Using dynamic combinations of authentication factors in verification procedures

A computer program product, comprising a computer readable storage medium having program instructions embodied therewith, the program instructions readable by a processor, executable by the processor, or readable and executable by the processor, to cause the processor to:

• in response to receiving a request from a user and determining that a recently verified token group exists, determine whether a supplemental authorization requirement associated with the user has been met;
• in response to determining the supplemental authorization requirement has been met and that the user is authorized to issue the request, generate a multi-factor authentication challenge for the user, the multi-factor authentication challenge including a dynamic combination of available authentication factors corresponding to the user, wherein the dynamic combination of authentication factors includes (i) at least one user defined authentication factor, (ii) at least one biometric authentication factor, and (iii) at least one activity-based authentication factor,
• use a digital twin of the user to satisfy at least one of the authentication factors in the multi-factor authentication challenge;
• receive inputs for remaining unsatisfied ones of the authentication factors in the multi-factor authentication challenge;
• and
• determine whether the inputs received satisfy the remaining unsatisfied ones of the authentication factors in the multi-factor authentication challenge.

A system, comprising:

• a processor;
• and
• logic integrated with the processor, executable by the processor, or integrated with and executable by the processor, the logic being configured to:
• in response to receiving a request from a user and determining that a recently verified token group exists, determine whether a supplemental authorization requirement associated with the user has been met;
• in response to determining the supplemental authorization requirement has been met and that the user is authorized to issue the request, generate a multi-factor authentication challenge for the user, the multi-factor authentication challenge including a dynamic combination of available authentication factors corresponding to the user, wherein the dynamic combination of authentication factors includes (i) at least one user defined authentication factor, (ii) at least one biometric authentication factor, and (iii) at least one activity-based authentication factor;
• use a digital twin of the user to satisfy at least one of the authentication factors in the multi-factor authentication challenge;
• receive inputs for remaining unsatisfied ones of the authentication factors in the multi-factor authentication challenge;
• and
• determine whether the inputs received satisfy the remaining unsatisfied ones of the authentication factors in the multi-factor authentication challenge.