Contextual and risk-based multi-factor authentication
A system for contextual and risk-based multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computation graph module configured to receive network traffic data from the multi-dimensional time series data server, determine a network traffic baseline from the network traffic data, and determine a verification score needed before granting access based at least in part by the network traffic baseline. A plurality of verification methods build up a user's verification score to required level to gain access.
1. A system for contextual and risk-based multi-factor authentication, comprising:
a computing device comprising a memory and a processor connected to a computer network; and
a validation module comprising a plurality of programming instructions stored in the memory of, and operable on the processor of, the computing device, wherein the plurality of programming instructions, when operating on the processor, cause the computing device to:
receive time series network traffic data;
establish a baseline network usage profile for a user from the time series data;
determine a context in which an attempted access to a network resource is made by the user, the context comprising a degree to which the attempted access is determined to be anomalous relative to the baseline network usage profile;
establish a required verification score for granting the user access to the resource based on the context;
select a plurality of verification methods, wherein:
each verification method is associated with a number of points;
the successful completion of a verification method awards the number of points associated with that verification method;
the total number of points available for successful completion of the plurality of verification methods is equal to or greater than the verification score; and
at least one of the verification methods is a non-automated verification method requiring a manual input;
wherein, when the number of points awarded is equal to or greater than the verification score, access to the resource is granted.
2. The system of claim 1 , wherein the context further comprises a security-level associated with the resource.
3. The system of claim 1 , wherein the time series data further comprises the origin of the attempted access.
4. The system of claim 1 , wherein one of the verification methods verifies visual media pertaining to a user associated with the credential.
5. The system of claim 1 , wherein one of the verification methods checks and verifies biometric features of a user associated with the credential.
6. The system of claim 1 , wherein one of the verification methods used is based on information obtained from untrusted parties.
7. The system of claim 1 , wherein one of the verification methods used is based on information pertaining to a device used by a user associated with the credential to access the resource.