Generating authentication challenges based on preferences of a user's contacts

• US 8,782,761 B1
• Filed: 08/08/2011
• Issued: 07/15/2014
• Est. Priority Date: 08/08/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Staddon, Jessica
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): HOLMES, ANGELA R
• Application Number:
  US13/204,921
• Time in Patent Office: 1,072 Days
• Field of Search: 713/182, 713/186, 713/166, 726 4- 7, 726/10, 726/21, 705/319, 455/410
• US Class Current: 726/7
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Generating user authentication challenges based in part on preferences of one or more contacts of a user includes receiving an authentication request from a user. One or more contacts of the user associated with the authentication request are determined. One or more preferences of the close contact or contacts are determined. An authentication challenge based on the one or more preferences of one or more of the user'"'"'s contacts is generated. The authentication request is allowed or denied based on the completion on the authentication challenge.

Claims

1. A computer-implemented method for generating user authentication challenges, the method comprising:

receiving an authentication request from a user, wherein the authentication request includes primary authentication information and secondary authentication information from the user;

in response to receiving the authentication request, detecting a potentially fraudulent authentication attempt based on the secondary authentication information from the user;

identifying one or more contacts of an account owner based at least in part on a frequency of interaction between the account owner and the one or more contacts;

determining one or more preferences of the one or more contacts based on an analysis of information about the one or more contacts;

generating one or more authentication challenges based at least in part on the determined one or more preferences of the one or more contacts, the one or more authentication challenges including one or more questions about the determined one or more preferences of the one or more contacts based on the analysis;

assessing a response to the one or more authentication challenges; and

determining access based on the assessment.

2. The computer-implemented method of claim 1, further comprising:

receiving a response from the user and assessing completion of the one or more authentication challenges based on the response from the user.

3. The computer-implemented method of claim 1, wherein the one or more contacts are identified at least in part by how recently the one or more contacts and the account owner interacted.

4. The computer-implemented method of claim 1, wherein the one or more contacts are identified at least in part by a type or a number of commonalities between the account owner and the one or more contacts alone or in combination.

5. The computer-implemented method of claim 1, wherein the one or more contacts are identified at least in part by a duration of contact or relationship between the account owner and the one or more contacts.

6. The computer-implemented method of claim 1, wherein the one or more contacts are identified at least in part by an affiliation of the one or more contacts with the account owner.

7. The computer-implemented method of claim 1, wherein the one or more contacts are identified by statistically weighing a plurality of factors.

8. The computer-implemented method of claim 1, wherein the one or more preferences of the one or more contacts are determined explicitly from data of the one or more contacts.

9. The computer-implemented method of claim 1, wherein the one or more preferences of the one or more contacts are determined implicitly from data of the one or more contacts.

10. The computer-implemented method of claim 1, wherein the one or more preferences of the one or more contacts are determined inferentially from data of the one or more contacts.

11. The computer-implemented method of claim 1, wherein the potentially fraudulent authentication attempt includes a failed authentication attempt.

12. The computer-implemented method of claim 10, wherein the inferential determination includes determining the one or more preferences based on data collected from the one or more contacts playing an online game.

13. A system for generating user authentication challenges, the system comprising:

one or more processors;

an authentication receiver stored on a memory and executable by the one or more processors, the authentication receiver for receiving an authentication request from a user, wherein the authentication request includes primary authentication information and secondary authentication information from the user;

a fraudulent authentication detection engine stored on the memory and executable by the one or more processors, the fraudulent authentication detection engine for detecting a potentially fraudulent authentication attempt based on the secondary authentication information from the user;

a close contact identifier engine stored on the memory and executable by the one or more processors, the close contact identifier engine for identifying one or more contacts of an account owner based at least in part on a frequency of interaction between the account owner and the one or more contacts;

a contact preference engine stored on the memory and executable by the one or more processors, the contact preference engine for determining one or more preferences of the one or more contacts based on an analysis of information about the one or more contacts;

a challenge generation engine stored on the memory and executable by the one or more processors, the challenge generation engine for generating an authentication challenge based on the determined one or more preferences of the one or more contacts, the authentication challenge including a question about the determined one or more preferences of the one or more contacts based on the analysis;

assess a response to the one or more authentication challenges; and

determine access based on the assessment.

14. The system of claim 13, further comprising:

a challenge assessment engine for receiving a response from the user and assessing completion of the authentication challenge based on the response from the user.

15. The system of claim 13, wherein the one or more contacts are identified at least in part by how recently the one or more contacts and the account owner have interacted.

16. The system of claim 13, wherein the one or more contacts are identified at least in part by a type or a number of commonalities between the account owner and the one or more contacts alone or in combination.

17. The system of claim 13, wherein the one or more contacts are identified at least in part by a duration of contact between the account owner and the one or more contacts.

18. The system of claim 13, wherein the one or more contacts are identified at least in part by an affiliation of the one or more contacts with the account owner.

19. The system of claim 13, wherein the one or more contacts are identified by statistically weighing a plurality of factors.

20. The system of claim 13, wherein the one or more preferences of the one or more contacts are determined explicitly from data of the one or more contacts.

21. The system of claim 13, wherein the one or more preferences of the one or more contacts are determined implicitly from data of the one or more contacts.

22. The system of claim 13, wherein the one or more preferences of the one or more contacts are determined inferentially from data of the one or more contacts.

23. The system of claim 13, wherein the potentially fraudulent authentication attempt includes a failed authentication attempt.

24. The system of claim 22, wherein the inferential determination includes determining the one or more preferences based on data collected from the one or more contacts playing an online game.

25. A computer program product comprising a non-transitory computer usable storage medium including a computer readable program, the computer readable program when executed by a processor causes the processor to:

receive an authentication request from a user, wherein the authentication request includes primary authentication information and secondary authentication information from the user;

in response to receiving the authentication request, detect a potentially fraudulent authentication attempt based on the secondary authentication information from the user;

identify one or more contacts of an account owner based at least in part on a frequency of interaction between the account owner and the one or more contacts;

determine one or more preferences of the one or more contacts based on an analysis of information about the one or more contacts;

generate one or more authentication challenges based at least in part on the determined one or more preferences of the one or more contacts, the one or more authentication challenges including one or more questions about the determined one or more preferences of the one or more contacts based on the analysis;

assess a response to the one or more authentication challenges; and

determine access based on the assessment.