User authentication

• US 10,116,648 B1
• Filed: 06/19/2015
• Issued: 10/30/2018
• Est. Priority Date: 06/19/2015
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Sharma, Nagendra Gudibande Srikanta
• Primary Examiner(s): Pham, Luu T
• Assistant Examiner(s): Cohen, Harvey I
• Application Number:
  US14/744,217
• Time in Patent Office: 1,229 Days
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

There are disclosed herein techniques for use in authentication. In one embodiment, the techniques include a method comprising several steps. The method comprises receiving a request to access an application. The method also comprises determining a level of sensitivity associated with the application. The method further comprises selecting an authentication method based on the level of sensitivity. The method still further comprises utilizing the authentication method during an authentication operation to determine whether to grant access to the application.

Claims

1. A method comprising steps of:

receiving a request to access a first application on a device;

determining a level of sensitivity associated with the first application in response to receiving the request, wherein the level of sensitivity is represented by a first sensitivity value;

determining that access has previously been granted to a second application on the device or on another device, wherein the second application is different to the first application;

determining a differential between the first sensitivity value and a second sensitivity value in connection with the second application, wherein the differential describes a difference in sensitivity between the first and second applications;

determining that the first sensitivity value is within a predetermined sensitivity value range;

selecting an authentication method for use as part of an authentication operation in connection with the request, wherein the selection of the authentication method is based on the determined differential and the said determination that the first sensitivity value is within the predetermined sensitivity value range; and

applying the selected authentication method in connection with the request as part of an authentication operation that determines whether to grant the request to access the first application on the device;

wherein the steps are performed by at least one processing device comprising a processor coupled to a memory.

2. The method as claimed in claim 1, wherein determining the level of sensitivity associated with the first application comprises:

identifying the first application associated with the request; and

determining the first sensitivity value in connection with the first application in order to facilitate selection of the authentication method.

3. The method as claimed in claim 1, wherein the determined level of sensitivity associated with the first application is represented by the first sensitivity value;

and wherein selecting the authentication method comprises;

comparing the differential to a threshold.

4. The method as claimed in claim 1, wherein the selected authentication method comprises at least one of a password, token code, knowledge based authentication method, biometric authentication method, out-of-band authentication method, and a split out-of-band authentication method.

5. A system, comprising:

at least one processing device, said at least one processing device comprising a processor coupled to a memory;

wherein the system is configured to;

receive a request to access a first application on a device;

determine a level of sensitivity associated with the first application in response to receiving the request, wherein the level of sensitivity is represented by a first sensitivity value;

determine that access has previously been granted to a second application on the device or on another device, wherein the second application is different to the first application;

determine a differential between the first sensitivity value and a second sensitivity value in connection with the second application, wherein the differential describes a difference in sensitivity between the first and second applications;

determine that the first sensitivity value is within a predetermined sensitivity value range;

select an authentication method for use as part of an authentication operation in connection with the request, wherein the selection of the authentication method is based on the determined differential and the said determination that the first sensitivity value is within the predetermined sensitivity value range; and

apply the selected authentication method in connection with the request as part of an authentication operation that determines whether to grant the request to access the first application on the device.

6. The system as claimed in claim 5, wherein determining the level of sensitivity associated with the first application comprises:

identifying the first application associated with the request; and

determining the first sensitivity value in connection with the first application in order to facilitate selection of the authentication method.

7. The system as claimed in claim 5, wherein the determined level of sensitivity associated with the first application is represented by the first sensitivity value;

and wherein selecting the authentication method comprises;

comparing the differential to a threshold.

8. The system as claimed in claim 5, wherein the selected authentication method comprises at least one of a password, token code, knowledge based authentication method, biometric authentication method, out-of-band authentication method, and a split out-of-band authentication method.

9. A non-transitory computer-readable storage medium having stored thereon computer executable instructions that when executed by a processor of a computer perform steps comprising:

receiving a request to access a first application on a device;

determining a level of sensitivity associated with the first application in response to receiving the request, wherein the level of sensitivity is represented by a first sensitivity value;

determining that access has previously been granted to a second application on the device or on another device, wherein the second application is different to the first application;

determining a differential between the first sensitivity value and a second sensitivity value in connection with the second application, wherein the differential describes a difference in sensitivity between the first and second applications;

determining that the first sensitivity value is within a predetermined sensitivity value range;

selecting an authentication method for use as part of an authentication operation in connection with the request, wherein the selection of the authentication method is based on the determined differential and the said determination that the first sensitivity value is within the predetermined sensitivity value range; and

applying the selected authentication method in connection with the request as part of an authentication operation that determines whether to grant the request to access the first application on the device.

10. The non-transitory computer-readable storage medium as claimed in claim 9, wherein determining the level of sensitivity associated with the first application comprises:

identifying the first application associated with the request; and

determining the first sensitivity value in connection with the first application in order to facilitate selection of the authentication method.

11. The non-transitory computer-readable storage medium as claimed in claim 9, wherein the determined level of sensitivity associated with the first application is represented by the first sensitivity value;

and

wherein selecting the authentication method comprises;

comparing the differential to a threshold.