Patent ID: 11907946
Assignee: nan
Field: IT methods for management (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method comprising:
receiving a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
receiving designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
obtaining at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the verification parameters to be met when the acceptable value matches a current value determined for the one of the verification parameters during execution of the identity verification process;
receiving a first request from the identified user for remote access to the first software program;
determining, based on the first request, the current values of the verification parameters;
comparing the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met;
determining whether sufficient instances of the verification parameters are met to automatically verify the user identity, wherein what constitutes the sufficient instances is defined by a modifiable aspect of the identity verification process;
in the absence of the sufficient instances of the verification parameters being met, sending a second request, that requests confirmation of validity of the first request, to a second program that includes at least one fraud prevention aspect, to trigger the fraud prevention aspect of the second program to request a user verification of the first request, the second program installed on an out-of-band device having a stored prior association with the user identity and validated for use in conjunction with the identity verification process;
receiving a transmitted response to the second request from the second program, the transmitted response generated by the second program based on user input to the second program and indicating validity of the first request; and
responsive to the received response indicating that the first request is valid, verifying the user identity of the identified user in conjunction with the received first request.