Authorization and Authentication Based on an Individual's Social Network

• US 20140289815A1
• Filed: 06/09/2014
• Published: 09/25/2014
• Est. Priority Date: 07/22/2004
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Lunt, Christopher
• Granted Patent: US 9,432,351 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/9024 Graphs; Linked lists G06F16/9027 takes precedence
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

In particular embodiments, a method includes receiving a request for a first user to access a loan from a lender, the request identifying a user identifier (ID) of the first user; determining whether the first user is authorized to access the loan based at least in part on a gray list comprising user IDs of the users who are not authorized to access loans, wherein the gray list is based on a black list; and permitting the loan to be accessed by the first user if the first user is authorized to access the loan based on the gray list.

Claims

1. A method comprising:

receiving, by one or more computing systems, a request for a first user to access a loan from a lender, the request identifying a user identifier (ID) of the first user;

determining, by one or more computing devices, whether the first user is authorized to access the loan based at least in part on a gray list comprising user IDs of the users who are not authorized to access loans, wherein the gray list is based on a black list; and

permitting, by one or more computing devices, the loan to be accessed by the first user if the first user is authorized to access the loan based on the gray list.

2. The method of claim 1, the user ID comprises one or more of an email address of the first user, a name of the first user, or a member identifier of the first user.

3. The method of claim 1, wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more friends of the first user within an online social network.

4. The method of claim 1, further comprising:

accessing a graph structure comprising a plurality of nodes and a plurality of edges connecting the nodes, each of the edges between two of the nodes representing a single degree of separation between them, the nodes comprising a first node corresponding to the first user and a plurality of second nodes corresponding to a plurality of second users, respectively.

5. The method of claim 4, further comprising:

accessing a white list comprising a first set of user IDs of a first set of users corresponding to a first set of nodes within a threshold degree of separation of the first-user node;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the first set of users.

6. The method of claim 5, wherein determining whether the first user is authorized to access the loan is based on one or more credit ratings of one or more users, respectively, of the first set of users, comprises, for each user, applying a weighting factors based on the degree of separation between the node corresponding to the user of the first set of users and the first node corresponding to the first user.

7. The method of claim 4, further comprising:

accessing the black list comprising a first set of user IDs of a first set of users;

wherein the gray list comprises a second set of user IDs of a second set of users, each of the nodes corresponding to the users in the second set of users being separated in the graph structure from at least one of the nodes corresponding to the users in the first set of users by only one degree of separation.

8. The method of claim 4, further comprising:

accessing the black list comprising a first set of user IDs of a first set of users;

wherein the gray list comprises a second set of user IDs of a second set of users, each of the nodes corresponding to the users in the second set of users being separated in the graph structure from at least one of the nodes corresponding to the users in the first set of users by a threshold degree of separation.

9. The method of claim 8, further comprising:

accessing a white list comprising a third set of user IDs of a third set of users corresponding to a set of nodes within a threshold degree of separation of the first-user node, wherein the third set of user IDs excludes any user IDs in the first or second set of user IDs;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the third set of users.

10. The method of claim 8, further comprising:

accessing a white list comprising a third set of user IDs of a third set of users corresponding to a set of nodes within a threshold degree of separation of the first-user node, each node in the set of nodes being connected to the first node in the graph structure by a series of nodes and edges that does not traverse any nodes corresponding to users in the first or second set of users;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the third set of users.

11. The method of claim 1, further comprising:

accessing the black list comprising a first set of user IDs of a first set of users.

12. The method of claim 11, wherein the black list comprises user IDs of the users who are not permitted to access a loan from the lender.

13. The method of claim 1, wherein determining whether the first user is authorized to access the loan based at least in part on the gray list comprises determining whether the user ID of the first user is one of the user IDs comprising the gray list.

14. The method of claim 1, further comprising:

rejecting access to the loan by the first user if the first user is not authorized to access the loan based on the gray list.

15. A service provider system comprising:

one or more processors; and

one or more servers having a memory storing computer-executable instructions that when executed by one or more of the processors cause the processors to;

receive a request for a first user to access a loan from a lender, the request identifying a user identifier (ID) of the first user;

determine whether the first user is authorized to access the loan based at least in part on a gray list comprising user IDs of the users who are not authorized to access loans, wherein the gray list is based on a black list; and

permit the loan to be accessed by the first user if the first user is authorized to access the loan based on the gray list.