Patent ID: 8683597

Claim:
A non-transitory computer-readable medium embodying a program executable by a computing device, the program comprising: code that obtains a request from a user for an operation on an electronic commerce network site that facilitates purchasing and shipping of items; code that computes a base risk for the operation, the base risk measuring a risk to the user of performing the operation; code that adjusts the base risk by a secondary risk, the secondary risk measuring a risk to the user that originates from a client operated by the user, wherein the secondary risk is based at least in part upon whether the client includes a malware detector; code that maps the adjusted base risk to an authentication timeout for the user; code that compares the authentication timeout to a current session timer for the user to determine if a current session for the user has expired; code that performs the operation requested by the user if the current session associated with the user has not expired; and code that authenticates the user before performing the operation if the current session associated with the user has expired.