Guided implicit authentication

摘要

Embodiments of the present disclosure provide a method and system for guided implicit authentication. The system first receives a request to access the controlled resource from a user. The system then determines whether the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events. Next, the system allows the user to provide information associated with regular user behavior and/or current contextual data. The system further updates the user behavior measure based on current contextual data.

主权项

1. A computer-implemented method for guided implicit authentication, the method comprising:
receiving, by a computing device, a request to access a controlled resource from a user; determining current contextual data associated with the request; determining whether the current contextual data associated with the user request is inconsistent with regular user behavior by calculating a user behavior measure derived from historical contextual data of past user events; responsive to the current contextual data being inconsistent with regular user behavior, prompting the user to confirm whether the current contextual data is safe for implicit authentication; providing a user interface for the user to input regular user behavior and expected behavior changes; updating the user behavior measure based on the user input; and responsive to the user confirming that the current contextual data is safe for implicit authentication, updating the user behavior measure based on the current contextual data.