US 2017/0286653 A1 · IDENTITY RISK SCORE GENERATION AND IMPLEMENTATION

Abstract

Embodiments are directed to providing an identity risk score as part of an authentication assertion, applying operating heuristics to determine an operating application's validity and to providing identity risk scores to requesting third parties. In one scenario, an authentication server receives from a cloud service portal various user credentials from a user. The user credentials identify a user to the authentication server. The authentication server verifies the user's identity using the received credentials and generates an identity risk score based on one or more identity factors. The identity factors indicate a likelihood that the user is a valid user. The authentication server encapsulates the generated identity risk score in an authentication assertion and sends the authentication assertion that includes the generated identity risk score to the cloud service portal.

Claims20

Dependent claims

A computer system comprising the following:

one or more processors;
system memory;
a computer-readable hardware storage device having stored thereon computer-executable instructions that, when executed by the one or more processors, causes the computing system to perform a method for providing an identity risk score as part of an authentication process, the method comprising the following:
an act of receiving from a cloud service portal one or more user credentials from a user, the user credentials identifying the user to the an authentication server;
an act of verifying the user's identity using the received credentials;
an act of generating an identity risk score based on one or more identity factors, the identity factors indicating a likelihood that the user is a valid user;
an act of providing a level of service to the user based on the identity risk score that is dynamically updatable, wherein providing the level of service to the user includes:
dynamically reducing the level of service for the user when the identity risk score of the user is dynamically updated to be above a threshold, and
dynamically increasing the level of service for the user when the identity risk score of the user is dynamically updated to be below a threshold.

6 more elements

A method, implemented on a computing system that includes one or more processors, for providing an identity risk score as part of an authentication process, the method comprising the following:

an act of receiving from a cloud service portal one or more user credentials from a user, the user credentials identifying the user to an authentication server;
an act of verifying the user's identity using the received credentials;
an act of generating an identity risk score based on one or more identity factors, the identity factors indicating a likelihood that the user is a valid user;
an act of providing a level of service to the user based on the identity risk score that is dynamically updatable, wherein providing the level of service to the user includes:
dynamically reducing the level of service for the user when the identity risk score of the user is dynamically updated to be above a threshold, and
dynamically increasing the level of service for the user when the identity risk score of the user is dynamically updated to be below a threshold.

3 more elements

Dependencies are inferred from the claim text.

Identity risk score generation and implementation

Life of this patent

Identity risk score generation and implementation

Life of this patent

Abstract

Claims20