Systems and methods for authenticating network operations via dynamic selection of access tokens

1 . A system for authenticating network operations via dynamic selection of access tokens, the system comprising:

one or more processors executing computer program instructions that, when executed, cause operations comprising:

detecting use of a software application in connection with processing a network operation associated with accessing a resource, wherein the software application is configured to store a set of access tokens, wherein each access token of the set of access tokens are issued by an issuing entity that enables access to the resource;

for each issuing entity associated with each access token of the set of access tokens, receiving a response from the issuing entity associated with the set of access tokens based on a transmission of the network operation to the issuing entity, wherein the response indicates a risk value of an authentication process associated with the access token of the set of access tokens that correspond to the issuing entity, and wherein the risk value is assessed by the issuing entity;

determining, for each access token of the set of access tokens, whether the risk value of the authentication process associated with the access token satisfies a threshold risk value to access the resource;

determining a subset of the set of access tokens to authenticate the network operation based on a subset of risk values of the authentication processes associated with the set of access tokens satisfying the threshold risk value; and

providing, to a prediction model, (i) a subset of risk values associated with the subset of the set of access tokens, (ii) the threshold risk value, and (iii) a set of access token identifiers for the subset of the set of access tokens to generate an output, the output indicating a selected access token; and

receiving, via a graphical user interface (GUI) on a user device associated with the software application, the selected access token to (i) authenticate the network operation, and (ii) access the resource.

2 . A method comprising:

detecting, using one or more processors, use of a software application in connection with processing a network operation associated with accessing a resource, wherein the software application is configured to store a set of access tokens that enable access to one or more resources;

providing, using the one or more processors, the network operation to a set of issuing entities associated with the set of access tokens;

in connection with providing the network operation, for each issuing entity of the set of issuing entities, using the one or more processors:

receiving, from the issuing entity of the set of issuing entities, a risk value associated with an access token of the set of access tokens issued by the issuing entity, wherein the risk value is assessed by the issuing entity;

determining, using the one or more processors, a set of results by, for each access token of the set of access tokens, whether the risk value associated with the access token satisfies a threshold risk value;

determining, using the one or more processors, a subset of the set of access tokens to authenticate the network operation based on the set of results indicating that a set of risk values associated with the subset of the set of access tokens satisfy the threshold risk value;

providing, using the one or more processors, to a prediction model, (i) the set of risk values associated with the subset of the set of access tokens, (ii) the threshold risk value, and (iii) a set of access token identifiers for the subset of the set of access tokens to generate an output, the output indicating a selected access token; and

authenticating the network operation, using the one or more processors, to enable access to the resource using the selected access token associated with a first risk value that satisfies the threshold risk value of the set of access tokens.

3 . The method of claim 2 , further comprising:

receiving training data to train the prediction model comprising training routine risk values associated with training routine access tokens, (ii) a training routine threshold risk level, and (iii) training routine access token identifiers associated with the training routine access tokens; and

providing the training data to the prediction model during a training routine to train the prediction model to generate a second output, the second output indicating a training routine access token to select for use in authenticating network operations.

4 . The method of claim 2 , further comprising receiving, via a graphical user interface (GUI), a user selection of an additional selected access token, via the GUI.

5 . The method of claim 2 , further comprising:

providing the network operation to the set of issuing entities associated with the set of access tokens using the one or more processors, wherein the network operation comprises (i) user specific information of a user requesting access to the resource, and (ii) a resource identifier, and

receiving, from each issuing entity of the set of issuing entities, the risk value associated with each access token of the set of access tokens issued by a respective entity of the set of issuing entities, wherein the risk value is provided by the respective entity of the set of issuing entities based on (i) the user specific information of the user, and (ii) the resource identifier.

6 . The method of claim 2 , further comprising:

in response to determining that a given risk value associated with a given access token fails to satisfy the threshold risk value, providing user specific information of a user requesting access to the resource to a respective issuing entity that issued the given access token, wherein the given risk value associated with the given access token failing to satisfy the threshold risk value is determined; and

receiving, from the respective issuing entity that issued the given access token, an updated risk value associated with the given access token.

7 . The method of claim 2 , further comprising:

in response to determining that a given risk value associated with a given access token fails to satisfy the threshold risk value, generating a new access token associated with a respective issuing entity associated with the given access token, wherein the given risk value associated with the given access token failing to satisfy the threshold risk value is determined; and

receiving from the respective issuing entity associated with the new access token, a risk value associated with the new access token.

8 . The method of claim 2 , further comprising:

in response to receiving, from each issuing entity of the set of issuing entities, the risk value associated with each access token of the set of access tokens issued by a respective issuing entity of the set of issuing entities, storing the risk value associated with each access token of the set of access tokens, wherein the risk value associated with each access token of the set of access tokens issued by the respective issuing entity is received; and

in response to detecting a failure to receive, from each issuing entity of the set of issuing entities, an updated risk value associated with each access token of the set of access tokens issued by the respective issuing entity in connection with providing a second network operation to the set of issuing entities associated with the set of access tokens, using the stored risk value associated with each access token of the set of access tokens issued by the respective issuing entity to select a second access token to authenticate the second network operation, wherein the failure to receive the updated risk value is detected.

9 . The method of claim 2 , wherein each access token of the set of access tokens is associated with an authentication process to authenticate the network operation.

10 . One or more non-transitory computer-readable media storing instructions, that when executed by one or more processors, cause operations comprising:

detecting use of a software application in connection with processing a network operation, wherein the software application is configured to store a set of access tokens that enable access to one or more resources;

for each issuing entity of a set of issuing entities associated with the set of access tokens:

receiving, from the issuing entity, a risk value associated with an access token of the set of access tokens, wherein the access token is issued by the issuing entity;

determining a subset of the set of access tokens to authenticate the network operation based on a set of risk values associated with the subset of the set of access tokens satisfying a threshold risk value, by determining, for each respective access token of the set of access tokens, whether the respective risk value associated with the access token satisfies the threshold risk value;

providing, to a prediction model, (i) the set of risk values associated with the subset of the set of access tokens, (ii) the threshold risk value, and (iii) a set of access token identifiers for the subset of the set of access tokens to generate an output, the output indicating a selected access token; and

authenticating the network operation to enable access to a resource using the selected access token associated with a first risk value that satisfies the threshold risk value of the set of access tokens.

11 . The one or more non-transitory computer-readable media of claim 10 , the instructions further causing operations comprising:

receiving training data to train the prediction model comprising (i) training routine risk values associated with training routine access tokens, (ii) a training routine threshold risk level, and (iii) training routine access token identifiers associated with the training routine access tokens; and

providing the training data to the prediction model during a training routine to train the prediction model to generate a second output, the second output indicating a training routine access token to select for use in authenticating network operations.

12 . The one or more non-transitory computer-readable media of claim 10 , further comprising receiving, via a graphical user interface (GUI), a user selection of an additional selected access token.

13 . The one or more non-transitory computer-readable media of claim 10 , the instructions further causing operations comprising:

providing the network operation to the set of issuing entities associated with the set of access tokens, wherein the network operation comprises (i) user specific information of a user requesting access to the resource, and (ii) a resource identifier; and

receiving, from each entity of the set of issuing entities, the risk value associated with each access token of the set of access tokens issued by a respective entity of the set of issuing entities, wherein the risk value is provided by the respective entity of the set of issuing entities based on (i) the user specific information of the user, and (ii) the resource identifier.

14 . The one or more non-transitory computer-readable media of claim 10 , the instructions further causing operations comprising:

in response to determining that a given risk value associated with a given access token fails to satisfy the threshold risk value, providing user specific information of a user requesting access to the resource to a respective issuing entity associated with the given access token; and

receiving, from the respective issuing entity associated with the given access token, an updated risk value associated with the given access token.

15 . The one or more non-transitory computer-readable media of claim 10 , the instructions further causing operations comprising:

in response to determining that a given risk value associated with a given access token fails to satisfy the threshold risk value, generating a new access token associated with a respective issuing entity that issued the given access token; and

receiving from the respective issuing entity that issued the new access token, a risk value associated with the new access token.

16 . The one or more non-transitory computer-readable media of claim 10 , the instructions further causing operations comprising:

in response to receiving, from each entity of the set of issuing entities, the risk value associated with each access token of the set of access tokens issued by a respective entity of the set of issuing entities, storing the risk value associated with each access token of the set of access tokens; and

in response to detecting a failure to receive, from each entity of the set of issuing entities, an updated risk value associated with each access token of the set of access tokens associated with the respective entity in connection with providing a second network operation to the set of issuing entities associated with the set of access tokens, using the stored risk value associated with each access token of the set of access tokens issued by the respective entity to select a second access token to authenticate the second network operation.