Patent ID: 8161534
Filing Date: 2012-04-17
Classification: G06F

Abstract:
1. A computer-executed method for verifying user identity, the method comprising: extracting, by a computer, a user's information from devices associated with the user, without explicitly requiring the user to input the information manually; generating a security question corresponding to an activity the user has engaged in or a place visited by the user based on the extracted information; presenting to the user the security question and receiving and storing a response from the user; subsequently receiving a request to reset the user's password; presenting the security question to the requester; receiving a response from the requester to the question; comparing the requester's response with the stored user response; changing a stored negative response to an affirmative response, wherein the affirmative response is verified by updated extracted information indicating that the user has engaged in the activity or visited the place; and precluding any change to a stored positive response irrespective of the updated extracted information.