Dynamic Authentication Techniques
AssigneeThroughPuter, Inc.
InventorMark Henrik Sandstrom
Life of this patent
Estimating the term…
Abstract
This disclosure describes systems and methods for (i) processing an authentication quiz involving dynamic security questions based on time-varying state and usage history of an account being protected by such a quiz, (ii) preventing inauthentic attempts to recover access to a user account of a software application, as well as (iii) generating authentic and inauthentic class training samples for pattern matching or other machine learning based login attempt authenticity predictions, for usage in artificial intelligence assisted login systems.
Claims20
A dynamic quiz based authentication method, implemented using computer hardware and software, for assessing authenticity of a login attempt to an account holder's account, the method involving:
- maintaining records concerning status of the account;
- at time of the login attempt by a login candidate to the account, assessing dynamic correct values, referred to as dynamically assessed correct values (DACVs), characterizing the account status from a present state of the records;
- producing a set of true and false statements concerning the account status with respect to at least some of the DACVs;
- prompting the login candidate to give answers for questions regarding whether individual statements of the set are true or false;
- and
- determining whether the login candidate passed the dynamic quiz based on a degree of correctness of the answers given by the candidate.
The method of claim 7, where the account-holder configurable account settings include
- an account recovery phone number,
- an account recovery email address, and/or
- account holder preferences concerning whether and/or how to receive alerts of login attempts or login events to the account.
A method, implemented using computer hardware and software, for preventing inauthentic user account recovery attempts involving:
- requesting an affirmation that an account recovery attempt is authentic;
- and
- in case said affirmation is received within a defined time window, presenting the login candidate a set of challenges for recovering access to account, while otherwise, programmatically disabling account recovery attempts for a defined time period, or until the authenticated user logs in to one's account and re-enables the account recovery methods and/or reconfigures the account recovery challenges.
A method, implemented using computer hardware and software, for generation of training samples for pattern-matching based authentication, the method involving:
- recording a feature vector (FV) charactering aspects of a login attempt to an account of a given user;
- prompting the given user to ascertain the login attempt as authentic or inauthentic;
- generating an authentic or inauthentic class training sample of the FV based on how the user ascertained the login attempt.
Dependencies are inferred from the claim text.