Guided implicit authentication
AssigneePalo Alto Research Center Incorporated
InventorRichard Chow
Life of this patent
Estimating the term…
Abstract
Embodiments of the present disclosure provide a method and system for guided implicit authentication. The system first receives a request to access the controlled resource from a user. The system then determines whether the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events. Next, the system allows the user to provide information associated with regular user behavior and/or current contextual data. The system further updates the user behavior measure based on current contextual data.
Claims18
A computer-implemented method for guided implicit authentication, the method comprising:
- receiving, by a computing device, a request to access a controlled resource from a user;
- determining current contextual data associated with the request;
- determining whether the current contextual data associated with the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events;
- responsive to the current contextual data being inconsistent with regular user behavior, prompting the user to confirm whether the current contextual data is safe for implicit authentication;
- providing a user interface for the user to input regular user behavior and expected behavior changes;
- updating the user behavior measure based on the user input;
- and
- responsive to the user confirming that the current contextual data is safe for implicit authentication, updating the user behavior measure based on the current contextual data.
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for guided implicit authentication, the method comprising:
- receiving a request to access a controlled resource from a user;
- determining current contextual data associated with the request;
- determining whether the current contextual data associated with the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events;
- responsive to the current contextual data being inconsistent with regular user behavior, prompting the user to confirm whether the current contextual data is safe for implicit authentication;
- providing a user interface for the user to input regular user behavior and expected behavior changes;
- updating the user behavior measure based on the user input;
- and
- responsive to the user confirming that the current contextual data is safe for implicit authentication, updating the user behavior measure based on current contextual data.
A system for guided implicit authentication, the system comprising:
- an access request receiver configured to receive a request from a user to access a controlled resource;
- a determination mechanism configured to determining current contextual data associated with the request, and to determine whether the current contextual data associated with the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events;
- a user interface configured to:
- prompt the user to confirm whether the current contextual data is safe for implicit authentication, in response to the current contextual data being inconsistent with regular user behavior;
- and
- provide a user interface for the user to input regular user behavior and expected behavior changes;
- and
- an updating mechanism configured to:
- update the user behavior measure based on current contextual data, in response to the user confirming that the current contextual data is safe for implicit authentication;
- and
- update the user behavior measure based on the user input.
Dependencies are inferred from the claim text.