Patent ID: 9578004
Date: 2017-02-21
CPC Classifications: G06F,H04L

Claim:
1. A method of performing a step-up authentication comprising: detecting, via a monitoring device, an incoming request from a first application to a second application, wherein the second application is protected; in response to detecting the incoming request from the first application to the second application, calculating a risk score for the incoming request based on at least one of: a type of transaction associated with the incoming request, and a geographic location from which the incoming request originated; and determining whether the risk score is greater than a predetermined risk threshold; performing an authentication in response to determining that the risk score is greater than the predetermined risk threshold, the authentication comprising: authorizing the second application to process the incoming request in response to determining that the challenge response matches the verified response, wherein authorizing the second application to process the incoming request comprises carrying out the request; and terminating the authentication in response to determining the challenged response does not match the verified response.