On-line account recovery
View Patent ↗Example methods, apparatuses, and/or articles of manufacture are disclosed that may be implemented, in whole or in part, using one or more computing devices to facilitate and/or support one or more operations and/or techniques for on-line account recovery.
1. A method of electronically authenticating an on-line user associated with a registered account of a provider of goods or services, the method comprising:
electronically initiating an authentication process for a specific client device, the authentication process requiring authentication credentials for the on-line user;
detecting one or more digital signals comprising one or more input vectors indicative of the specific client device;
determining one or more contextual indicators descriptive of an on-line activity of the on-line user; and
authenticating the on-line user without the authentication credentials of the on-line user and based instead on the one or more input vectors and the one or more contextual indicators, the authenticating further comprising:
computing a first non-binary probability score for the one or more input vectors via a mathematical operation of at least two input vector-related operands indicative of trustworthiness of the specific client device, the first non-binary probability score representing a probability of the specific client device being a trusted device;
computing a second non-binary probability score for the one or more contextual indicators via a mathematical operation of at least two contextual indicator-related operands indicative of trustworthiness of the on-line user associated with the registered account of the provider of goods or services; and
granting access to the registered account based, at least in part, on a combination score of the first and the second non-binary probability scores meeting or exceeding a confidence threshold value.
2. The method of claim 1 , wherein the granting access to the registered account is based, at least in part, on a confidence score computed as a sum of the first and the second non-binary probability scores meeting a confidence threshold value.
3. The method of claim 2 , wherein the confidence score is computed utilizing, at least in part, Fisher's method.
4. The method of claim 1 , further comprising electronically generating a first challenge in connection with a subsequent access attempt by the on-line user and in response to the confidence score falling below the confidence threshold value.
5. The method of claim 4 , further comprising:
computing a challenge score based, at least in part, on a response of the on-line user to the first challenge; and
granting access to the registered account based, at least in part, on the challenge score meeting a challenge threshold value.
6. The method of claim 5 , further comprising electronically generating a second challenge in connection with a further subsequent access attempt by the on-line user and in response to the challenge score falling below the challenge threshold value.
7. The method of claim 6 , further comprising, in response to a number of attempted challenges exceeding a lockout threshold value, denying access to or locking the registered account.
8. The method of claim 6 , wherein the second challenge represents a higher level of difficulty than the first challenge.
9. The method of claim 8 , wherein the higher level of difficulty is determined based, at least in part, on a remainder confidence score.
10. The method of claim 1 , wherein the one or more input vectors comprise at least one of the following: a browser fingerprint of the specific client device; a browser cookie of the specific client device; an Internet protocol (IP) address of the specific client device; or any combination thereof.
11. The method of claim 1 , wherein the one or more contextual indicators comprise at least one of the following: a history of password changes by the on-line user; a history of failed sign-in attempts by the on-line user; a history of successful sign-in attempts by the on-line user; a history of authentication attempts by the on-line user; a history of login attempts of the on-line user; or any combination thereof.
12. An apparatus to electronically authenticate an on-line user associated with a registered account of a provider of goods or services, the apparatus comprising:
one or more processors coupled to a memory and configured to:
electronically initiate an authentication process for a specific client device, the authentication process requiring authentication credentials for the on-line user;
detect one or more digital signals to comprise one or more input vectors indicative of the specific client device;
determine one or more contextual indicators descriptive of an on-line activity of the on-line user; and
authenticate the on-line user without the authentication credentials of the on-line user and based instead on the one or more input vectors and the one or more contextual indicators, wherein the one or more processors are configured to the authenticate the on-line user by:
computing a first non-binary probability score for the one or more input vectors via a mathematical operation of at least two input vector-related operands indicative of trustworthiness of the specific client device, the first non-binary probability score representing a probability of the specific client device being a trusted device;
computing a second non-binary probability score for the one or more contextual indicators via a mathematical operation of at least two contextual indicator-related operands indicative of trustworthiness of the on-line user associated with the registered account of the provider of goods or services; and
granting access to the registered account to be based, at least in part, on a combination score of the first and the second non-binary probability scores meets or exceeds a confidence threshold value.
13. The apparatus of claim 12 , wherein the one or more processors are configured to grant access to the registered account based, at least in part, on a confidence score computed as a sum of the first and the second non-binary probability scores that meets a confidence threshold value.
14. The apparatus of claim 13 , wherein the one or more processors are further configured to electronically generate a first challenge in connection with a subsequent access attempt by the on-line user and in response to the confidence score falling below the confidence threshold value.
15. The apparatus of claim 14 , wherein the one or more processors are further configured to:
compute a challenge score based, at least in part, on a response of the on-line user to the first challenge; and
grant access to the registered account based, at least in part, on the challenge score meeting a challenge threshold value.
16. The apparatus of claim 15 , wherein the one or more processors are further configured to electronically generate second challenge in connection with a further subsequent access attempt by the on-line user and in response to the challenge score falling below the challenge threshold value.
17. The apparatus of claim 16 , wherein the one or more processors are further configured to deny access to or to lock the registered account if a number of attempted challenges exceeds a lockout threshold value.
18. An article comprising:
a non-transitory storage medium having instructions stored thereon executable by a special purpose computing platform to:
electronically initiate an authentication process for a specific client device, the authentication process requiring authentication credentials for the on-line user;
detect one or more digital signals to comprise one or more input vectors indicative of the specific client device;
determine one or more contextual indicators descriptive of an on-line activity of an on-line user; and
authenticate the on-line user without the authentication credentials of the on-line user and based instead on the one or more input vectors and the one or more contextual indicators, wherein authentication of the on-line user includes:
computing a first non-binary probability score for the one or more input vectors via a mathematical operation of at least two input vector-related operands indicative of trustworthiness of the specific client device, the first non-binary probability score representing a probability of the specific client device being a trusted device;
computing a second non-binary probability score for the one or more contextual indicators via a mathematical operation of at least two contextual indicator-related operands indicative of trustworthiness of the on-line user associated with a registered account of a provider of goods or services; and
granting access to the registered account to be based, at least in part, on a combination score of the first and the second non-binary probability scores meeting or exceeding a confidence threshold value.