Authenticating an entity

摘要

There is disclosed a method and system for use in authenticating an entity. An entity location history is stored comprising a historical record of locations visited by the entity. An authentication request is received from the entity. A pattern of recent locations visited by the entity indicative of irregular behavior is detected. An analysis is performed between the pattern of recent locations indicative of irregular behavior and the entity location history for establishing the riskiness of the authentication request. An authentication result is generated based on the analysis between the pattern of recent locations indicative of irregular behavior and the entity location history.

主权项

1. A method comprising:
at an authentication system comprising one or more processors and memory coupled to the one or more processors, wherein the memory is constructed and arranged to store instructions executable by the one or more processors, wherein the one or more processors executing instructions from the memory forms a specialized circuit: receiving an online request to authenticate an entity; storing a location history comprising a historical record of locations visited by a mobile communications device associated with the entity over a first period of time; receiving location information comprising a record of locations visited by the the mobile communications device over a second period of time; based on the location information, detecting a pattern of locations, wherein the pattern indicates that the mobile communications device is located at the same location for the second period of time; determining that the pattern represents a sequence of locations over a timeline that indicates irregular behavior with respect to the location history, wherein the location history indicates that the entity has historically a regular travel pattern that does not include the mobile communications device being located in same location for a period of time that is similar to the second period of time; and based on said determination, determining a risk score for use in authenticating the entity.