US 9,444,824 B1 · Methods, systems, and articles of manufacture for implementing adaptive levels of assurance in a financial management system

Abstract

Disclosed are methods, systems, and articles of manufacture for implementing adaptive levels of authentication assurance according to sensitivity or criticality of information accessed or actions performed in a financial management system to enhance user experience and usability of the financial management system while providing adequate security to safeguard sensitive data. Various flow nodes are associated with one or more levels of assurance which are further associated with some authentication tokens of different authentication strengths. Users are usually first authenticated with a lower authentication strength token. Risk profiles may also be accessed to examine the users' requests for access for fraud detection or prevention purposes. As users attempt to access more sensitive data at a higher level of assurance beyond the authorized level, further authentication with higher authentication strength and involving more user efforts in completing the authentication is required before users are authorized on the higher level of assurance.

Claims39

Dependent claims

A computer implemented method for implementing adaptive levels of assurance in a financial management system, the method being performed by a server and comprising:

the server initiating a flow for a user's request for access to the financial management system residing on the at least one computing system;
the server monitoring traversal of the flow for the access by a user requesting the access to the financial management system, wherein the financial management system comprises at least a tax return preparation software product or service operable to prepare an electronic tax return;
the server providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
the server increasing a current level of assurance to a heightened level of assurance associated with one or more heightened security requirements when the access includes electronic filing of a tax return or accessing information of one or more accounts of the user;
and
the server authenticating or authorizing the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance.

3 more elements

A system for implementing adaptive levels of assurance in a financial management system, comprising:

a server, a financial management system installed thereupon, and non-transitory memory allocated for the financial management system and is at least to:
initiate a flow for a user's request for access to the financial management system residing on the server;
monitor traversal of the flow for the access by a user requesting the access to the financial management system, wherein the financial management system comprises at least a tax return preparation software product or service operable to prepare an electronic tax return;
provide adequate security by providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
increase a current level of assurance to a heightened level of assurance associated with one or more heightened security requirements when the access includes electronic filing of a tax return or accessing information of one or more accounts of the user;
and
the server authenticating or authorizing the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance.

4 more elements

A computer program product comprising a non-transitory computer accessible storage medium having stored thereupon a sequence of instructions which, when executed by server, cause the server to perform a process for implementing adaptive levels of assurance in a financial management system, the process being performed by the server and comprising:

the server initiating a flow for a user's request for access to the financial management system residing on the server;
the server monitoring traversal of the flow for the access by a user requesting the access to the financial management system, wherein the financial management system comprises at least a tax return preparation software product or service operable to prepare an electronic tax return;
the server providing adequate security by providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
the server increasing a current level of assurance to a heightened level of assurance associated with one or more heightened security requirements when the access includes electronic filing of a tax return or accessing information of one or more accounts of the user;
and
the server authenticating or authorizing the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance.

3 more elements

A computer implemented method for implementing adaptive levels of assurance in a financial management system, the method being performed by a server and comprising:

the server initiating a flow for a user's request for access to the financial management system residing on the at least one computing system;
the server monitoring traversal of the flow for the access by a user requesting for the access to the financial management system;
the server providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
the server authenticating or authorizing the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance;
the server identifying a first authentication token, wherein the first authentication token corresponds to a first level of assurance in the adaptive levels of assurance;
the server authenticating the user with the first authentication token;
the server authorizing the user to access first information having first sensitivity on the financial management system or to perform one or more first actions on the financial management system, wherein the first information is accessible at the first level of assurance, and the one or more actions are permitted at the first level of assurance in the adaptive levels of assurance;
the server identifying or determining a first change in assurance level during the traversal of the flow;
the server identifying a second authentication token in response to the first change, wherein the second authentication token corresponds to a second level of assurance in the adaptive levels of assurance;
the server authenticating the user with the second authentication token;
and
the server authorizing the user to access second information having second sensitivity on the financial management system or to perform one or more second actions on the financial management system, wherein the second information is accessible at the second level of assurance, and the one or more actions are permitted at the second level of assurance in the adaptive levels of assurance.

9 more elements

A system for implementing adaptive levels of assurance in a financial management system, comprising:

a server, a financial management system installed thereupon, and non-transitory memory allocated for the financial management system and is at least to:
initiate a flow for a user's request for access to the financial management system residing on the server;
monitor traversal of the flow for the access by a user requesting for the access to the financial management system;
provide adequate security by providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
authenticate or authorize the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance;
identify a first authentication token, wherein the first authentication token corresponds to a first level of assurance in the adaptive levels of assurance;
authenticate the user with the first authentication token;
authorize the user to access first information having first sensitivity on the financial management system or to perform one or more first actions on the financial management system, wherein the first information is accessible at the first level of assurance, and the one or more actions are permitted at the first level of assurance in the adaptive levels of assurance;
identify or determine a first change in assurance level during the traversal of the flow;
identify a second authentication token in response to the first change, wherein the second authentication token corresponds to a second level of assurance in the adaptive levels of assurance;
authenticate the user with the second authentication token;
and
authorize the user to access second information having second sensitivity on the financial management system or to perform one or more second actions on the financial management system, wherein the second information is accessible at the second level of assurance, and the one or more actions are permitted at the second level of assurance in the adaptive levels of assurance.

10 more elements

A computer program product comprising a non-transitory computer accessible storage medium having stored thereupon a sequence of instructions which, when executed by server, cause the server to perform a set of acts for implementing adaptive levels of assurance in a financial management system, the process being performed by the server, and the set of acts comprising:

the server initiating a flow for a user's request for access to the financial management system residing on the at least one computing system;
the server monitoring traversal of the flow for the access by a user requesting for the access to the financial management system;
the server providing multiple adaptive levels of assurance corresponding to one or more authentication tokens for the flow based at least in part upon sensitivity of information involved in the access by the user to provide adequate security;
the server authenticating or authorizing the user's request for access to different portions with respective sensitivities of the financial management system that resides on the server at least by generating one or more authenticators with the one or more authentication tokens according to the respective sensitivities for the multiple adaptive level of assurance;
the server identifying a first authentication token, wherein the first authentication token corresponds to a first level of assurance in the adaptive levels of assurance;
the server authenticating the user with the first authentication token;
the server authorizing the user to access first information having first sensitivity on the financial management system or to perform one or more first actions on the financial management system, wherein the first information is accessible at the first level of assurance, and the one or more actions are permitted at the first level of assurance in the adaptive levels of assurance;
the server identifying or determining a first change in assurance level during the traversal of the flow;
the server identifying a second authentication token in response to the first change, wherein the second authentication token corresponds to a second level of assurance in the adaptive levels of assurance;
the server authenticating the user with the second authentication token;
and
the server authorizing the user to access second information having second sensitivity on the financial management system or to perform one or more second actions on the financial management system, wherein the second information is accessible at the second level of assurance, and the one or more actions are permitted at the second level of assurance in the adaptive levels of assurance.

9 more elements

Dependencies are inferred from the claim text.

Methods, systems, and articles of manufacture for implementing adaptive levels of assurance in a financial management system

Life of this patent

Methods, systems, and articles of manufacture for implementing adaptive levels of assurance in a financial management system

Life of this patent

Abstract

Claims39