Patent ID: 8826418
Filing Date: 2014-09-02
Classification: G06F

Abstract:
1. A method for retaining trust, the method comprising: a computer receiving a correct password for a privileged function; the computer setting a trust to a maximum level; the computer detecting at least one period of inactivity; the computer adjusting a trust based on the at least one period of inactivity; the computer receiving a request to access a privileged function, after receiving the correct password and detecting the at least one period of activity; the computer responsive to receiving the request, determining that the trust is below a trust threshold; responsive to determining that the trust is below the trust threshold, the computer challenging a user to re-authenticate by presenting a puzzle of less complexity than a complexity of the correct password; the computer receiving a re-authentication attempt, comprising a puzzle attempt, wherein the puzzle attempt is of less complexity than the correct password, wherein complexity is proportional to a number of character options in the puzzle attempt; the computer determining whether the puzzle attempt is correct; and the computer responsive to a determination that the puzzle attempt is correct, granting access to the privileged function.