System and Method for Dynamically Controlling Authentication Attempts and Validity Periods

An adaptive two-factor authentication system comprising:

• one or more processors;
• and
• a memory storing instructions that, when executed, cause the one or more processors to:
• receive a plurality of authentication attempts associated with a user;
• monitor authentication attempt data including at least one of a number of attempts, timing information, or authentication outcome data;
• determine whether a control condition is satisfied based on a normalized risk score derived from the authentication attempt data;
• dynamically adjust an authentication attempt control parameter based on the control condition;
• control subsequent authentication attempts based on the authentication attempt control parameter;
• and
• apply a restriction action to the subsequent authentication attempts;
• wherein the authentication attempt control parameter includes at least one of a retry limit, a validity period (Time-To-Live), a delay duration, or a lockout condition.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause an adaptive two-factor authentication system to:

• receive a plurality of authentication attempts associated with a user;
• monitor authentication attempt data including at least one of a number of attempts, timing information, or authentication outcome data;
• determine whether a control condition is satisfied based on a normalized risk score derived from the authentication attempt data;
• dynamically adjust an authentication attempt control parameter based on the control condition;
• control subsequent authentication attempts based on the authentication attempt control parameter;
• and
• apply a restriction action based on the authentication attempt control parameter;
• wherein the authentication attempt control parameter includes at least one of a retry limit, a validity period (Time-To-Live), a delay duration, or a lockout condition.