniques, including weak passive authentication techniques, to authenticate users by generating a score and comparing it to a threshold selected according to the feature the user is requesting.
Claims17
A computer-implemented method of operating a server to grant a user of a user device a feature among a plurality of features available for an account associated with the user, comprising:
- receiving variables for each of a plurality of different combinations of:
- A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights or at least one threshold that are each associated with respective ones of the different combinations;
- receiving, from the user device, a request to provide the feature from among the plurality of features;
- collecting passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user;
- computing, by a hardware computer processor coupled to a computer memory, a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information;
- selecting at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of:
- A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices;
- comparing the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of:
- A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected;
- providing the feature to the user of the user device, in response to the comparing determining that the user is authentic from the passive authentication information;
- and
- in response to the comparing being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by,
- ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques,
- determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique,
- collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and
- providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique.
13 more elements
A server for granting a user of a user device a feature among a plurality of features available for an account associated with the user, the server comprising:
- a memory;
- and
- processing circuitry configured to execute instructions stored in the memory to configure the server to,
- receive variables for each of a plurality of different combinations of:
- A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights, or at least one threshold that are each associated with respective ones of the different combinations,
- receive, from the user device, a request to provide the feature from among the plurality of features,
- collect passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user,
- compute a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information,
- select at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of:
- A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices,
- compare a combination of the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of:
- A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected,
- provide the feature to the user of the user device, in response to determining that the user is authentic from the passive authentication information, and
- in response to the server being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by,
- ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques,
- determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique,
- collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and
- providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique.
15 more elements
A non-transitory computer readable medium having computer readable program code embodied therein that, when executed by a server, configures the server to grant a user of a user device a feature among a plurality of features available for an account associated with the user by:
- receiving variables for each of a plurality of different combinations of:
- A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights, or at least one threshold that are each associated with respective ones of the different combinations;
- receiving, from the user device, a request to provide the feature from among the plurality of features;
- collecting passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user;
- computing a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information;
- selecting at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of:
- A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices;
- comparing a combination of the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of:
- A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected;
- providing the feature to the user of the user device, in response to the comparing determining that the user is authentic from the passive authentication information;
- and
- in response to the comparing being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by,
- ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques,
- determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique,
- collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and
- providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique.
13 more elements
Dependencies are inferred from the claim text.