Mobile application authentication infrastructure
Various embodiments of the present technology generally relate to authentication. More specifically, some embodiments relate to systems and methods for mobile application infrastructure and framework for application authentication. Currently, methods and systems for authentication are not flexible or dynamic and over-authentication has become a solution because it is cheap and easy. In contrast, in accordance with some embodiments of this application, the methods and systems can analyze authentication challenges and non-authentication challenges received from a server over a network in a client side infrastructure. The client side infrastructure can determine a customized, flexible, and dynamic plan for responding to authentication challenges in manner that avoids over-authentication on the client side.
1. A computer-implemented method comprising:
determining, by an authentication coordinator, whether a user requested activity requires an authentication based on where information regarding the user requested activity is stored, wherein the information regarding the user requested activity indicates multiple levels of authentication and types of user activities;
in response to a determination that the user requested activity requires the authentication, determining multiple authentication challenges, by an authentication plan mapper, for a user based on the user requested activity, wherein the multiple authentication challenges is determined based on a customized authentication plan, wherein the customized authentication plan is based on
a protocol incorporating one or more factors corresponding to the user requested activity, and
implementation of only a portion of the multiple authentication challenges to limit user input so as to increase efficiency;
requesting the user to provide authentication information in a single response satisfying a level of authentication; and
authenticating the user based on the multiple authentication challenges and the single response.
2. The computer-implemented method of claim 1 , further comprising:
receiving a request from the user, wherein the request indicates a type of information to be accessed by the user; and
prioritizing the multiple authentication challenges for the user based on the type of the information.
3. The computer-implemented method of claim 2 , further comprising enabling access, for the user, to the information, wherein the enabling is based on a result of the authenticating the user.
4. The computer-implemented method of claim 1 , further comprising prioritizing the multiple authentication challenges for the user based on a protocol, wherein the protocol includes a device preference, a user preference, and/or a desired response time.
5. The computer-implemented method of claim 1 , further comprising:
determining that available authentication information, for the selected one or more of the authentication challenges, is insufficient; and
prompting the user for additional authentication information;
wherein the authenticating the user is further based on the additional authentication information.
6. The computer-implemented method of claim 1 , further comprising:
receiving a request from the user, wherein the request indicates a type of information to be accessed by the user; and
determining the level of authentication based on the type of the information.
7. The computer-implemented method of claim 6 , wherein the information to be accessed by the user includes information regarding a number of shares owned by the user.
8. The computer-implemented method of claim 6 , wherein the information to be accessed by the user includes personal information of the user.
9. The computer-implemented method of claim 6 , wherein the information to be accessed by the user includes an account balance of the user.
10. The computer-implemented method of claim 1 , wherein the single response to the authentication challenges includes a voiceprint.
11. The computer-implemented method of claim 1 , wherein the single response to the authentication challenges includes a fingerprint.
12. A non-transitory machine-readable memory having stored thereon machine-executable instructions that, when executed by one or more processors, cause the one or more processors to perform a process comprising:
determine, by an authentication coordinator, whether a user requested activity requires an authentication based on where information regarding the user requested activity is stored, wherein the information regarding the user requested activity indicates multiple levels of authentication and types of user activities;
in response to a determination that the user requested activity requires the authentication, determine multiple authentication challenges, by an authentication plan mapper, for a user based on the user requested activity, wherein the multiple authentication challenges is determined based on a customized authentication plan, wherein the customized authentication plan is based on
a protocol incorporating one or more factors corresponding to the user requested activity, and
implementation of only a portion of the multiple authentication challenges to limit user input so as to increase efficiency;
request the user to provide authentication information in a single satisfying a level of authentication; and
authenticate the user based on the multiple authentication challenges and the single response.
13. The non-transitory machine-readable memory of claim 12 , wherein the process further comprises:
receiving a request from the user, wherein the request indicates a type of information to be accessed by the user; and
determining the level of authentication based on the type of the information.
14. The non-transitory machine-readable memory of claim 12 , wherein the single response to the authentication challenges includes a voiceprint.
15. The non-transitory machine-readable memory of claim 12 , wherein the single response to the authentication challenges includes a fingerprint.
16. The non-transitory machine-readable memory of claim 12 , wherein the process further comprises:
receiving a request from the user, wherein the request indicates a type of information to be accessed by the user; and
prioritizing the multiple authentication challenges for the user based on the type of the information.
17. The non-transitory machine-readable memory of claim 16 , wherein the process further comprises:
enabling access, for the user, to the information, wherein the enabling is based on a result of the authenticating the user.
18. A computing system comprising:
one or more processors; and
one or more memories, storing instructions that, when executed by the one or more processors, cause the computing system to perform a process comprising:
determining, by an authentication coordinator, whether a user requested activity requires an authentication based on where information regarding the user requested activity is stored, wherein the information regarding the user requested activity indicates multiple levels of authentication and types of user activities;
in response to a determination that the user requested activity requires the authentication, determining multiple authentication challenges, by an authentication plan mapper, for a user based on the user requested activity, wherein the multiple authentication challenges is determined based on a customized authentication plan, wherein the customized authentication plan is based on
a protocol incorporating one or more factors corresponding to the user requested activity, and
implementation of only a portion of the multiple authentication challenges to limit user input so as to increase efficiency;
requesting the user to provide authentication information in a single response satisfying a level of authentication; and
authenticating the user based on the multiple authentication challenges and the single response for actions associated with the selected one or more of the authentication challenges.
19. The computing system of claim 18 , wherein the process further comprises:
receiving a request from the user, wherein the request indicates a type of information to be accessed by the user; and
determining the level of authentication based on the information.
20. The computing system of claim 19 , wherein the process further comprises prioritizing the multiple authentication challenges for the user based on the type of the information.