Patent Document ID: 20160164922
Application ID: 15044275
Patent Status: 0

Claim One:
1. A computer program product for managing an authentication policy for a user on a network of an organization, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions readable by a hardware processor to cause the processing circuit to perform a method comprising: determining at least one social media attribute of the user, the at least one social media attribute comprising at least one of: how many social media accounts the user has, how many social media postings the user has made, how many social media friends the user has, and one or more associations of social media friends of the user; assigning a social media risk value based on the at least one social media attribute of the user; determining at least one network activity risk attribute of the user, the at least one network activity attribute comprising at least one of: a number of devices that the user uses to access the network, a type of device that the user uses to access the network, and an operating system running on a device that the user uses to access the network; assigning a network activity risk value based on the at least one network activity risk attribute; calculating a current risk assessment score of the user based on the social media risk value and the network activity risk value; and determining the authentication policy for the user based on the current risk assessment score.