DYNAMIC ACCOUNT AUTHENTICATION USING A MOBILE DEVICE
Providing dynamic authentication of a user requesting access to a system via a mobile device is disclosed. An account holder tailors a set of customized security challenges and responses. When a request for account authentication is received from a mobile device, the system conducts a multi-step user authentication process that includes dynamically selecting and prompting the user with the custom security challenges.
1 - 22 . (canceled)
23 . A method, comprising:
a computer system soliciting a user for a plurality of security questions defined by the user and a plurality of corresponding answers, wherein the user has an account associated with the computer system;
the computer system storing the plurality of security questions and the plurality of corresponding answers;
the computer system receiving, from a mobile device, a request to access account information of the user via the mobile device;
in response to the request, the computer system selecting one or more of the plurality of security questions; and
the computer system sending the selected one or more security questions to the mobile device.
24 . The method of claim 23 , wherein the computer system selects the one or more security questions based on a type of account information for which access is requested.
25 . The method of claim 23 , wherein the computer system selects the one or more security questions based on a global positioning system (GPS) location of the mobile device.
26 . The method of claim 23 , wherein the selecting includes selecting a first of the plurality of security questions based on an answer provided by the user for a second of the plurality of security questions.
27 . The method of claim 23 , wherein the plurality of corresponding answers include an answer that is dynamic.
28 . The method of claim 23 , further comprising:
the computer system receiving one or more answers corresponding to the one or more security questions; and
the computer system comparing the one or more answers with one or more of the plurality of corresponding answers.
29 . A non-transitory computer readable medium having program instructions stored therein, wherein the program instructions are executable by a computer system to cause the computer system to perform operations comprising:
receiving a set of security challenges defined by a user having an account associated with the computer system;
receiving a set of answers defined by the user and corresponding to the set of security challenges;
receiving, from a client device, a request to access the account of the user; and
in response to the request, selecting one or more of the security challenges to transmit to the client device.
30 . The non-transitory computer readable medium of claim 29 , wherein the request is received with a global positioning system (GPS) location of the client device, and wherein the one or more security challenges are selected based on the location.
31 . The non-transitory computer readable medium of claim 29 , wherein the selecting is based on a type of account information identified in the request.