Patent ID: 8572704

Claim:
A method, comprising: receiving, by an authentication service device, a registration request from a user, the user providing information identifying an account; querying a transaction database using said information identifying an account; identifying a set of transactions conducted using said account, each of said transactions having at least one transaction detail field; applying authentication rules required by the account provider, wherein the authentication rules include a minimum number of transactions requirement and a permissible number of user retry(s) requirement; presenting said set of transactions according to the minimum number of transactions requirement to said user with at least one of said transaction detail fields being redacted; presenting at least one bogus transaction to the user with at least one of the bogus transaction fields being redacted; prompting said user to provide positive information concerning said at least one of said redacted transaction detail fields and to provide negative information regarding the at least one redacted bogus transaction fields; and determining, by the authentication service device, to authenticate said user based on at least one positive information response, on at least one negative information response, and on the user satisfying the permissible number of retry(s) requirement.