Techniques for user authentication

摘要

Techniques for user authentication are disclosed. In some situations, the techniques include receiving, from a client device, an authentication request to access a network resource, the request including a user identifier, obtaining a security credential associated with the user identifier contained in the received request, generating an authorization code based on the obtained security credential, providing to the client device instructions to obtain first information corresponding to the generated authorization code, receiving, from the client device, the first information provided in response to the provided instructions, and, when the first information received from the client device corresponds to at least a portion of the generated authorization code, authorizing the client device to access the network resource.

主权项

1. A computer-implemented method comprising:
receiving, by a configured computing system, an authentication request to access a network resource on behalf of an indicated user; generating, by the configured computing system, an authorization code based on a security phrase associated with the indicated user, the generating including selecting a first subset of characters in the security phrase to use for the authorization code and including excluding a distinct second subset of the characters in the security phrase from use for the authorization code; providing, by the configured computing system, instructions to the indicated user regarding obtaining the generated authorization code, the provided instructions including information related to the selected first subset without providing the characters in the selected first subset; receiving, by the configured computing system, information from the indicated user that includes the generated authorization code, the received information not including the excluded second subset of characters; and in response to the received information including the generated authorization code, authorizing the access to the network resource.