Patent ID: 9363267
Filing Date: 2016-06-07
CPC Classification: G06F,H04L

Claim Text:
1. A computer system, comprising: a non-transitory memory storing instructions; and one or more hardware processors coupled to the non-transitory memory and configured to read the instructions from the non-transitory memory to cause the system to perform operations comprising: receiving, by a computer system providing access to an application programming interface, a public key provided by a user for encrypting an additional authentication challenge, the public key being provided by the user in advance of a request to use the application programming interface from a client device claiming to be associated with the user; receiving, by the computer system, one or more credentials to authenticate the application programming interface request from the client device based on a first level of authentication; encrypting, by the computer system, the additional authentication challenge that is to be issued to the client device requesting access to the application programming interface using the public key provided in advance by the user; issuing the encrypted additional authentication challenge to the client device to further authenticate the application programming interface request based on detecting that information known about the user differs from information associated with the client device; processing the application programming interface request based on a result of issuing the encrypted additional authentication challenge to the client device; and detecting, by the computer system, abnormal use of the application programming interface associated with the client device based on a deviation from baseline usage of the application programming interface.