# US 12,182,235 B1 · System and method for authenticating users using weak authentication techniques, with differences for different features > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,235 B1 - Document ID: US12182235B1 - Status: Granted - Kind: B1 - Application number: 17/707,918 - Filed: 2022-03-29 - Granted: 2024-12-31 - Earliest claimed: 2014-03-03 - Assignees: Charles Schwab & Co., Inc. - Applicants: Charles Schwab & Co., Inc. - Inventors: Valery Zubovsky; Charles E. Gotlieb - Web page: https://patentgrep.com/patent/US12182235B1 ## CPC - G06F 21/31: User authentication - G06F 21/44: Program or device authentication - G06F 21/46: by designing passwords or checking the strength of passwords - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system and method uses different authentication techniques, including weak passive authentication techniques, to authenticate users by generating a score and comparing it to a threshold selected according to the feature the user is requesting. ## Claims ### Claim 1 A computer-implemented method of operating a server to grant a user of a user device a feature among a plurality of features available for an account associated with the user, comprising: receiving variables for each of a plurality of different combinations of: A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights or at least one threshold that are each associated with respective ones of the different combinations; receiving, from the user device, a request to provide the feature from among the plurality of features; collecting passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user; computing, by a hardware computer processor coupled to a computer memory, a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information; selecting at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of: A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices; comparing the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of: A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected; providing the feature to the user of the user device, in response to the comparing determining that the user is authentic from the passive authentication information; and in response to the comparing being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by, ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques, determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique, collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique. ### Claim 2 (depends on 1) The method of claim 1, wherein the providing provides the feature to the user of the user device, in response to the determining that the user is authentic based on a combination of the passive authentication information and the active authentication information. ### Claim 3 (depends on 2) The method of claim 2, additionally comprising: selecting the at least one active authentication technique based on the threshold. ### Claim 4 (depends on 2) The method of claim 2, wherein the active authentication information does not comprise a password. ### Claim 5 (depends on 2) The method of claim 2 wherein all of the at least one active authentication technique does not have a binary outcome comprising success or failure. ### Claim 6 (depends on 1) The method of claim 1, wherein the plurality of features include at least low security features and high security features such that, for a same one of the at least one of a plurality of devices, the high security features require a higher one of the at least one threshold for the user than the low security features, the high security features including features facilitating a transferring of assets out of the account associated with the user. ### Claim 7 A server for granting a user of a user device a feature among a plurality of features available for an account associated with the user, the server comprising: a memory; and processing circuitry configured to execute instructions stored in the memory to configure the server to, receive variables for each of a plurality of different combinations of: A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights, or at least one threshold that are each associated with respective ones of the different combinations, receive, from the user device, a request to provide the feature from among the plurality of features, collect passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user, compute a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information, select at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of: A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices, compare a combination of the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of: A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected, provide the feature to the user of the user device, in response to determining that the user is authentic from the passive authentication information, and in response to the server being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by, ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques, determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique, collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique. ### Claim 8 (depends on 7) The server of claim 7, wherein the providing provides the feature to the user of the user device, in response to determining that the user is authentic based on a combination of the passive authentication information and the active authentication information. ### Claim 9 (depends on 8) The server of claim 8, wherein the processing circuitry is further configured to select the at least one active authentication technique based on the threshold. ### Claim 10 (depends on 8) The server of claim 8, wherein the active authentication information does not comprise a password. ### Claim 11 (depends on 8) The server of claim 8 wherein all of the at least one active authentication technique does not have a binary outcome comprising success or failure. ### Claim 12 (depends on 7) The server of claim 7, wherein the plurality of features include at least low security features and high security features such that, for a same one of the at least one of a plurality of devices, the high security features require a higher one of the at least one threshold for the user than the low security features, the high security features including features facilitating a transferring of assets out of the account associated with the user. ### Claim 13 A non-transitory computer readable medium having computer readable program code embodied therein that, when executed by a server, configures the server to grant a user of a user device a feature among a plurality of features available for an account associated with the user by: receiving variables for each of a plurality of different combinations of: A) the plurality of features and B) a plurality of devices, the variables including at least one formula, at least one set of weights, or at least one threshold that are each associated with respective ones of the different combinations; receiving, from the user device, a request to provide the feature from among the plurality of features; collecting passive authentication information from the user device and/or the user, the passive authentication information being usable to passively authenticate the user device and/or the user with the server without interaction with the user; computing a plurality of component scores for respective ones of a plurality of authentication techniques, responsive to the passive authentication information; selecting at least one of the at least one set of weights, at least one formula and at least one threshold based on a requested one of the plurality of features and at least one of: A) a type of the device, and B) the device such that, for at least one of the plurality of features, a different one of the at least one threshold is required to allow the at least one of the plurality of features to be provided to same one of the user on different ones of the plurality of devices; comparing a combination of the plurality of component scores to a threshold to determine whether the user is authentic from the passive authentication information, wherein at least one of: A) the combination is responsive to the at least one formula and/or the at least one set of weights selected, and B) the threshold comprises at least one of the at least one threshold selected; providing the feature to the user of the user device, in response to the comparing determining that the user is authentic from the passive authentication information; and in response to the comparing being unable to determine the user is authentic from the passive authentication information, requesting and receiving, from the user, active authentication information associated with at least one selected active authentication technique from among a plurality of active authentication techniques by, ranking the plurality of active authentication techniques in an order based on stored inconvenience scores each indicating an amount of the interaction with the user for respective ones of the plurality of active authentication techniques, determining one or more of the plurality of active authentication techniques that would satisfy the threshold while minimizing a total of the inconvenience scores for the one or more of the plurality of active authentication techniques to determine the at least one selected active authentication technique, collecting the active authentication information associated with the at least one selected active authentication technique through interaction with the user, and providing the feature to the user of the user device, in response to determining that the user is authentic from the at least one selected active authentication technique. ### Claim 14 (depends on 13) The non-transitory computer readable medium of claim 13, wherein the providing provides the feature to the user of the user device, in response to determining that the user is authentic based on a combination of the passive authentication information and the active authentication information. ### Claim 15 (depends on 14) The non-transitory computer readable medium of claim 14, additionally comprising, computer readable program code configured to cause the server to select the at least one active authentication technique based on the threshold. ### Claim 16 (depends on 14) The non-transitory computer readable medium of claim 14, wherein the active authentication information does not comprise a password. ### Claim 17 (depends on 14) The non-transitory computer readable medium of claim 14 wherein all of the at least one active authentication technique does not have a binary outcome comprising success or failure.