Identity risk score generation and implementation

A computer system comprising the following:

• one or more processors;
• system memory;
• one or more computer-readable storage media having stored thereon computer-executable instructions that, when executed by the one or more processors, causes the computing system to perform a method for applying operating heuristics to determine an operating application's validity, the method comprising the following:
• an act of accessing one or more application operation heuristics including a generated identity risk score that is associated with a cloud service user, the identity risk score being based on one or more identity factors that indicate the likelihood that the user is a valid user;
• an act of applying the application operation heuristics to an application initiated by the cloud service user that is in operation to determine whether the application is being used fraudulently or legitimately;
• and
• performing at least one of the following:
• upon determining that the application is being used fraudulently, an act of limiting use of the application by a specified amount;
• and
• upon determining that the application is being used legitimately, an act of permitting continued use of the application.

A computer system comprising the following:

• one or more processors;
• system memory;
• one or more computer-readable storage media having stored thereon computer-executable instructions that, when executed by the one or more processors, causes the computing system to perform a method for providing identity risk scores to requesting third parties, the method comprising the following:
• an act of receiving a request from a third party for an identity risk score, the identity risk score being generated based on one or more identity factors that indicate the likelihood that a specified cloud service user is a valid user;
• an act of validating the third party requestor's identity as one who is authorized to receive identity risk scores for the specified cloud service user;
• an act of accessing the requested identity risk score;
• and
• an act of sending the requested identity risk score to the third party requestor.