Authorization and authentication based on an individual's social network

1. A method comprising:

receiving, by one or more computing systems, a request for a first user to access a loan from a lender, the request identifying a user identifier (ID) of the first user;

determining, by one or more computing devices, whether the first user is authorized to access the loan based at least in part on a gray list comprising user IDs of the users who are not authorized to access loans, wherein the gray list is based on a black list; and

permitting, by one or more computing devices, the loan to be accessed by the first user if the first user is authorized to access the loan based on the gray list.

2. The method of claim 1 , the user ID comprises one or more of an email address of the first user, a name of the first user, or a member identifier of the first user.

3. The method of claim 1 , wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more friends of the first user within an online social network.

4. The method of claim 1 , further comprising:

accessing a graph structure comprising a plurality of nodes and a plurality of edges connecting the nodes, each of the edges between two of the nodes representing a single degree of separation between them, the nodes comprising a first node corresponding to the first user and a plurality of second nodes corresponding to a plurality of second users, respectively.

5. The method of claim 4 , further comprising:

accessing a white list comprising a first set of user IDs of a first set of users corresponding to a first set of nodes within a threshold degree of separation of the first-user node;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the first set of users.

6. The method of claim 5 , wherein determining whether the first user is authorized to access the loan is based on one or more credit ratings of one or more users, respectively, of the first set of users, comprises, for each user, applying a weighting factors based on the degree of separation between the node corresponding to the user of the first set of users and the first node corresponding to the first user.

7. The method of claim 4 , further comprising:

accessing the black list comprising a first set of user IDs of a first set of users;

wherein the gray list comprises a second set of user IDs of a second set of users, each of the nodes corresponding to the users in the second set of users being separated in the graph structure from at least one of the nodes corresponding to the users in the first set of users by only one degree of separation.

8. The method of claim 4 , further comprising:

accessing the black list comprising a first set of user IDs of a first set of users;

wherein the gray list comprises a second set of user IDs of a second set of users, each of the nodes corresponding to the users in the second set of users being separated in the graph structure from at least one of the nodes corresponding to the users in the first set of users by a threshold degree of separation.

9. The method of claim 8 , further comprising:

accessing a white list comprising a third set of user IDs of a third set of users corresponding to a set of nodes within a threshold degree of separation of the first-user node, wherein the third set of user IDs excludes any user IDs in the first or second set of user IDs;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the third set of users.

10. The method of claim 8 , further comprising:

accessing a white list comprising a third set of user IDs of a third set of users corresponding to a set of nodes within a threshold degree of separation of the first-user node, each node in the set of nodes being connected to the first node in the graph structure by a series of nodes and edges that does not traverse any nodes corresponding to users in the first or second set of users;

wherein determining whether the first user is authorized to access the loan is further based on one or more credit ratings of one or more users, respectively, of the third set of users.

11. The method of claim 1 , further comprising:

accessing the black list comprising a first set of user IDs of a first set of users.

12. The method of claim 11 , wherein the black list comprises user IDs of the users who are not permitted to access a loan from the lender.

13. The method of claim 1 , wherein determining whether the first user is authorized to access the loan based at least in part on the gray list comprises determining whether the user ID of the first user is one of the user IDs comprising the gray list.

14. The method of claim 1 , further comprising:

rejecting access to the loan by the first user if the first user is not authorized to access the loan based on the gray list.

15. A service provider system comprising: one or more processors; and one or more servers having a memory storing computer-executable instructions that when executed by one or more of the processors cause the processors to:

receive a request for a first user to access a loan from a lender, the request identifying a user identifier (ID) of the first user;

determine whether the first user is authorized to access the loan based at least in part on a gray list comprising user IDs of the users who are not authorized to access loans, wherein the gray list is based on a black list; and

permit the loan to be accessed by the first user if the first user is authorized to access the loan based on the gray list.