Patent ID: 9560030
Date: 2017-01-31
CPC Classifications: G06F,H04L

Claim:
1. A method of selectively enabling access to functions of a transaction application requested by a user of a client electronic device, the transaction applications respectively corresponding to application nodes, the method comprising: authenticating, using one or more server computers, the user for access to an entry point of the transaction application; making a determination, using one or more server computers, whether to require re-authentication of the user for access to an application node other than the entry point, wherein: (1) making the determination comprises executing a random weight determination module to assign a randomly generated respective weight value to each of a plurality of application nodes that would not otherwise require authentication; and (2) as the user traverses one or more of the plurality of application nodes, comparing a sum of at least one respective weight value of the traversed application nodes, wherein the traversed application nodes include the application node currently being traversed, to a threshold value to determine whether re-authentication of the user is required prior to granting access to the function of the transaction application corresponding to the currently traversed application node; and if the determination indicates that re-authentication of the user is required prior to granting access to a function of the transaction application corresponding to the application node, requiring re-authentication of the user if the user attempts to traverse the application node.