Dynamic user authentication and authorization
AssigneeIms Health Incorporated
InventorsCharles Blair, Elkin Florez
Life of this patent
Estimating the term…
Abstract
System and a method to dynamically authenticate and optionally dynamically authorize a user at a user device or at a server, the method including: receiving a request from the user to access a service; determining contextual data associated with the user; determining, based on at least the contextual data, at least one rule from a rules database to authenticate the user; and authenticating the user based on the determined at least one rule, wherein the user is authorized to access the service based on the authentication.
Claims22
A computer implemented method to dynamically authenticate a user at a user device, comprising:
- receiving, at the user device, one or more user inputs from the user;
- pre-authenticating the user based on the one or more user inputs, wherein the pre-authentication is performed at the user device;
- receiving, at the user device, a first request from the user to access a client service associated with the user device upon successful pre-authentication of the user;
- authenticating the user based on a set of client rules retrieved from a database stored at the user device, wherein the authentication is performed at the user device, and wherein the set of client rules is associated with the user device;
- determining a contextual data associated with the user;
- dynamically modifying, based on at least the contextual data, the set of client rules;
- receiving, at a server, a second request from the user to access a service associated with the server upon successful pre-authentication of the user, wherein the server is remote from the user device;
- dynamically modifying, based on at least the contextual data, a set of server rules;
- and
- authenticating the user based on the modified set of server rules, wherein the authentication is performed at the server,
- wherein the contextual data includes at least one of a date of request, a time of request, one or more user device parameters, and work state of the user.
A system to dynamically authenticate a user, comprising:
- a user device configured to:
- receive one or more user inputs from the user;
- pre-authenticate the user based on the one or more user inputs;
- receive a first request from the user to access a client service associated with the user device upon successful pre-authentication of the user;
- authenticate the user based on a set of client rules retrieved from a database stored at the user device, wherein the authentication is performed at the user device, and wherein the set of client rules is associated with the user device;
- determine a contextual data associated with the user;
- and
- dynamically modify, based on at least the contextual data, the set of client rules;
- and
- a server remote from the user device and communicatively coupled to the user device, the server configured to:
- receive a second request from the user to access a service associated with the server upon successful pre-authentication of the user;
- dynamically modify, based on at least the contextual data, a set of server rules;
- and
- authenticate the user based on the modified set of server rules,
- wherein the contextual data includes at least one of a date of request, a time of request, one or more user device parameters, and work state of the user.
Dependencies are inferred from the claim text.