Patent Document ID: 9183595
Application ID: 13434983

Base Claim:
1. In a knowledge-based authentication (KBA) system, a method of generating a set of questions, the method comprising: collecting a set of facts that have references to a population of users; receiving a request to authenticate a particular user claiming to belong to a group of users included in the population of users; in response to the request, identifying a set of group facts, each group fact of the set of group facts being included in the set of facts and having references to users of the group of users; and generating the set of questions from the set of group facts, responses to questions of the set of questions provided by the particular user being indicative of whether the particular user belongs to the group of users; wherein generating the set of questions from the set of group facts includes: for each group fact of the set of group facts, producing an internal link strength that represents a number of users of the group of users referenced by that group fact; using a group fact of the set of group facts to produce a question of the set of questions when the internal link strength for the group fact is greater than a threshold internal link strength; and not using the group fact in producing questions of the set of questions when the internal link strength for the group fact is less than the threshold internal link strength.

---

Claim 5:
5. A method according to claim 1 , wherein each fact of the set of facts includes a value of a time-to-live (TTL) parameter; wherein the method further includes: excluding the fact in producing questions of the set of questions when the value of the TTL parameter exceeds a threshold TTL value.