Alias-Based Social Media Identity Verification

• US 20150012992A1
• Filed: 09/17/2014
• Published: 01/08/2015
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Markwordt, Joshua D., Skeen, Michael M., Thomason, Michael S.
• Granted Patent: US 9,235,695 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/306 User profiles

Abstract

An approach is provided to use social media content to verify the identity of a user using aliases established by the user in a social media environment. In the approach, a user authentication request pertaining to a user is received. Aliases corresponding to the user'"'"'s social media contacts are retrieved from a social media data store. User questions and expected answers are prepared based on the user'"'"'s social media contacts and the corresponding aliases. The user is prompted to provide one or more user answers responsive to the user questions. In response to receiving answers that match the expected answers, the user authentication request is confirmed. Conversely, in response to receiving user answers that fail to match the expected answers, the user authentication request is invalidated.

Claims

1. A method of social media based identity verification, implemented by an information handling system, the method comprising:

receiving a user authentication request pertaining to a user;

retrieving one or more aliases corresponding to one or more social media contacts of the user;

preparing one or more user questions and one or more expected answers based on the aliases corresponding to the user'"'"'s social media contacts;

prompting the user to provide one or more user answers responsive to the user questions;

responsive to receiving user answers that match the expected answers, confirming the user authentication request; and

responsive to receiving user answers that fail to match the expected answers, invalidating the user authentication request.

2. The method of claim 1 wherein the aliases are configured by the user prior to the reception of the authentication request.

3. The method of claim 1 further comprising:

selecting a social media content corresponding to a selected one of the social media contacts corresponding to a selected one of the aliases, wherein the user question includes the selected social media content and the expected answer is the selected one of the aliases.

4. The method of claim 3 wherein the selecting further comprises:

identifying a set of the social media that has been acknowledged by the user, wherein the selected social media content is selected from the set of social media content.

5. The method of claim 1 further comprising:

calculating a divergence strength score corresponding to the plurality of user questions, wherein less overlap between contact groups from which the questions were obtained yields a higher divergence strength score.

6. The method of claim 5 further comprising:

prior to retrieving the user questions and the corresponding expected answers;

receiving a security level, wherein the user questions and expected answers that are retrieved are based upon obtaining a divergence strength score that correlates to the security level.

7. The method of claim 6 wherein the security level is based upon a monetary transaction risk level.

8. The method of claim 1 further comprising:

identifying a desired security level corresponding to the user authentication request;

randomly selecting the one or more aliases from a data store maintained by a social media application, wherein the number of aliases selected is based on the desired security level;

forming the user questions based on the user'"'"'s social media contacts that correspond to the randomly selected aliases; and

forming the expected answers based on the randomly selected aliases.