Triggering a request for an authentication

摘要

The present disclosure relates to multifactor-based authentication systems. Multifactor authentication occurs during a communication session in response to detecting a trigger event, such as an anomalous condition. Historical metrics, such as performance metrics (e.g., rendering speeds), behavioral metrics (e.g., click-stream behavior), environmental metrics (e.g., noise), etc., can be used as a baseline to compare against metrics for a current communication session. An anomalous condition, such as a current session metric exceeding a threshold, can result in an authentication service transmitting a multifactor authentication request.

主权项

1. A method of determining when to request multifactor authentication, the method comprising:
generating one or more session profiles using communication session metrics for previous communication sessions between a user, a client device or both, and a service provider; setting one or more thresholds representing an acceptable deviation from the one or more session profiles; receiving a request from the client device to perform an action within the service provider; determining whether a session metric for an active communication session exceeds the one or more thresholds; requesting a multifactor authentication for the user prior to responding to the request to perform the action if the session metric exceeds the one or more thresholds; and wherein the communication session metrics for the previous communication sessions include session performance characteristics that include rendering speeds for the client device.