US 2020/0004936 A1 · AUTOMATED DETERMINATION OF DEVICE IDENTIFIERS FOR RISK-BASED ACCESS CONTROL IN A COMPUTER NETWORK

Abstract

A processing device in an illustrative embodiment comprises a processor coupled to a memory and is configured to receive user credentials from a user device in conjunction with an access request, to apply one or more automated tests in order to determine one or more device identifiers of the user device, to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers, and to grant or deny the access request based at least in part on the risk score. As one example, an initial risk score is generated for the access request without utilizing the one or more determined device identifiers, and responsive to the initial risk score being above a specified threshold, the one or more determined device identifiers are utilized to generate a modified risk score that is used to grant or deny the access request.

Claims20

Dependent claims

A method comprising:

receiving user credentials from a user device in conjunction with an access request;
applying one or more automated tests in order to determine one or more device identifiers of the user device;
generating a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers;
and
granting or denying the access request based at least in part on the risk score;
wherein the method is performed by at least one processing device comprising a processor coupled to a memory.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application

16/024,594Filed 29 Jun 2018

Published

2 Jan 2020

Term ends

Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…

Automated determination of device identifiers for risk-based access control in a computer network

Life of this patent

Automated determination of device identifiers for risk-based access control in a computer network

Life of this patent

Abstract

Claims20