Patent ID: 7908645
Filing Date: 2011-03-15
Classification: G06F,G06Q,G07F,H04L,H04W

Abstract:
1. A method comprising: receiving, at a server, an access request originating from a client device communicatively coupled with the server; gathering, by the server, identifying information concerning the client device; retrieving, by the server, risk information from a device central repository (DCR), the risk information identifying a risk that the access request is fraudulent; determining, by the server, authentication interface selection criteria based on the identifying information and the risk information; selecting, by the server, a graphical authentication user interface from a plurality of graphical authentication user interfaces based on the authentication interface selection criteria, wherein each of the plurality of graphical authentication user interfaces is a variation of a single user interface and includes one or more distinct graphical elements for entering authentication information, the distinct graphical elements are variations of corresponding elements of the single user interface, and the selected graphical authentication user interface has a level of security commensurate to the risk identified in the risk information; causing, by the server, the graphical authentication user interface to be presented at the client device; determining, by the server, whether to authenticate the access request based on information entered at the client device in response to the presented graphical authentication user interface; and updating, by the server, the risk information stored in the DCR based on authentication results for the access request.