Event Driven Multi-Factor Authentications For Internet Transactions
An event-driven multi-factor authentication system for internet transactions is implemented in a communication system including a user platform operably connected to an application platform. In embodiments described herein, the application platform receives and evaluates event data associated with one or more online transactions of the user to identify occurrences of any triggering events; and upon occurrences of triggering events, identifies and issues one or more predefined authentication challenges corresponding to the triggering events. The triggering events may comprise, without limitation, amount-based events, time-based events or geography-based events. In such manner, for example, multi-factor authentications may be triggered for transactions having specified monetary amounts, amounts within a specified time period, or initiated from certain geographic locations. The authentication challenges may characterize different numbers of authentication challenges (including, without limitation, a combination of single- and multi-factor authentication) for different events.
1 . Apparatus for providing event-driven authentication associated with one or more online transactions of a user, in accordance with a communication system including a user platform operably connected to an application platform, the apparatus at the application platform comprising:
a memory; and
at least one processor coupled to the memory and configured to:
receive event data associated with one or more online transactions of the user;
evaluate the event data relative to a plurality of predefined event conditions to identify occurrences of any triggering events;
upon occurrence of at least one triggering event,
identify authentication challenge rules corresponding to the at least one triggering event, and
issue one or more authentication challenges according to the authentication challenge rules.
2 . The apparatus of claim 1 , wherein the authentication challenge rules specify using multi-factor authentication upon occurrence of at least one triggering event.
3 . The apparatus of claim 1 , wherein the at least one triggering event includes at least a first and second triggering event, and wherein the authentication challenge rules specify using a first number of authentication challenges upon occurrence of the first triggering event and a second number of authentication challenges upon occurrence of the second triggering event, wherein the second number is greater than the first number.
4 . The apparatus of claim 3 , wherein the authentication challenge rules specify using single-factor authentication upon occurrence of the first triggering event and multi-factor authentication upon occurrence of the second triggering event.
5 . The apparatus of claim 1 , wherein the at least one triggering event comprises one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts.
6 . The apparatus of claim 1 , wherein the at least one triggering event comprises one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period.
7 . The apparatus of claim 1 , wherein the at least one triggering event comprises one or more geography-based events, wherein the predefined event conditions comprise indicia of where respective transactions are initiated relative to a specified geographic area.
8 . The apparatus of claim 1 , wherein the at least one triggering event comprises a combination of:
one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts; and
one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period.
9 . The apparatus of claim 1 , wherein the at least one triggering event comprises a combination of:
one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts;
one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period; and
one or more geography-based events, wherein the predefined event conditions comprise indicia of where respective transactions are initiated relative to a specified geographic area.
10 . Method for providing event-driven authentication associated with one or more online transactions of a user, in accordance with a communication system including a user platform operably connected to an application platform, the method comprising the application platform:
receiving event data associated with one or more online transactions of the user;
evaluating the event data relative to a plurality of predefined event conditions to identify occurrences of any triggering events;
upon occurrence of at least one triggering event,
identifying authentication challenge rules corresponding to the at least one triggering event, and
issuing one or more authentication challenges according to the authentication challenge rules.
11 . The method of claim 10 , wherein the step of issuing one or more authentication challenges comprises issuing multi-factor authentication upon occurrence of at least one triggering event.
12 . The method of claim 10 , wherein the at least one triggering event includes at least a first and second triggering event, and wherein the step of issuing one or more authentication challenges comprises issuing a first number of authentication challenges upon occurrence of the first triggering event and a second number of authentication challenges upon occurrence of the second triggering event, wherein the second number is greater than the first number.
13 . The method of claim 12 , wherein the step of issuing one or more authentication challenges comprises issuing single-factor authentication upon occurrence of the first triggering event and multi-factor authentication upon occurrence of the second triggering event.
14 . The method of claim 10 , wherein the at least one triggering event comprises one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts.
15 . The method of claim 10 , wherein the at least one triggering event comprises one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period.
16 . The method of claim 10 , wherein the at least one triggering event comprises one or more geography-based events, wherein the predefined event conditions comprise indicia of where respective transactions are initiated relative to a specified geographic area.
17 . The method of claim 10 , wherein the at least one triggering event comprises a combination of:
one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts; and
one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period.
18 . The method of claim 10 , wherein the at least one triggering event comprises a combination of:
one or more amount-based events, wherein the predefined event conditions comprise indicia of individual transaction amounts;
one or more time-based events, wherein the predefined event conditions comprise indicia of cumulative transaction amounts over a specified time period; and
one or more geography-based events, wherein the predefined event conditions comprise indicia of where respective transactions are initiated relative to a specified geographic area.
19 . An article of manufacture comprising a processor-readable storage medium storing one or more software programs which when executed by a processor associated with the application platform perform the steps of the method of claim 10 .