Granted Patent B1

US 9,959,398 · App. 14/700,811 · Granted May 1, 2018

Abstract

Claims (51)

1. A computer implemented method to dynamically authenticate a user at a user device, comprising:

receiving, at the user device, one or more user inputs from the user;

pre-authenticating the user based on the one or more user inputs, wherein the pre-authentication is performed at the user device;

receiving, at the user device, a first request from the user to access a client service associated with the user device upon successful pre-authentication of the user;

authenticating the user based on a set of client rules retrieved from a database stored at the user device, wherein the authentication is performed at the user device, and wherein the set of client rules is associated with the user device;

determining a contextual data associated with the user;

dynamically modifying, based on at least the contextual data, the set of client rules;

receiving, at a server, a second request from the user to access a service associated with the server upon successful pre-authentication of the user, wherein the server is remote from the user device;

dynamically modifying, based on at least the contextual data, a set of server rules; and

authenticating the user based on the modified set of server rules, wherein the authentication is performed at the server,

wherein the contextual data includes at least one of a date of request, a time of request, one or more user device parameters, and work state of the user.

2. The method of claim 1 , further comprising:

authorizing the user to access the service based on the authentication.

3. The method of claim 2 , further comprising:

prior to authorizing the user, determining, based on the contextual data, at least one rule from the set of client rules to authorize the user.

4. The method of claim 3 , further comprising:

determining localization data associated with the user.

5. The method of claim 4 , wherein the determination of the at least one rule from the set of client rules is based on at least one of the contextual data and the localization data.

6. The method of claim 1 , wherein the work state of the user indicates whether the user is on duty, or whether the user is on a break.

7. The method of claim 1 , further comprising:

receiving one or more rules over a computer network; and

updating a server rules database for the received one or more rules.

8. The method of claim 1 , wherein the service is provided by a remote device over a network.

9. The method of claim 1 , wherein authenticating the user further comprises determining a level of authentication of the user.

10. The method of claim 9 , further comprising determining a level of authorization based on the level of authentication.

11. The method of claim 9 , further comprising determining a level of authorization based on the level of authentication and a rule from the rules database to authorize the user.

12. The method of claim 1 , wherein the one or more user inputs includes at least one of a username, a password, and a biometric identity.

13. A system to dynamically authenticate a user, comprising:

a user device configured to:

receive one or more user inputs from the user;

pre-authenticate the user based on the one or more user inputs;

receive a first request from the user to access a client service associated with the user device upon successful pre-authentication of the user;

authenticate the user based on a set of client rules retrieved from a database stored at the user device, wherein the authentication is performed at the user device, and wherein the set of client rules is associated with the user device;

determine a contextual data associated with the user; and

dynamically modify, based on at least the contextual data, the set of client rules; and

a server remote from the user device and communicatively coupled to the user device, the server configured to:

receive a second request from the user to access a service associated with the server upon successful pre-authentication of the user;

dynamically modify, based on at least the contextual data, a set of server rules; and

authenticate the user based on the modified set of server rules,

wherein the contextual data includes at least one of a date of request, a time of request, one or more user device parameters, and work state of the user.

14. The system of claim 13 , wherein the server is further configured to authorize the user to access the service based on the authentication.

15. The system of claim 13 , wherein the user device is further configured to determine localization data associated with the user.

16. The system of claim 15 , wherein the user device is further configured to determine at least one rule from the set of client rules based on at least one of the contextual data and the localization data.

17. The system of claim 13 , wherein the work state of the user indicates whether the user is on duty, or whether the user is on a break.

18. The system of claim 13 , wherein the server is further configured to:

receive one or more rules over a computer network; and

update a server rules database for the received one or more rules.

19. The system of claim 13 , wherein the server is further configured to determine a level of authentication of the user.

20. The system of claim 19 , wherein the server is further configured to determine a level of authorization based on the level of authentication.

21. The system of claim 13 , further comprising an Application Programming Interface to allow one or more mobile applications, one or more server applications, or a combination thereof to dynamically authorize the user.

22. The system of claim 13 , wherein the server is further configured to authenticate the user based at least on a user specific data.

Assignments (9)