Back to results
US 12,743,532 B2Granted
Dynamic security challenge authentication
OwnerNan Zhenginventor
Life of this patent
Estimating the term…
Abstract
A method for dynamic security challenge authentication may include generating, based on data about one or more previous interactions of the user with a plurality of applications, files, and devices, one or more security challenges. Examples of interactions include launching an application, editing a file, and logging onto a device. The data may be retrieved from services or components involved with the interactions. The identity of the user may be authenticated based on the responses to the security challenges. Related systems and computer program products are also provided.
Claims20
A system, comprising:
- at least one data processor;
- and
- at least one memory storing instructions, which when executed by the at least one data processor, cause the at least one data processor to at least:
- receive a request to authenticate an identity of a user as part of a process to access one or more applications, the request including a user identifier;
- receive a plurality of device identifiers for a plurality of devices associated with the user identifier;
- retrieve, using each of the plurality of device identifiers, from one or more services or components configured to monitor usage on the plurality of devices, first data corresponding to one or more previous interactions of the user with the one or more applications on a respective device of the plurality of devices;
- retrieve, according to the first data, from the one or more services or components, second data corresponding to one or more files including information indicative of access linked to the user identifier via a respective device;
- generate, based on the first data and the second data, a security challenge including a question relating to the one or more previous interactions of the user via at least one of the plurality of devices;
- and
- authenticate, using multi-factor authentication, based at least on a response to the question of the security challenge, the identity of the user to enable the user to access the one or more applications or a computing resource, wherein the response to the question is one factor in the multi-factor authentication.
7 more elements
A computer-implemented method, comprising:
- receiving a request to authenticate an identity of a user as part of a process to access one or more applications, the request including a user identifier;
- receiving a plurality of device identifiers for a plurality of devices associated with the user identifier;
- retrieving, using each of the plurality of device identifiers, from one or more services or components configured to monitor usage on the plurality of devices, first data corresponding to one or more previous interactions of the user with the one or more applications on a respective device of the plurality of devices;
- retrieving, according to the first data, from the one or more services or components, second data corresponding to one or more files including information indicative of access linked to the user identifier via a respective device;
- in response to the request, generating, based on the first data and the second data, a security challenge including a question relating to the one or more previous interactions of the user via at least one of the plurality of devices;
- and
- authenticating, using multi-factor authentication, based at least on a response to the question of the security challenge, the identity of the user to enable the user to access the one or more applications or a computing resource, wherein the response to the question is one factor in the multi-factor authentication.
4 more elements
A non-transitory computer readable medium storing instructions, which when executed by at least one data processor, result in operations comprising:
- receiving a request to authenticate an identity of a user as part of a process to access an one or more applications, the request including a user identifier;
- receiving a plurality of device identifiers for a plurality of devices associated with the user identifier;
- retrieving, using each of the plurality of device identifiers, from one or more services or components configured to monitor usage on the plurality of devices, first data corresponding to one or more previous interactions of the user with the one or more applications on a respective device of the plurality of devices;
- retrieving, according to the first data, from the one or more services or components, second data corresponding to one or more files including information indicative of access linked to the user identifier via a respective device;
- generating, based on the first data and the second data, a security challenge including a question relating to the one or more previous interactions of the user via at least one of the plurality of devices;
- and
- authenticating, using multi-factor authentication, based at least on a response to the question of the security challenge, the identity of the user to enable the user to access the one or more applications or a computing resource, wherein the response to the question is one factor in the multi-factor authentication.
4 more elements
Dependencies are inferred from the claim text.