Non-repeatable challenge-response authentication
User data is aggregated across a plurality of electronic communication channels and domains. An online system initially authenticates a user for access to the online system over a network. The online system provides a user identifier for the user to an authentication service. The authentication service generates a non-repeatable challenge from the aggregated user data for the user identifier and provides the non-repeatable challenge to the online system. The online system provides the challenge to the user and receives a response from the user. The online system provides the response to the authentication service and the authentication sends a success or failure back to the online system based on the response to the challenge, and based on the success or failure the online system makes a final determination for authenticating the user for accessing to the online system.
1. A system, comprising:
a cloud-based hardware processor; and
the cloud-based hardware processor executes instructions that cause the cloud-based hardware processor to perform operations comprising:
integrating a representational state transfer (REST) interface into a first factor authenticator of an online system to provide second factor authentications for users to the online system;
receiving user identifiers through the REST interface from the first factor authenticator for the users who are authenticated for access to the online system using first factors by the first factor authenticator;
generating user-specific and non-repeatably user-activity challenges and expected responses for the users from aggregated activity data maintained for each user, wherein the user specific and non-repeatably user-activity challenges and expected responses for the users are maintained from aggregated activity data for each user, wherein the user specific and non-repeatably user-activity challenges are generated based on recent in time activities of the users;
providing the user-specific and non-repeatable user-activity challenges to the first factor authenticator through the REST interface;
receiving user-provided responses through the REST interface from the first actor authenticator; and
providing authentication messages through the REST interface to the first factor authenticator indicating whether each of the user-provided responses matched or did not match the corresponding expected response for a corresponding second factor authentication of the corresponding user for granting or for denying access to the online system.
2. The system of claim 1 , wherein operations associated with generating further includes selecting recent activities of the users from their corresponding aggregated activity data as the corresponding user-specific and non-repeatable user-activity challenges and flagging the corresponding user-specific and non-repeatable user-activity challenges ensuring that each user-specific and non-repeatable user-activity challenge is non-repeatable during subsequent second factor authentications for each of the corresponding users.