Patent ID: 9348981
Filing Date: 2016-05-24
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method performed by one or more computing devices for generating an authentication challenge to a user, the method comprising: receiving, at the one or more computing devices, a first login request from a user, wherein the first login request includes identifying information associated with the user from which the first login request was received; performing a risk analysis of the user, using the one or more computing devices, based on the identifying information associated with the user sending the first login request; identifying, using the one or more computing devices, a level of risk associated with the user based on a comparison between an IP address of the user and a list of known adversarial IP addresses and a determination of a proximity between a first origin of the first login request and a second origin of a previous successful login request combined with a time between the first login request and the previous successful login request, wherein the level of risk associated with the user is one of two or more levels of risk associated with a risk index wherein each of the two or more levels of risk represents a degree of confidence the user is an adversarial user; determining, at the one or more computing devices, whether to generate an authentication challenge based at least in part on the identified level of risk of the user; if a determination is made to generate the authentication challenge based at least in part on the identified level of risk of the user, generating, at the one or more computing devices, the authentication challenge associated with a level of difficulty, the level of difficulty of the authentication challenge based at least in part on the identified level of risk of the user; and sending the generated authentication challenge for display to the user from which the first login request was received.