Confidence-based authentication

• US 9,419,957 B1
• Filed: 03/17/2014
• Issued: 08/16/2016
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Original Assignee: JP Morgan Chase Bank, N.A. (JP Morgan Chase & Co)
• Inventors: Rouse, John D., Delaney, Raymond P.
• Primary Examiner(s): Gee, Jason K.
• Assistant Examiner(s): Bucknor, Olanrewaju
• Application Number:
  US14/216,315
• Time in Patent Office: 883 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A programmed computer assigns an authentication requirement rating to an activity and an authentication capability rating to each of one or more authentication methods. The programmed computer receives a request from a user to perform the activity and a first authentication sample result based on a first authentication attempt performed by the user using a first authentication method. The programmed computer determines a current authentication rating for the user based on the authentication capability rating of the first authentication method and the first authentication sample result. The programmed computer then determines whether to allow the user to perform the requested activity based on a comparison of the authentication requirement rating associated with the activity requested by the user and the current authentication rating determined for the user. The programmed computer provides a final authentication result.

Claims

1. A computer-implemented method, comprising:

assigning, by a programmed computer, an authentication requirement rating to an activity;

assigning, by the programmed computer, an authentication capability rating to each of one or more authentication methods, wherein the authentication capability rating indicates an ability of the one or more authentication methods to authenticate a user;

receiving, at the programmed computer, over a network from a remote user access device, a request from a user to perform the activity;

receiving, at the programmed computer over the network from the remote user access device, a first authentication sample result based on a first authentication attempt performed by the user using a first authentication method;

determining, by the programmed computer, a current authentication rating for the user based on the authentication capability rating of the first authentication method and the first authentication sample result;

adjusting, by the programmed computer, the current authentication rating determined for the user based on a second authentication method, wherein the second authentication method is a silent authentication method utilizing one or more factors determined about the user without presenting an explicit authentication challenge to the user;

determining, by the programmed computer, whether to allow the user to perform the requested activity based on a comparison of the authentication requirement rating associated with the activity requested by the user and the adjusted current authentication rating determined for the user; and

providing, by the programmed computer over the network to the remote user access device, a final authentication result.

2. The computer-implemented method of claim 1, further comprising:

receiving, at the programmed computer, a second authentication sample result based on a second authentication attempt performed by the user using the second authentication method; and

updating, by the programmed computer, the current authentication rating determined for the user based on the authentication capability rating of the second authentication method and the second authentication sample result.

3. A computer system, comprising:

a memory; and

a processing device communicatively coupled to the memory, the processing device configured to;

assign an authentication requirement rating to an activity;

assign an authentication capability rating to each of one or more authentication methods, wherein the authentication capability rating indicates an ability of the one or more authentication methods to authenticate a user;

receive, over a network from a remote user access device, a request from a user to perform the activity;

receive, over the network from the remote user access device, a first authentication sample result based on a first authentication attempt performed by the user using a first authentication method;

determine a current authentication rating for the user based on the authentication capability rating of the first authentication method and the first authentication sample result;

adjust the current authentication rating determined for the user based on a second authentication method, wherein the second authentication method is a silent authentication method utilizing one or more factors determined about the user without presenting an explicit authentication challenge to the user;

determine whether to allow the user to perform the requested activity based on a comparison of the authentication requirement rating associated with the activity requested by the user and the adjusted current authentication rating determined for the user; and

provide, over the network to the remote user access device, a final authentication result.

4. The system of claim 3, wherein the processing device is further configured to:

receive a second authentication sample result based on a second authentication attempt performed by the user using the second authentication method; and

update the current authentication rating determined for the user based on the authentication capability rating of the second authentication method and the second authentication sample result.

5. A non-transitory computer-readable storage medium programmed to include instructions that, when executed by a processing device, cause the processing device to perform a method, said method comprising:

assigning an authentication requirement rating to an activity;

assigning an authentication capability rating to each of one or more authentication methods, wherein the authentication capability rating indicates an ability of the one or more authentication methods to authenticate a user;

receiving, over a network from a remote user access device, a request from a user to perform the activity;

receiving, over the network from the remote user access device, a first authentication sample result based on a first authentication attempt performed by the user using a first authentication method;

determining a current authentication rating for the user based on the authentication capability rating of the first authentication method and the first authentication sample result;

adjusting the current authentication rating determined for the user based on a second authentication method, wherein the second authentication method is a silent authentication method utilizing one or more factors determined about the user without presenting an explicit authentication challenge to the user;

determining whether to allow the user to perform the requested activity based on a comparison of the authentication requirement rating associated with the activity requested by the user and the adjusted current authentication rating determined for the user; and

providing, over the network to the remote user access device, a final authentication result.

6. The non-transitory computer readable storage medium of claim 5, further comprising instructions that when executed by the processing device perform steps including;

receiving a second authentication sample result based on a second authentication attempt performed by the user using the second authentication method; and

updating the current authentication rating determined for the user based on the authentication capability rating of the second authentication method and the second authentication sample result.