Mobile application authentication infrastructure
Various embodiments of the present technology generally relate to authentication. More specifically, some embodiments relate to systems and methods for mobile application infrastructure and framework for application authentication. Currently, methods and systems for authentication are not flexible or dynamic and over-authentication has become a solution because it is cheap and easy. In contrast, in accordance with some embodiments of this application, the methods and systems can analyze authentication challenges and non-authentication challenges received from a server over a network in a client side infrastructure. The client side infrastructure can determine a customized, flexible, and dynamic plan for responding to authentication challenges in manner that avoids over-authentication on the client side.
1. A computer-implemented method comprising:
receiving, at a computing device, multiple authentication challenges for a user;
sorting the authentication challenges according to a level of authentication required;
prioritizing the authentication challenges based on the level of authentication required;
requesting the user to provide credentials in a single response to the authentication challenges, wherein the credentials associated with the single response satisfy a first level of authentication;
queuing one or more of the authentication challenges having the first level of authentication or a lower level of authentication required than the first level of authentication; and
authenticating the user based on the single response for actions associated with the queued one or more of the authentication challenges.
2. The computer-implemented method of claim 1 , further comprising comparing high level authentication challenges and low level authentication challenges to determine if responding to the high level authentication challenges will also respond to the low level authentication challenges.
3. The computer-implemented method of claim 1 , wherein the authentication challenges are further sorted by whether the authentication challenges can be queued and by user preferences.
4. The computer-implemented method of claim 1 , further comprising comparing the authentication challenges with known user information on the computing device to identify authentication challenges that require additional user authentication.
5. The computer-implemented method of claim 1 , further comprising
prompting, through the computing device, the user for additional authentication information;
receiving, through the computing device, the additional authentication information from the user; and
sending the received additional authentication information to a server.
6. The computer-implemented method of claim 1 , further comprising accessing a protocol to determine how to respond to the authentication challenges.
7. The computer-implemented method of claim 1 , further comprising:
comparing the authentication challenges with authentication information stored on a memory of the computing device; and
prompting the user for additional authentication information including one or more of the following: a password, fingerprint, voiceprint, PIN, phone number, or email address.
8. A non-transitory machine-readable memory having stored thereon machine-executable instructions, that when executed by one or more processors, cause a client side-machine to:
receive multiple authentication challenges for a user;
sort the authentication challenges according to a level of authentication required;
prioritize the authentication challenges based on the level of authentication required;
requesting the user to provide credentials in a single response to the authentication challenges, wherein the credentials associated with the single response satisfy a first level of authentication;
queuing one or more of the authentication challenges having the first level of authentication or a lower level of authentication required than the first level of authentication; and
authenticating the user based on the single response for actions associated with the queued one or more of the authentication challenges.
9. The non-transitory machine-readable memory of claim 8 , further comprising comparing high level authentication challenges and low level authentication challenges to determine if responding to the high level authentication challenges will also respond to the low level authentication challenges.
10. The non-transitory machine-readable memory of claim 8 , wherein the authentication challenges are further sorted by whether the authentication challenges can be queued.
11. The non-transitory machine-readable memory of claim 8 , wherein the machine-executable instructions that when executed by the one or more processors, cause the client-side machine to compare the authentication challenges with known user information to identify authentication challenges that require additional user authentication.
12. The non-transitory machine-readable memory of claim 8 , wherein the machine-executable instructions, when executed by the one or more processors, further cause the client-side machine to:
prompt the user for additional authentication information;
receive the additional authentication information from the user; and
send the received additional authentication information to a server.
13. The non-transitory machine-readable memory of claim 8 , wherein the machine-executable instructions that when executed by the one or more processors, cause the client-side machine to access a protocol to determine how to respond to the authentication challenges.
14. The non-transitory machine-readable memory of claim 8 , wherein the machine-executable instructions, when executed by the one or more processors, further cause the client-side machine to:
compare the authentication challenges with authentication information stored on a memory of a computing device; and
prompt the user for additional authentication information including one or more of the following: a password, fingerprint, voiceprint, PIN, phone number, or email address.
15. A system comprising:
a memory;
a processor in communication with the memory, the processor operable to execute software modules, the software modules comprising:
an authentication delegate coupled to the processor to interpret and translate server-side communications, wherein the communications include server-side information associated with multiple authentication challenges for a user;
an authentication coordinator configured to coordinate interactions with server driven communications, wherein coordinating interactions comprises:
sorting the authentication challenges according to a level of authentication required; and
prioritizing the authentication challenges based on the level of authentication required; and
an authentication mapper configured to:
request the user to provide credentials in a single response to the authentication challenges, wherein the credentials associated with the single response satisfy a first level of authentication;
queue one or more of the authentication challenges having the first level of authentication or a lower level of authentication required than the first level of authentication; and
authenticate the user based on the single response for actions associated with the queued one or more of the authentication challenges.
16. The system of claim 15 wherein the authentication mapper is further configured to select one or more authentication challenges to be queued and one or more authentication challenges to be immediately answered.
17. The system of claim 15 , wherein the authentication mapper is further configured to queue the one or more of the authentication challenges based on one or more of the following factors: whether the authentication challenge can be queued while the user responds to another authentication challenge, previously known authentication information stored in the memory, or previous user responses to authentication challenges.
18. The system of claim 15 , wherein the authentication mapper is configured to compare high level authentication challenges and low level authentication challenges to determine if responding to the high level authentication challenges will also respond to the low level authentication challenges.
19. The system of claim 15 , wherein the authentication mapper is configured to sort the authentication challenges by user preferences and by whether the authentication challenges can be queued.