Skill-based authentication

摘要

There is disclosed herein techniques for use in skill-based authentication. The techniques comprise determining a skill associated with a user. Also, the techniques comprise providing a user challenge based on the skill. Further, the techniques comprise receiving a user response to the user challenge. Additionally, the techniques comprise determining whether to authenticate the user based on the user response.

主权项

1. A method, comprising:
creating a profile in connection with a user, wherein the profile describes a skill relating to a user proficiency in a subject; receiving a request from the user to access a protected resource; in response to receiving the request, determining the skill associated with the user; based on the skill, providing a user challenge to the user, wherein the user challenge comprises at least one of an equation to be solved and a formula-based problem to be solved by the user, wherein the user challenge is provided for a predetermined period of time such that the user can only respond to the user challenge within the predetermined period of time, wherein the user challenge provided to the user comprises a plurality of responses to the user challenge including a correct response to the user challenge; receiving a user response from the user to the user challenge; and based on the user response, determining whether to authenticate the user such that the user can access the protected resource.