Authentication integrity protection

Patent metadata

Field	Value
Publication number	US-2019109849-A1
Application number	US-201816167402-A
Country	US
Kind code	A1
Filing date	Oct 22, 2018
Priority date	Apr 19, 2013
Publication date	Apr 11, 2019
Grant date	—

Abstract

Systems, methods, and processor-readable media are disclosed to adaptively secure access operations with respect to electronic resources. A request from an endpoint device may be detected, and adaptive authentication may be initiated. Identifiers for the endpoint device may be generated or retrieved. An access-right indicator may be identified to facilitate determination of whether particularized access for electronic resources is to be granted. Initiation of access events by the endpoint device may be detected. Sensor-based data that is based on a first set of sensors capturing phenomena at the endpoint device may be received. A particularized specification of recognized patterns mapped to the access-right indicator may be adaptively developed. A nonconformance of additional data with respect to the particularized specification may be detected. Responsive to the nonconformance, an activation adjustment in sensor operation may be selectively caused, and subsequent sensor-based data may be collected based on the activation adjustment.

First claim

What is claimed:

1 . An adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources, the adaptive authentication system comprising:
one or more adaptive processing devices; and one or more non-transitory, computer-readable storage media storing instructions which, when executed by the one or more adaptive processing devices, cause the one or more adaptive processing devices to perform actions including:
detecting a request received via an endpoint device;
responsive to the request, identifying an access-right indicator configured to facilitate determination of whether particularized access for electronic resources is to be granted;
generating or retrieving one or more identifiers for the endpoint device, the one or more identifiers uniquely corresponding to the endpoint device amongst a set of endpoint devices;
detecting initiation of set of one or more access events initiated by the endpoint device;
receiving sensor-based data that is based at least in part on a first set of one or more sensors at the endpoint device capturing phenomena at the endpoint device, where the first set of one or more sensors is communicatively connected to the one or more adaptive processing devices;
receiving additional data that is one or more of based at least in part on the first set of one or more sensors, based at least in part on a second set of one or more sensors at the endpoint device, and/or based at least in part on input via an input interface of the endpoint device;
accessing a set of one or more authentication rules specified by a protocol record, the set of one or more authentication rules comprising criteria for endpoint authentication;
adaptively developing a particularized specification of one or more recognized patterns mapped to the access-right indicator based at least in part on processing the additional data;
generating an endpoint qualification that is based at least in part on the particularized specification of one or more recognized patterns and the criteria for endpoint authentication; and
selecting an activation adjustment in operation of one or more of the first set of one or more sensors, the second set of one or more sensors, a third set of one or more sensors, and/or a communication interface, and transferring a command to cause the activation adjustment.

2 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 1 , wherein the actions further include:
selectively permitting or prohibiting performance of at least part of the set of one or more access events based at least in part on processing subsequent sensor-based data consequent to the activation adjustment.

3 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 1 , wherein the endpoint qualification comprises an authentication score that is mapped to a characterization corresponding to the endpoint device.

4 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 1 , wherein:
the first set of one or more sensors correspond to a first sensor type; and the second set of one or more sensors correspond to a second sensor type that is different from the first sensor type.

5 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 3 , wherein the third set of one or more sensors correspond to a third sensor type that is different from the first sensor type and the second sensor type.

6 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 1 , wherein the one or more recognized patterns mapped to the access-right indicator correspond to one or more of an identification pattern, an action pattern, a location pattern, and/or a temporal pattern.

7 . The adaptive authentication system to adaptively secure a set of access operations with respect to one or more electronic resources as recited in claim 1 , wherein the criteria for endpoint authentication specifies a first weight accorded to a first type of sensor-based data generated based at least in part on the first set of one or more sensors, and a second weight accorded to a second type of sensor-based data generated based at least in part on the second set of one or more sensors.

8 . One or more non-transitory, processor-readable media having processor-readable instructions thereon which, when executed by one or more processing devices, cause the one or more processing devices to facilitate adaptively securing a set of access operations with respect to one or more electronic resources by performing actions including:
detecting a request received via an endpoint device; responsive to the request, identifying an access-right indicator configured to facilitate determination of whether particularized access for electronic resources is to be granted; generating or retrieving one or more identifiers for the endpoint device, the one or more identifiers uniquely corresponding to the endpoint device amongst a set of endpoint devices; detecting initiation of set of one or more access events initiated by the endpoint device; receiving sensor-based data that is based at least in part on a first set of one or more sensors at the endpoint device capturing phenomena at the endpoint device, where the first set of one or more sensors is communicatively connected to the one or more adaptive processing devices; receiving additional data that is one or more of based at least in part on the first set of one or more sensors, based at least in part on a second set of one or more sensors at the endpoint device, and/or based at least in part on input via an input interface of the endpoint device; accessing a set of one or more authentication rules specified by a protocol record, the set of one or more authentication rules comprising criteria for endpoint authentication; adaptively developing a particularized specification of one or more recognized patterns mapped to the access-right indicator based at least in part on processing the additional data; generating an endpoint qualification that is based at least in part on the particularized specification of one or more recognized patterns and the criteria for endpoint authentication; and selecting an activation adjustment in operation of one or more of the first set of one or more sensors, the second set of one or more sensors, a third set of one or more sensors, and/or a communication interface, and transferring a command to cause the activation adjustment.

9 . The one or more non-transitory, processor-readable media as recited in claim 8 , wherein the actions further include:
selectively permitting or prohibiting performance of at least part of the set of one or more access events based at least in part on processing subsequent sensor-based data consequent to the activation adjustment.

10 . The one or more non-transitory, processor-readable media as recited in claim 8 , wherein the endpoint qualification comprises an authentication score that is mapped to a characterization corresponding to the endpoint device.

11 . The one or more non-transitory, processor-readable media as recited in claim 8 , wherein:
the first set of one or more sensors correspond to a first sensor type; and the second set of one or more sensors correspond to a second sensor type that is diffe

Assignees

• Pearson Education Inc

Inventors

• Frempong Derek K
• Paek Geanie
• Silverman Andrew

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04W12/67

  Risk-dependent, e.g. selecting a security level depending on risk profiles · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/105

  Multiple levels of security · CPC title