Managing knowledge-based authentication systems
AssigneeEMC IP Holding Company LLC
InventorsBoris Kronrod, Ido Zilberberg
Life of this patent
Estimating the term…
Abstract
A method is used in managing knowledge-based authentication systems. Questions are created from organization based information. The questions are evaluated based on a set of parameters. Based on the evaluation, a set of questions is selected from the questions and a set of responses is selected for each question of the set of questions for a scenario. A user is authenticated in the scenario using the set of questions.
Claims14
A method for use in managing knowledge-based authentication systems, the method comprising:
- evaluating questions based on a set of parameters, each question being associated with a ranking value, wherein the questions are created from organization based information gathered from a set of distributed organizational information sources under control of an organization, wherein the set of parameters include user configuration information provided by a user, the user being a part of the organization, wherein the user configuration information indicates types of questions suitable for a use case scenario, historical information associated with questions and facts used previously for authenticating the user, and feedback information indicating how a user responds to each question presented to the user, wherein the historical information is stored in a velocity database, wherein the organization based information includes information that is private and confidential to the organization, wherein the organization based information is gathered periodically;
- based on the evaluation, selecting a set of questions from the questions and a set of responses for each question of the set of questions for the use case scenario based on respective ranking value associated with each question and quality of facts used for creating the questions, wherein the quality of a fact determines a quality of a question created from the fact, wherein the quality of a question indicates whether the question is suitable for authenticating the user, wherein a question of a high quality is considered suitable for authenticating the user and a question of a low quality is not considered suitable for authenticating the user, wherein the user is authenticated in the use case scenario by a knowledge-based authentication system using the set of questions, wherein the knowledge-based authentication system includes a question picker component providing a respective ranking value for each question based on the historical information, wherein the question picker component selects the set of questions with highest ranking values based on the use case scenario, wherein the use case scenario is associated with a risk level and configuration information, wherein the set of questions are selected based on the risk level associated with the use case scenario, wherein the use case scenario is configurable and specified by the user;
- and
- updating the historical information of the velocity database for adaptively improving the selection of the set of questions, wherein a velocity of a fact indicates historical information associated with the fact indicating how recently the fact has been used to previously authenticate the user.
A system for use in managing knowledge-based authentication systems, the system comprising a knowledge-based authentication system comprising a processor configured to:
- evaluate questions based on a set of parameters, each question being associated with a ranking value, wherein the questions are created from organization based information gathered from a set of distributed organizational information sources under control of an organization, wherein the set of parameters include user configuration information provided by a user, the user being a part of the organization, wherein the user configuration information indicates types of questions suitable for a use case scenario, historical information associated with questions and facts used previously for authenticating the user, and feedback information indicating how a user responds to each question presented to the user, wherein the historical information is stored in a velocity database, wherein the organization based information includes information that is private and confidential to the organization, wherein the organization based information is gathered periodically;
- select, based on the evaluation, a set of questions from the questions and a set of responses for each question of the set of questions for the use case scenario based on respective ranking value associated with each question and quality of facts used for creating the questions, wherein the quality of a fact determines a quality of a question created from the fact, wherein the quality of a question indicates whether the question is suitable for authenticating the user, wherein a question of a high quality is considered suitable for authenticating the user and a question of a low quality is not considered suitable for authenticating the user, wherein the user is authenticated in the use case scenario by a knowledge-based authentication system using the set of questions, wherein the knowledge-based authentication system includes a question picker component providing a respective ranking value for each question based on the historical information, wherein the question picker component selects the set of questions with highest ranking values based on the use case scenario, wherein the use case scenario is associated with a risk level and configuration information, wherein the set of questions are selected based on the risk level associated with the use case scenario, wherein the use case scenario is configurable and specified by the user;
- and
- update the historical information of the velocity database for adaptively improving the selection of the set of questions, wherein a velocity of a fact indicates historical information associated with the fact indicating how recently the fact has been used to previously authenticate the user.
Dependencies are inferred from the claim text.