Customizable authentication system

Patent metadata

Field	Value
Publication number	US-11050735-B2
Application number	US-201816110749-A
Country	US
Kind code	B2
Filing date	Aug 23, 2018
Priority date	Aug 23, 2018
Publication date	Jun 29, 2021
Grant date	Jun 29, 2021

Abstract

An online authentication system allows a user to define their own logic for multistage authentication, which is provided to an online authentication center and stored as encrypted bytecode based on each user's password. Implementation logic can use third party information sources to provide additional authentication options.

First claim

What is claimed is:

1. A network-based authentication system, comprising:
a server having a processor; and
a memory coupled to the server, configured to store user-customized logic at the direction of the server,
wherein the server is configured to perform steps of:
receiving user-customized logic for each of a plurality of users from the authentication system over a network,
compiling the user-customized logic into bytecode,
storing the user-customized logic as bytecode for each user in the memory in an encrypted form based on a password of each user,
receiving the password of a user,
decrypting the user-customized logic for the user using the password of the user,
receiving additional credentials from the user,
verifying the additional credentials by executing the user-customized logic, and
granting the user access to a network resources responsive to the step of verifying.

2. The network-based authentication system of claim 1 , wherein the server is further configured to provide an API to each user that facilitates user-creation of the user-customized logic.

3. The network-based authentication system of claim 1 , wherein the server is further configured to request information from a third-party service across the network as part of the step of verifying the additional credentials.

4. The network-based authentication system of claim 3 , wherein the third-party service is an SAP database.

5. A method for providing authentication services to a plurality of users, comprising steps of:
receiving, at a processor, user-customized logic from each of the plurality of users from a network;
compiling the user-customized logic into bytecode;
storing the user-customized logic as bytecode for each user in the memory in an encrypted form based on a password of each user;
receiving, during an authentication process, the password of a user;
decrypting the user-customized logic for the user using the password of the user;
receiving additional credentials from the user;
verifying, by the processor, the additional credentials by executing the user-customized logic; and
sending an electronic message that grants the user access to a network resources responsive to the step of verifying.

6. The method of claim 5 , further comprising a step of providing an API to each user that facilitates user-creation of the user-customized logic.

7. The method of claim 5 , further comprising a step of requesting, by the processor, information from a third-party service across the network, the information being used in the step of verifying the additional credentials.

8. The method of claim 7 , wherein the third-party service is an SAP database.

9. The method of claim 7 , wherein the third-party service is a CRM database.

10. A computer program product for authenticating any of a plurality of users, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a computer processor to cause the processor to perform a method comprising steps of:
receiving user-customized logic as bytecode from each of the plurality of users from a network;
storing the user-customized logic for each user in a memory in an encrypted form based on a password of each user;
receiving, during an authentication process, the password of a user;
decrypting the user-customized logic for the user using the password of the user;
receiving additional credentials from the user;
verifying, by the processor, the additional credentials by executing the user-customized logic; and
sending an electronic message that grants the user access to a network resources responsive to the step of verifying.

11. The computer program product of claim 10 , wherein the method further comprises a step of providing an API to each user that facilitates user-creation of the user-customized logic.

12. The computer program product of claim 10 , wherein the method further comprises a step of requesting, by the processor, information from a third-party service across the network, the information being used in the step of verifying the additional credentials.

13. The computer program product of claim 12 , wherein the third-party service is an SAP database.

14. The computer program product of claim 12 , wherein the third-party service is a CRM database.

Assignees

• IBM

Inventors

• Valecha Vinod A
• Panchal Sanjay B
• Agrawal Mohit N

Classifications

• H04L2463/082

  applying multi-factor authentication · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L9/321

  involving a third party or a trusted authority · CPC title

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title