Methods for confirming user interaction in response to a request for a computer provided service and devices thereof

• US 9,258,306 B2
• Filed: 05/10/2013
• Issued: 02/09/2016
• Est. Priority Date: 05/11/2012
• Status: Active Grant

• Current Assignee: Infosys Limited
• Original Assignee: Infosys Limited
• Inventors: Saxena, Ashutosh, Rondla, Sravan Kumar
• Primary Examiner(s): Reza, Mohammad W
• Assistant Examiner(s): DOLLY, KENDALL LYNN
• Application Number:
  US13/891,986
• Publication Number:
  US 20130305321A1
• Time in Patent Office: 1,005 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method, non-transitory computer readable medium, and access manager device includes providing an initial challenge to a client computing device requesting access to a service. The initial challenge includes one or more of one or more objects, one or more indicative answers, and one or more questions based on the one or more objects. At least one challenge response to the initial challenge is received from the client computing device. A determination is when there is a match between the at least one challenge response to the initial challenge and corresponding response data associated with the initial challenge. One or more actions with respect to the request to access the service are performed based on the determination.

Claims

1. A method for confirming user interaction, the method comprising:

providing by an access manager computing device an initial challenge to a client computing device requesting access to a service comprising identifying a geographical location of the request to access the service sent from the client computing device, obtaining one or more parameters from the client computing device, wherein the one or more parameters comprise user related information, determining a category of the questions and content of the questions based on the identified geographical location and the obtained parameters, obtaining a criticality of the service from a knowledge database server in real time, and generating the initial challenge based on the identified geographical location, the determined category and content of the questions, the obtained parameters, and the obtained criticality of the service, wherein the initial challenge comprises one or more objects, one or more indicative answers, and a plurality of questions based on the objects;

receiving by the access manager computing device a challenge response to the initial challenge from the client computing device, the challenge response comprising at least an indication of a selection by a user of the client computing device of one or more of the questions;

determining by the access manager computing device a threshold level of correspondence between the challenge response to the initial challenge, comprising the indication of the selection by the user of the client computing device of the one or more of the questions, and corresponding response data, comprising the expected answer set associated with the initial challenge, based on the obtained criticality of the requested service;

determining by the access manager computing device when there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising an expected answer set associated with the initial challenge, wherein the expected answer set is generated based on the indicative answers; and

performing by the access manager computing device one or more actions with respect to the request to access the service, when the determining indicates there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and the corresponding response data comprising the expected answer set associated with the initial challenge.

2. The method as set forth in claim 1 wherein the actions comprise granting by the access manager computing device the client computing device access to the requested service and the method further comprises denying by the access manager computing device the client computing device access to the requested service when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge.

3. The method as set forth in claim 1 further comprising:

providing by the access manager computing device a subsequent challenge when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge;

receiving by the access manager computing device a subsequent challenge response to the subsequent challenge from the client computing device;

determining by the access manager computing device when there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising another expected answer set associated with the subsequent challenge; and

performing by the access manager computing device the actions with respect to the request to access the service when the determining indicates there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising the another expected answer set associated with the subsequent challenge.

4. A non-transitory computer readable medium having stored thereon instructions for confirming user interaction comprising executable code which when executed by at least one processor, causes the processor to perform steps comprising:

providing an initial challenge to a client computing device requesting access to a service comprising identifying a geographical location of the request to access the service sent from the client computing device, obtaining one or more parameters from the client computing device, wherein the one or more parameters comprise user related information, determining a category of the questions and content of the questions based on the identified geographical location and the obtained parameters, obtaining a criticality of the service from a knowledge database server in real time, and generating the initial challenge based on the identified geographical location, the determined category and content of the questions, the obtained parameters, and the obtained criticality of the service, wherein the initial challenge comprises one or more objects, one or more indicative answers, and a plurality of questions based on the objects;

receiving a challenge response to the initial challenge from the client computing device, the challenge response comprising at least an indication of a selection by a user of the client computing device of one or more of the questions;

determining a threshold level of correspondence between the challenge response to the initial challenge, comprising the indication of the selection by the user of the client computing device of the one or more of the questions, and corresponding response data, comprising the expected answer set associated with the initial challenge, based on the obtained criticality of the requested service;

determining when there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising an expected answer set associated with the initial challenge, wherein the expected answer set is generated based on the indicative answers; and

performing one or more actions with respect to the request to access the service, when the determining indicates there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and the corresponding response data comprising the expected answer set associated with the initial challenge.

5. The medium as set forth in claim 4 wherein the actions comprise granting the client computing device access to the requested service and the executable code, when executed by the processor, further causes the processor to perform at least one additional step comprising denying the client computing device access to the requested service when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge.

6. The medium as set forth in claim 4 wherein the executable code, when executed by the processor, further causes the processor to perform at least one additional step comprising:

providing a subsequent challenge when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge;

receiving a subsequent challenge response to the subsequent challenge from the client computing device;

determining when there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising another expected answer set associated with the subsequent challenge; and

performing the actions with respect to the request to access the service when the determining indicates there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising the another expected answer set associated with the subsequent challenge.

7. An access manager computing device comprising at least one processor and a memory coupled to the processor which is configured to be capable of executing programmed instructions comprising and stored in the memory to:

provide an initial challenge to a client computing device requesting access to a service comprising identifying a geographical location of the request to access the service sent from the client computing device, obtaining one or more parameters from the client computing device, wherein the one or more parameters comprise user related information, determining a category of the questions and content of the questions based on the identified geographical location and the obtained parameters, obtaining a criticality of the service from a knowledge database server in real time, and generating the initial challenge based on the identified geographical location, the determined category and content of the questions, the obtained parameters, and the obtained criticality of the service, wherein the initial challenge comprises one or more objects, one or more indicative answers, and a plurality of questions based on the objects;

receive a challenge response to the initial challenge from the client computing device, the challenge response comprising at least an indication of a selection by a user of the client computing device of one or more of the questions;

determine a threshold level of correspondence between the challenge response to the initial challenge, comprising the indication of the selection by the user of the client computing device of the one or more of the questions, and corresponding response data, comprising the expected answer set associated with the initial challenge, based on the obtained criticality of the requested service;

determine when there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising an expected answer set associated with the initial challenge, wherein the expected answer set is generated based on the indicative answers; and

perform one or more actions with respect to the request to access the service, when the determining indicates there is a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and the corresponding response data comprising the expected answer set associated with the initial challenge.

8. The device as set forth in claim 7 wherein the actions comprise granting the client computing device access to the requested service and the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to deny the client computing device access to the requested service when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge.

9. The device as set forth in claim 7 wherein the processor coupled to the memory is further configured to be capable of executing at least one additional programmed instruction to:

provide a subsequent challenge when the determining indicates there is not a match exceeding the threshold level of correspondence between the challenge response to the initial challenge and corresponding response data comprising the expected answer set associated with the initial challenge;

receive a subsequent challenge response to the subsequent challenge from the client computing device;

determine when there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising another expected answer set associated with the subsequent challenge; and

perform the actions with respect to the request to access the service when the determining indicates there is a match exceeding the threshold level of correspondence between the subsequent challenge response to the subsequent challenge and corresponding response data comprising the another expected answer set associated with the subsequent challenge.