Granted Patent B2

US 10,333,915 · App. 14/967,016 · Granted Jun 25, 2019

Abstract

Claims (98)

1. A method, comprising:

receiving, by one or more servers from a client device, a user identifier associated with a user account;

providing, by the one or more servers for display via the client device, indications of a plurality of authentication mechanisms available for authentication;

receiving, by the one or more servers from the client device, input including both a selection of one or more of the plurality of authentication mechanisms and an indication of a particular number of authentication mechanisms to be used for authentication in association with the user account;

storing, by the one or more servers, information in association with the user account, the information indicating the particular number of authentication mechanisms to be used for authentication in association with the user account and indicating the selected one or more of the plurality of authentication mechanisms; and

applying at least a subset of the selected one or more of the plurality of authentication mechanisms for authentication in association with the user account, the subset of the selected one or more of the plurality of authentication mechanisms including the particular number of authentication mechanisms;

wherein the input does not indicate the subset of the selected one or more of the plurality of authentication mechanisms that is applied for authentication in association with the user account.

2. The method as recited in claim 1 , wherein the one or more of the plurality of authentication mechanisms comprises two or more of the plurality of authentication mechanisms, the method further comprising:

providing indications of the two or more of the plurality of authentication mechanisms for display by a client device;

receiving an indication of a selection of a subset of the two or more of the plurality of authentication mechanisms from the client device such that the selected subset of the two or more of the plurality of authentication mechanisms includes the particular number of authentication mechanisms;

applying the selected subset of the two or more of the plurality of authentication mechanisms; and

providing access to the user account or associated services according to a result of applying the selected subset of the two or more of the plurality of authentication mechanisms.

3. The method as recited in claim 1 , wherein the one or more of the plurality of authentication mechanisms comprises two or more of the plurality of authentication mechanisms, the method further comprising:

selecting, by a processor, a subset of the two or more of the plurality of authentication mechanisms such that the selected subset of the two or more of the plurality of authentication mechanisms includes the particular number of authentication mechanisms;

applying the subset of the plurality of authentication mechanisms; and

providing access to the user account or associated services according to a result of applying the subset of the plurality of authentication mechanisms.

4. The method as recited in claim 1 , further comprising:

applying the subset of the selected one or more of the plurality of authentication mechanisms; and

providing access to the user account or associated services according to a result of applying the subset of the selected one or more of the plurality of authentication mechanisms.

5. The method as recited in claim 1 , further comprising:

receiving an indication of contexts in which the selected one or more of the plurality of authentication mechanisms are to be applied or made available for authentication in association with the user account;

storing, in association with the user account, information indicating the contexts in which the selected one or more of the plurality of mechanisms are to be applied or made available for authentication in association with the user account; and

selecting at least a subset of the selected one or more of the plurality of authentication mechanisms for authentication in association with the user account in the contexts that are indicated according to a current context and according to the particular number of authentication mechanisms.

6. The method as recited in claim 1 , further comprising:

ascertaining a current context;

determining that the current context is a context in which the selected one or more of the plurality of authentication mechanisms are to be applied or made available for authentication in association with the user account;

applying at least a portion of the selected one or more of the plurality of authentication mechanisms according to the particular number of authentication mechanisms; and

providing access to the user account or associated services according to a result of applying the at least a portion of the selected one or more of the plurality of authentication mechanisms.

7. The method as recited in claim 1 , further comprising:

receiving an indication of contexts in which the particular number of authentication mechanisms are to be used for authentication in association with the user account; and

storing, in association with the user account, an indication of the contexts in which the particular number of authentication mechanisms are to be used for authentication in association with the user account.

8. The method as recited in claim 1 , further comprising:

ascertaining a current context;

determining that the current context is a context in which the particular number of authentication mechanisms are to be applied for authentication in association with the user account;

selecting at least a portion of the selected one or more of the plurality of authentication mechanisms according to the particular number of authentication mechanisms;

applying the at least a portion of the selected authentication mechanisms; and

providing access to the user account or associated services according to a result of applying the at least a portion of the selected authentication mechanisms.

9. An apparatus, comprising:

a processor; and

a memory, at least one of the processor or the memory being configured to:

receive, via a network from a client device, a user identifier associated with a user account;

receive, via the network from the client device, input indicating a particular quantity of authentication mechanisms to be used for authentication in association with the user account;

store information in association with the user account, the information indicating the particular quantity of authentication mechanisms to be used for authentication in association with the user account;

select one or more authentication mechanisms from a plurality of authentication mechanisms according to the particular quantity of authentication mechanisms;

apply the one or more authentication mechanisms in association with the user account; and

provide access to the user account or associated services according to a result of applying the one or more authentication mechanisms;

wherein the input does not indicate the one or more authentication mechanisms that are applied in association with the user account.

10. The apparatus as recited in claim 9 , at least one of the processor or the memory being configured to:

receive an indication of contexts in which the particular number of authentication mechanisms are to be used for authentication in association with the user account; and

store, in association with the user account, an indication of the contexts in which the particular number of authentication mechanisms are to be used for authentication in association with the user account;

wherein selecting one or more authentication mechanisms from a plurality of authentication mechanisms according to the particular quantity of authentication mechanisms is performed based upon the indicated contexts and a current context.

11. The apparatus as recited in claim 9 , at least one of the processor or the memory being further configured to:

ascertain a current context;

determine that the current context is a context in which the particular number of authentication mechanisms are to be applied for authentication in association with the user account.

12. The apparatus as recited in claim 11 , wherein ascertaining a current context comprises:

ascertaining a geographic location of the client device or an account holder of the user account.

13. A non-transitory computer-readable storage medium method, comprising:

instructions for providing via a network, for display via the client device, indications of a plurality of authentication mechanisms available for authentication;

instructions for obtaining via the network, from the client device, input indicating a particular quantity of authentication mechanisms to be used for authentication in association with a user account and including a selection of one or more of the plurality of authentication mechanisms;

instructions for storing information in association with the user account, the information indicating the particular quantity of authentication mechanisms to be used for authentication in association with the user account and indicating the selected one or more of the plurality of authentication mechanisms; and

instructions for applying at least a subset of the selected one or more of the plurality of authentication mechanisms for authentication in association with the user account, the subset of the selected one or more of the plurality of authentication mechanisms including the particular quantity of authentication mechanisms;

wherein the input does not indicate the subset of the selected one or more of the plurality of authentication mechanisms that is applied for authentication in association with the user account.

14. The non-transitory computer-readable storage medium as recited in claim 13 , wherein the one or more of the plurality of authentication mechanisms comprises two or more of the plurality of authentication mechanisms, further comprising:

instructions for providing indications of the two or more of the plurality of authentication mechanisms for display by a client device;

instructions for obtaining a selection of a subset of the two or more of the plurality of authentication mechanisms from the client device such that the selected subset of the two or more of the plurality of authentication mechanism includes the particular quantity of authentication mechanisms;

instructions for applying the selected subset of the two or more of the plurality of authentication mechanisms; and

instructions for providing access to the user account or associated services according to a result of applying the selected subset of the two or more of the plurality of authentication mechanisms.

15. The non-transitory computer-readable storage medium as recited in claim 13 , wherein the one or more of the plurality of authentication mechanisms comprises two or more of the plurality of authentication mechanisms, further comprising:

instructions for selecting, by a processor, a subset of the two or more of the plurality of authentication mechanisms such that the subset of the two or more of the plurality of authentication mechanism includes the particular quantity of authentication mechanisms has been selected;

instructions for applying the subset of the plurality of authentication mechanisms; and

instructions for providing access to the user account or associated services according to a result of applying the subset of the plurality of authentication mechanisms.

16. The non-transitory computer-readable storage medium as recited in claim 13 , further comprising:

instructions for applying the subset of the selected one or more of the plurality of authentication mechanisms; and

instructions for providing access to the user account or associated services according to a result of applying the subset of the selected one or more of the plurality of authentication mechanisms.

17. The non-transitory computer-readable storage medium as recited in claim 13 , further comprising:

instructions for obtaining an indication of contexts in which the selected one or more of the plurality of authentication mechanisms are to be applied or made available for authentication in association with the user account;

instructions for storing, in association with the user account, information indicating the contexts in which the selected one or more of the plurality of mechanisms are to be applied or made available for authentication in association with the user account; and

instructions for selecting at least a subset of the selected one or more of the plurality of authentication mechanisms for authentication in association with the user account in the contexts that are indicated according to a current context and according to the particular quantity of authentication mechanisms.

18. The non-transitory computer-readable storage medium as recited in claim 13 , further comprising:

instructions for ascertaining a current context;

instructions for determining that the current context is a context in which the selected one or more of the plurality of authentication mechanisms are to be applied or made available for authentication in association with the user account;

instructions for applying at least a portion of the selected one or more of the plurality of authentication mechanisms according to the particular quantity of authentication mechanisms; and

instructions for providing access to the user account or associated services according to a result of applying the at least a portion of the selected one or more of the plurality of authentication mechanisms.

19. The non-transitory computer-readable storage medium as recited in claim 13 , further comprising:

instructions for obtaining indication of contexts in which the particular quantity of authentication mechanisms are to be used for authentication in association with the user account; and

instructions for storing, in association with the user account, an indication of the contexts in which the particular quantity of authentication mechanisms are to be used for authentication in association with the user account.

20. The non-transitory computer-readable storage medium as recited in claim 13 , further comprising:

instructions for ascertaining a current context;

instructions for determining that the current context is a context in which the particular number of authentication mechanisms are to be applied for authentication in association with the user account;

instructions for selecting at least a portion of the selected one or more of the plurality of authentication mechanisms according to the particular quantity of authentication mechanisms;

instructions for applying the at least a portion of the selected authentication mechanisms; and

instructions for providing access to the user account or associated services according to a result of applying the at least a portion of the selected authentication mechanisms.

21. The method as recited in claim 1 , wherein the input is received via a graphical user interface.

22. The method as recited in claim 1 , wherein the input is user input.

23. The method as recited in claim 1 , wherein the input indicates a numerical value, the numerical value indicating the particular number of authentication mechanisms to be used for authentication in association with the user account.

24. The method as recited in claim 23 , wherein the input specifies the numerical value.

25. The method as recited in claim 1 , wherein the input does not specify the subset of the selected one or more of the plurality of authentication mechanisms that are to be used for authentication in association with the user account.

26. The apparatus as recited in claim 9 , wherein the input does not indicate the plurality of authentication mechanisms from which the one or more authentication mechanisms are selected.

Assignments (6)