MULTI-FACTOR AUTHENTICATION USING A USER BEHAVIOR PROFILE AS A FACTOR

• US 20180332071A1
• Filed: 05/08/2018
• Published: 11/15/2018
• Est. Priority Date: 05/15/2017
• Status: Active Grant

• Current Assignee: Forcepoint LLC
• Original Assignee: Forcepoint LLC
• Inventors: Ford, Richard Anthony, Swafford, Brandon L.
• Granted Patent: US 10,326,775 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A system, method, and computer-usable medium are disclosed for performing a multi-factor authentication operation, comprising: monitoring electronically-observable user behavior; converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior; generating a user behavior factor based upon the electronic information representing the electronically-observable user behavior; and, using the user behavior factor as a factor of a multi-factor authentication.

Claims

1-10. -10. (canceled)

11. A computer-implementable method for performing a multi-factor authentication operation, comprising:

monitoring electronically-observable user behavior;

converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior;

generating a user behavior factor based upon the electronic information representing the electronically-observable user behavior; and

,

using the user behavior factor as a factor of a multi-factor authentication.

12. The method of claim 11, wherein:

the multi-factor authentication uses two authentication factors in addition to using the user behavior factor when performing the multi-factor authentication.

13. The method of claim 11, wherein:

the user behavior factor includes a user behavior element.

14. The method of claim 13, wherein:

the user behavior element is associated with a corresponding user behavior profile; and

,

the user behavior profile is used when performing the multi-factor authentication.

15. The method of claim 11, wherein:

the multi-factor authentication is performed on at least one of a recurring basis and at certain time intervals during enactment of a particular user behavior.

16. The method of claim 11, wherein:

the multi-factor authentication is performed in response to detection of a particular user behavior.

17. A system comprising:

a processor;

a data bus coupled to the processor; and

a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for;

monitoring electronically-observable user behavior;

converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior;

generating a user behavior factor based upon the electronic information representing the electronically-observable user behavior; and

,

using the user behavior factor as a factor of a multi-factor authentication.

18. The system of claim 17, wherein:

the multi-factor authentication uses two authentication factors in addition to using the user behavior factor when performing the multi-factor authentication.

19. The system of claim 17, wherein:

the user behavior factor includes a user behavior element.

20. The system of claim 17, wherein:

the user behavior element is associated with a corresponding user behavior profile; and

,

the user behavior profile is used when performing the multi-factor authentication.

21. The system of claim 17, wherein:

the multi-factor authentication is performed on at least one of a recurring basis and at certain time intervals during enactment of a particular user behavior.

22. The system of claim 17, wherein:

the multi-factor authentication is performed in response to detection of a particular user behavior.

23. A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

monitoring electronically-observable user behavior;

converting the electronically-observable user behavior into electronic information representing the electronically-observable user behavior;

generating a user behavior factor based upon the electronic information representing the electronically-observable user behavior; and

,

using the user behavior factor as a factor of a multi-factor authentication.

24. The non-transitory, computer-readable storage medium of claim 23, wherein:

the multi-factor authentication uses two authentication factors in addition to using the user behavior factor when performing the multi-factor authentication.

25. The non-transitory, computer-readable storage medium of claim 23, wherein:

the user behavior factor includes a user behavior element.

26. The non-transitory, computer-readable storage medium of claim 23, wherein:

the user behavior element is associated with a corresponding user behavior profile; and

,

the user behavior profile is used when performing the multi-factor authentication.

27. The non-transitory, computer-readable storage medium of claim 23, wherein:

the multi-factor authentication is performed on at least one of a recurring basis and at certain time intervals during enactment of a particular user behavior.

28. The non-transitory, computer-readable storage medium of claim 23, wherein:

the multi-factor authentication is performed in response to detection of a particular user behavior.

29. The non-transitory, computer-readable storage medium of claim 23, wherein:

the computer executable instructions are deployable to a client system from a server system at a remote location.

30. The non-transitory, computer-readable storage medium of claim 23, wherein:

the computer executable instructions are provided by a service provider to a user on an on-demand basis.