US 2020/0028853 A1 · System and Method Providing Security Friction for Atypical Resource Access Requests

Abstract

A method, system and computer-usable medium for providing security friction to a request for access to a resource based on whether the access request is atypical. In certain embodiments, a request to access the resource based on a user identity is received electronically. The system determines whether the request is typical or atypical. If the request is typical, access to the requested resource is granted. However, if the request is atypical, access to the requested resource is only allowed if the correct information is provided in response to one or more access control methods that provide an amount of security friction that would otherwise not have been asserted if the resource request was typical. In certain embodiments, an elapsed time between access requests based on the user identity is used to determine whether the access request is atypical.

Claims22

Dependent claims

A computer-implemented method for controlling access to a resource, comprising:

receiving a request to access the resource, wherein the request is based on a user identity;
determining whether the request is typical or atypical;
if the request is typical, granting access to the requested resource;
and
if the request is atypical, controlling access to the requested resource using one or more user access control methods to provide security friction that would otherwise not have been used if the request were typical.

2 more elements

A system comprising:

a processor;
an electronic communication channel coupled to the processor;
and
a computer-usable medium embodying computer program code, the computer-usable medium being coupled to the electronic communication channel, the computer program code used for asserting different access control methods to provide different amounts of security friction for access to a resource, the computer-usable medium comprising instructions executable by the processor and configured to implement operations comprising:
receiving a request to access the resource, wherein the request s based on a user identity;
determining whether the request is typical or atypical;
if the request is typical, granting access to the requested resource;
and
if the request is atypical, controlling access to the requested resource using one or more access control methods to provide security friction that would otherwise not have been used if the request were typical.

6 more elements

Dependencies are inferred from the claim text.

System and Method Providing Security Friction for Atypical Resource Access Requests

Life of this patent

System and Method Providing Security Friction for Atypical Resource Access Requests

Life of this patent

Abstract

Claims22