IP Library Granted Patent US 11,916,899
Granted Patent B1
US 11,916,899 · App. 16/585,358 · Granted Feb 27, 2024

Systems and methods for managing online identity authentication risk in a nuanced identity system

Inventors: George Fletcher (Round Hill, VA); Jonathan Hryn (Cary, NC); Lovlesh Chhabra (San Ramon, CA); Deepak Nayak (Santa Clara, CA)
Assignee: Yahoo Assets LLC
H04L63/0861H04L63/0876H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,916,899
App. No.
16/585,358
Granted
Feb 27, 2024
Kind
B1
Abstract

Disclosed are systems and methods for managing online identity authentication risk in a nuanced identity system. For example, a method may include receiving a request by a user for a transaction on an electronic platform; determining a risk associated with the requested transaction; determining a current level of assurance associated with the user on the electronic platform; determining that the risk exceeds the current level of assurance; adjusting the current level of assurance such that the adjusted level of assurance exceeds the risk; and executing the requested transaction on the electronic platform after adjusting the current level of assurance.

Claims (69)

1. A computer-implemented method comprising:

receiving, by one or more processors, a request by a user for a transaction on an electronic platform;

determining, by the one or more processors, a risk associated with the requested transaction;

collecting information regarding the user via the electronic platform to determine a user profile;

determining, by the one or more processors, a current level of assurance associated with the user based on a gradient level determined over a period of time for a profile vector, an authentication vector, and a recovery strength vector, wherein the profile vector is determined based on a user profile comprising user information;

determining, by the one or more processors, that the risk exceeds the current level of assurance;

adjusting, by the one or more processors, the current level of assurance such that the adjusted level of assurance exceeds the risk, wherein adjusting the current level of assurance comprises collecting additional information of the user, updating the user profile based on the collected additional information, and adjusting the identity vector based on the updated user profile; and

after adjusting the current level of assurance, executing, by the one or more processors, the requested transaction on the electronic platform.

2. The method of claim 1 , further comprising:

determining one or more methods of user authentication performed by the user on the electronic platform; and

generating the authentication vector based on the determined one or more methods of user authentication.

3. The method of claim 2 , wherein the one or more methods of user authentication include a first method of user authentication and a second method of user authentication, and wherein generating the authentication vector based on the determined one or more methods of user authentications comprises:

assigning a first weight to the first method of user authentication and a second weight to the second method of user authentication; and

generating the authentication vector at least based on the assigned first and second weights.

4. The method of claim 2 , wherein adjusting the current level of assurance such that the adjusted level of assurance exceeds the risk comprises:

determining one or more additional methods of user authentication on the electronic platform;

detecting that the user has performed the determined one or more additional methods of user authentication; and

adjusting the authentication vector based on the determined one or more additional methods of user authentication.

5. The method of claim 1 , wherein the recovery strength vector is based on a likelihood that the user can recover an identity of the user used for the transaction on the electronic platform.

6. The method of claim 1 , further comprising:

monitoring a session on the electronic platform initiated by the user by successfully performing one or more methods of user authentication on the electronic platform, wherein the request by the user for the transaction on the electronic platform is made during the session; and

generating the session confidence vector at least based on the session monitoring.

7. The method of claim 6 , wherein generating the session confidence vector at least based on the session monitoring comprises:

determining a session confidence metric for the session on the electronic platform, wherein the session confidence metric gradually decreases over time;

monitoring the session on the electronic platform for incidents that increase the session confidence metric, wherein the incidents include at least one or more of: determining a recognized IP address allocated to a user device used to access the electronic platform, and detecting biometric authentication on the user device during the session on the electronic platform; and

generating the session confidence vector at least based on the monitored session confidence metric.

8. The method of claim 1 , further comprising:

determining a frequency at which the user accesses the electronic platform; and

generating the member value vector at least based on the determined frequency.

9. The method of claim 8 , wherein the member value vector determines a priority in call queues for calls related to recovery methods.

10. The method of claim 1 , wherein the recovery strength vector is based on one or more determined recovery methods, the recovery methods comprising a verified phone number, a verified email address, a linked social network login, and a stored payment method.

11. A computer system comprising:

a data storage device storing processor-readable instructions; and

a processor configured to execute the instructions to perform a method including:

receiving a request by a user for a transaction on an electronic platform;

determining a risk associated with the requested transaction;

collecting information regarding the user via the electronic platform to determine a user profile;

determining a current level of assurance associated with the user based on a gradient level determined over a period of time for a profile vector, an authentication vector, and a recovery strength vector, wherein the profile vector is determined based on a user profile comprising user information;

determining that the risk exceeds the current level of assurance;

adjusting the current level of assurance such that the adjusted level of assurance exceeds the risk, wherein adjusting the current level of assurance collecting additional information of the user, updating the user profile based on the collected additional information, and adjusting the identity vector based on the updated user profile; and

after adjusting the current level of assurance, executing the requested transaction on the electronic platform.

12. The computer system of claim 11 , wherein the processor is further configured for:

determining one or more methods of user authentication performed by the user on the electronic platform; and

generating the authentication vector based on the determined one or more methods of user authentication.

13. The computer system of claim 12 , wherein adjusting the current level of assurance such that the adjusted level of assurance exceeds the risk comprises:

determining one or more additional methods of user authentication on the electronic platform;

detecting that the user has performed the determined one or more additional methods of user authentication; and

adjusting the authentication vector based on the determined one or more additional methods of user authentication.

14. The computer system of claim 11 , wherein the recovery strength vector is based on a likelihood that the user can recover an identity of the user used for the transaction on the electronic platform.

15. The computer system of claim 11 , wherein the processor is further configured for:

monitoring a session on the electronic platform initiated by the user by successfully performing one or more methods of user authentication on the electronic platform, wherein the request by the user for the transaction on the electronic platform is made during the session; and

generating the session confidence vector at least based on the session monitoring.

16. The computer system of claim 15 , wherein generating the session confidence vector at least based on the session monitoring comprises:

determining a session confidence metric for the session on the electronic platform, wherein the session confidence metric gradually decreases over time;

monitoring the session on the electronic platform for incidents that increase the session confidence metric, wherein the incidents include at least one or more of: determining a recognized IP address allocated to a user device used to access the electronic platform, and detecting biometric authentication on the user device during the session on the electronic platform; and

generating the session confidence vector at least based on the monitored session confidence metric.

17. The computer system of claim 11 , wherein the processor is further configured for:

determining a frequency at which the user accesses the electronic platform; and

generating the member value vector at least based on the determined frequency.

18. The computer system of claim 11 , wherein the recovery strength vector is based on one or more determined recovery methods, the recovery methods comprising a verified phone number, a verified email address, a linked social network login, and a stored payment method.

19. A non-transitory computer-readable medium containing instructions that, when executed by a processor, cause the processor to perform a method comprising:

receiving a request by a user for a transaction on an electronic platform;

determining a risk associated with the requested transaction;

collecting information regarding the user via the electronic platform to determine a user profile;

determining a current level of assurance associated with the user based on a gradient level determined over a period of time for a profile vector, an authentication vector, and a recovery strength vector, wherein the profile vector is determined based on a user profile comprising user information;

determining that the risk exceeds the current level of assurance;

adjusting the current level of assurance such that the adjusted level of assurance exceeds the risk, wherein adjusting the current level of assurance comprises collecting additional information of the user, updating the user profile based on the collected additional information, and adjusting the identity vector based on the updated user profile; and

after adjusting the current level of assurance, executing the requested transaction on the electronic platform.

20. The computer system of claim 17 , wherein the member value vector determines a priority in call queues for calls related to recovery methods.

Assignments (4)
PATENT SECURITY AGREEMENT (FIRST LIEN) Recorded Sep 29, 2022
From: YAHOO ASSETS LLC
To: ROYAL BANK OF CANADA, AS COLLATERAL AGENT
Reel/Frame 061571/0773 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 16, 2021
From: YAHOO AD TECH LLC (FORMERLY VERIZON MEDIA INC.)
To: YAHOO ASSETS LLC
Reel/Frame 058982/0282 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 26, 2020
From: OATH INC.
To: VERIZON MEDIA INC.
Reel/Frame 054258/0635 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 27, 2019
From: FLETCHER, GEORGE; HRYN, JONATHAN; CHHABRA, LOVLESH; NAYAK, DEEPAK
To: OATH INC.
Reel/Frame 050514/0980 →