OUT-OF-BAND CHALLENGE QUESTION AUTHENTICATION

摘要

A system and method for challenge question authentication comprises determining whether a log-in attempt requires additional authentication. A user attempts to log-in using a first application and a first delivery channel. When additional authentication is required, a challenge question is communicated to the user using a second application and a second delivery channel. The challenge question is specific to the user. An answer to the challenge question is received, and the user provides the answer using the first application and the first delivery channel. The log-in attempt is completed when the answer to the challenge question is correct.

主权项

1. An apparatus, comprising:
a processor operable to determine whether a log-in attempt requires additional authentication, wherein a user attempts to log-in using a first application and a first delivery channel; when additional authentication is required, a network interface communicatively coupled to the processor is operable to:
communicate a challenge question to the user using a second application and a second delivery channel, wherein the challenge question is specific to the user;receive an answer to the challenge question, wherein the user provides the answer using the first application and the first delivery channel and the processor is further operable to complete the log-in attempt when the answer to the challenge question is correct.