Patent ID: 11907946
Assignee: nan
Field: IT methods for management (Electrical engineering)
Classification: CPC G | IPC G

Claim 16:
17. A non-transitory storage medium storing instructions that, when executed, cause one or more processors to perform a method comprising:
receiving a use restriction, requiring verification of a user identity of an identified user responsive to an attempt by the identified user to access a remotely accessible first software program, by designating an association between an identity verification process and the first software program;
receiving designation of a plurality of verification parameters to be used to verify the user identity via the identity verification process, including at least one verification parameter different from a user-name and different from a password;
obtaining at least one acceptable value for each of the verification parameters, each acceptable value representing a basis for one of the plurality of verification parameter to be met when the acceptable value correlates to a current value determined for the one of the verification parameters during execution of the identity verification process;
storing a modifiable paradigm, usable as part of the identity verification process, including at least a threshold number of the verification parameters to be met to constitute automatic verification of the user identity, based on correlation between current values of respective ones of the verification parameters, the current values obtained based on a request from the identified user, when compared to the acceptable values for the corresponding respective ones of the verification parameters, the paradigm further defining what constitutes correlation for at least one of the verification parameters;
determining, based on the first request, the current values of the verification parameters;
comparing the determined current values to the obtained acceptable values for the verification parameters to determine which of the verification parameters are met based on the paradigm;
determining whether the threshold number of the verification parameters are met to automatically verify the user identity;
in the absence of the threshold number of the verification parameters being met, sending a second request, that requests confirmation of validity of the first request, to a second program that includes at least one designated fraud prevention aspect, to trigger the fraud prevention aspect to request a user response to the second request to verify the first request, the second program installed on an out-of-band device, having a stored prior association with the user identity, and validated for use in conjunction with the identity verification process;
receiving a transmitted response from the second program, the transmitted response generated by the second program based on the user response and indicating validity of the first request; and
responsive to the transmitted response indicating that the first request is valid, verifying the user identity of the identified user in conjunction with the received first request.