System and method for flying squad re authentication of enterprise users

1. A method for re-authenticating a user of an enterprise system during a session to support a single signon mechanism at a plurality of scheduled re-authentication times and to send an authentication message to said enterprise system, wherein said enterprise system is associated with a plurality of applications, said method comprising:

selecting a plurality of name fields associated with said plurality of applications, wherein said selection is based on a plurality of fields associated with said plurality of applications, and a plurality of properties associated with a field of said plurality fields comprising common-ness, importance, confidentiality, and numerical-ness;

selecting a plurality of value fields associated with said plurality of applications, wherein aid selection is based on said plurality of fields, and a plurality of properties associated with a field of said plurality of fields;

selecting a plurality of messages comprising a plurality of application messages associated with said plurality of applications and a plurality of system messages, wherein said selection is based on a plurality of application messages associated with said plurality of applications, and a plurality of properties associated with a message of said plurality applications;

instrumenting of said plurality of applications so as to display said plurality of name fields, said plurality of value fields, and said plurality of messages in a manner so as to draw the attention of said user during the interactions with said applications during said session;

randomly selecting a plurality of user specific name fields based on said plurality of name fields and a plurality of most accessed applications of said plurality of applications, wherein a most accessed application of said plurality of most accessed applications is most frequently accessed by said user;

randomly selecting of a plurality of user specific value fields based on said plurality of value fields and said plurality of most accessed applications;

randomly selecting of a plurality of user specific messages based on said plurality of messages and said plurality of most accessed applications;

updating of a w3-info table, a p3-info table, and a m3-info table based on interactions of said user during said session;

re-authentication scheduling based on a last re-authentication time (R 0 ) and a current time (Rc) to determine an elapsed time before next re-authentication (Tz), wherein said Tz is a part of said plurality of scheduled re-authentication times;

identifying a plurality of w3-entities randomly based on said w3-info table, wherein a time to live value of each of said plurality of w-entities exceeds zero;

identifying a plurality of p3-entities based on said p3-info table, wherein a time to live value of each of said plurality of p-entities exceeds zero;

identifying a plurality of m3-entities based on said m3-info table, wherein a time to live value of each of said plurality of m-entities exceeds zero;

selecting a random number of w-entities from said plurality of w3-entities;

making said random number of w-entities as a plurality of entities of a source bag;

selecting a random number of p-entities from said plurality of p3-entities;

making said random number of p-entities as a plurality of entities of said source bag;

selecting a random number of m-entities from said plurality of m3-entities;

making said random number of m-entities as a plurality of entities of said source bag;

point displaying said source bag and a destination bag, wherein as many of a plurality of entities of said source bag get displayed;

point filling in said destination bag based on said source bag and a plurality of responses provided by said user;

point re-authenticating said user based on said destination bag generating said authentication message;

line displaying said source bag and a destination line, wherein said destination line comprises of a plurality of line bins;

line filling in said destination line based on said source bag and a plurality of responses provided by said user;

line re-authenticating said user based on said destination line generating said authentication message;

plane displaying said source bag and a destination plane, wherein said destination plane comprises of a plurality of plane bins;

plane filling in said destination line based on said source bag and a plurality of responses provided by said user;

plane re-authenticating said user based on said destination plane generating said authentication message;

cube displaying said source bag and a destination cube, wherein said destination cube comprises of a plurality of cube bins and is based on a cube dimensionality comprising of time, location, and device;

cube filling in said destination line based on said source bag and a plurality of responses provided by said user; and

cube re-authenticating said user based on said destination cube generating said authentication message.

2. The method of claim 1 , wherein said step of updating further comprising:

obtaining an application of said plurality of most accessed applications being interacted with by said user, wherein said application is of type workflow-related application;

randomly highlighting a plurality of name fields and a plurality of value fields based on said plurality of user specific name fields and said plurality user specific value fields;

obtaining of a field value provided by said user for a name field of said plurality of name fields;

obtaining of said name field of said field value displayed by said application;

obtaining of a time stamp association with the interaction with said application based on the time of the interaction;

obtaining of a location stamp associated with the interaction with said application based on the access network used in the interaction;

obtaining of a device stamp associated with the interaction with said application based on the device used in the interaction;

forming of a of a three-stamped field-value based on said name field, said field value, said time stamp, said location stamp, said device stamp;

determining of a time to live value to be associated with said three-stamped field-value; and

adding of said three-stamped field value along with said time to live value to said w3-info table.

3. The method of claim 2 , wherein said step of updating further comprising:

obtaining an application of said plurality of most accessed applications being interacted with by said user, wherein said application is of type person-related application;

randomly highlighting a plurality of name fields and a plurality of value fields based on said plurality of user specific name fields and said plurality user specific value fields;

obtaining of a field value provided by said user for a name field of said plurality of name fields;

obtaining of said name field of said field value displayed by said application;

obtaining of a time stamp association with the interaction with said application based on the time of the interaction;

obtaining of a location stamp associated with the interaction with said application based on the access network used in the interaction;

obtaining of a device stamp associated with the interaction with said application based on the device used in the interaction;

forming of a three-stamped field-value based on said name field, said field value, said time stamp, said location stamp, said device stamp;

determining of a time to live value to be associated with said three-stamped field-value; and

adding of said thee-stamped field value along with said time to live value to said p3-info table.

4. The method of claim 2 , wherein said step of updating further comprising

obtaining an application of said plurality of most accessed applications being interacted with by said user;

obtaining of an application specific message of said application displayed during the interaction by said user during said session based on said plurality of user specific messages;

obtaining of a time stamp association with the interaction with said application based on the time of the interaction;

obtaining of a location stamp associated with the interaction with said application based on the access network used in the interaction;

obtaining of a device stamp associated with the interaction with said application based on the device used in the interaction;

forming of a three-stamped field-value based on said application specific message, said time stamp, said location stamp, said device stamp;

determining of a time to live value to be associated with said three-stamped field-value; and

adding of said thee-stamped field value along with said time to live value to said m3-info table.

5. The method of claim 2 , wherein said step of updating further comprising

obtaining of a system specific message displayed during the interaction by said user during said session based on said plurality of user specific messages;

obtaining of a time stamp association with the interaction with said application based on the time of the interaction;

obtaining of a location stamp associated with the interaction with said application based on the access network used in the interaction;

obtaining of a device stamp associated with the interaction with said application based on the device used in the interaction;

forming of a three-stamped field-value based on said system specific message, said time stamp, said location stamp, said device stamp;

determining of a time to live value to be associated with said three-stamped field-value; and

adding of said thee-stamped field value along with said time to live value to said m3-info table.

6. The method of claim 2 , wherein said step of updating further comprising:

obtaining a plurality of application specific messages associated with said plurality of applications;

selecting a plurality of selected application specific messages based on said plurality of application specific messages;

determining of a plurality of time to live values to be associated with said plurality of selected application specific messages; and

making of said plurality of selected application specific messages along with said plurality of time to live values a part of said m3-info table.

7. The method of claim 2 , wherein said step of updating further comprising:

obtaining a plurality of system specific messages;

selecting of a plurality of selected system specific messages based on said plurality of system specific messages;

determining of a plurality of time to live values to be associated with said plurality of selected system specific message; and

making of said plurality of selected system specific messages along with said plurality of time to live values a part of said m3-info table.

8. The method of claim 1 , wherein said step of re-authentication scheduling further comprising:

determining an elapsed time since last re-authentication (Tc) based on said Ro and said Rc;

determining a minimum time to be elapsed for next re-authentication (Tm);

determining of an elapsed time by which the session is expected to end (Ty);

ensuring that said Tm>said Tc and said Ty>said Tx; and

generating a random number between Tm and Tx to determine said Tz.

9. The method of claim 8 , wherein said step of re-authentication scheduling further comprising:

ensuring that said Tm<=said Tc and said Ty>Tx; and

generating a random number between said Tc and said Tx to determine said Tz.

10. The method of claim 8 , wherein said step of re-authentication scheduling further comprising:

ensuring that said Tm>said Tc and said Ty<=said Tx; and

generating a random number between said Tm and said Ty to determine said Tz.

11. The method of claim 8 , wherein said step of re-authentication scheduling further comprising:

ensuring that said Tm<=said Tc and said Ty<=Tx; and

generating a random number between said Tc and said Ty to determine said Tz.

12. The method of claim 8 , wherein said step of re-authentication scheduling further comprising:

ensuring that said Tx<=said Tc; and

setting zero to said Tz.

13. The method of claim 1 , wherein said step of point filling in further comprising:

allowing of said user to select an entity from said source bag by double clicking on said entity;

displaying of said entity along with a blank box to obtain a value for said entity, wherein said blank box contains two pre-defined values OK and NG if said entity is an m-entity from said m3-info table;

accepting said value provided by said user for said entity as a response; and

making said response along with said entity a part of a response of said plurality of responses;

allowing said user to move said response along with said entity to said destination bag; and

removing said entity from said source bag.

14. The method of claim 13 , wherein said step of point filling in further comprising:

allowing of said user to select an entity from a list box associated with said source bag based on the identification number associated with said entity.

15. The method of claim 13 , wherein said step of point filling in further comprising:

allowing said user to select an entity from said destination bag by double clicking on said entity or using a list box associated with said destination bag based on an identification number associated with said entity;

displaying said entity along with a box containing a value associated with said entity;

removing said entity from said destination bag;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses; and

allowing said user to move said response along with said entity to said destination bag.

16. The method of claim 1 , wherein said step of point re-authenticating further comprising:

obtaining an entity from said destination bag;

obtaining a three-stamped field-value associated with said entity;

assigning of value 1 to an output if the response associated with said entity is correct with respect to the value associated with said entity based on said three-stamped field-value;

assigning of value 0 to said output if the response associated with said entity is incorrect with respect to the value associated with said entity based on said three-stamped field-value;

making of said output a part of a plurality of outputs;

obtaining of a plurality of weights associated with a plurality of entities of said destination bag;

computing a sum based on said plurality outputs and said plurality of weights;

assigning OK to said authentication message if said sum exceeds a pre-defined value; and

assigning NG to said authentication message if said sum does not exceed said pre-defined value.

17. The method of claim 1 , wherein said step of line displaying further comprises:

randomly selecting a line dimensionality based on time, location, and device; and

displaying said plurality of line bins of said destination line with respect to said line dimensionality.

18. The method of claim 1 , wherein said step of line filling in further comprising:

allowing said user to select an entity from said source bag by double clicking on said entity;

displaying said entity along with a blank box to obtain a value for said entity, wherein said blank box contains two pre-defined values OK and NG if said entity is an m-entity from said m3-info table;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses;

allowing said user to move said response along with said entity to a line bin of said plurality of line bins selected by said user; and

removing said entity from said source bag.

19. The method of claim 18 , wherein said step of line filling in further comprising:

allowing said user to select an entity from a list box associated with said source bag based on the identification number associated with said entity.

20. The method of claim 18 , wherein said step of line filling in further comprising:

allowing said user to select an entity from a line bin of said plurality of line bins by double clicking on said entity or using a list box associated with said line bin based on an identification number associated with said entity;

displaying said entity along with a box containing a value associated with said entity;

removing said entity from said line bin;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses; and

allowing said user to move said response along with said entity to a line bin of said plurality of line bins selected by said user.

21. The method of claim 1 , wherein said step of line re-authenticating further comprising:

obtaining of an entity from a line bin of said plurality of line bins;

obtaining a three-stamped field-value associated with said entity;

assigning of value 1 to an output if the response associated with said entity is correct with respect to the value associated with said entity and a dimensional value associated with said line bin based on said three-stamped field-value;

assigning of value 0 to said output if the response associated with said entity is incorrect with respect to the value associated with said entity and a dimensional value associated with said line bin based on said three-stamped field-value;

making of said output a part of a plurality of outputs;

obtaining of a plurality of weights associated with a plurality of entities of said destination line;

computing a sum based on said plurality outputs and said plurality of weights;

assigning OK to said authentication message if said sum exceeds a pre-defined value; and

assigning NG to said authentication message if said sum does not exceed said pre-defined value.

22. The method of claim 1 , wherein said step of plane displaying further comprises:

randomly selecting a plane dimensionality, wherein said plane dimensionality is a pair of dimensional values based on time, location, and device; and

displaying said plurality of plane bins of said destination plane with respect to said plane dimensionality.

23. The method of claim 1 , wherein said step of plane filling in further comprising:

allowing said user to select an entity from said source bag by double clicking on said entity;

displaying said entity along with a blank box to obtain a value for said entity, wherein said blank box contains two pre-defined values OK and NG if said entity is an m-entity from said m3-info table;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses;

allowing said user to move said response along with said entity to a plane bin of said plurality of plane bins selected by said user; and

removing said entity from said source bag.

24. The method of claim 23 , wherein said step of plane filling in further comprising:

allowing said user to select an entity from a list box associated with said source bag based on the identification number associated with said entity.

25. The method of claim 23 , wherein said step of plane filling in further comprising:

allowing said user to select an entity from a plane bin of said plurality of plane bins by double clicking on said entity or using a list box associated with said plane bin based on an identification number associated with said entity;

displaying said entity along with a box containing a value associated with said entity;

removing said entity from said plane bin;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses; and

allowing of said user to move said response along with said entity to a plane bin of said plurality of plane bins selected by said user.

26. The method of claim 1 , wherein said step of plane re-authenticating further comprising:

obtaining an entity from a plane bin of said plurality of plane bins;

obtaining a three-stamped field-value associated with said entity;

assigning value 1 to an output if the response associated with said entity is correct with respect to the value associated with said entity and a pair of dimensional values associated with said plane bin based on said three-stamped field-value;

assigning value 0 to said output if the response associated with said entity is incorrect with respect to the value associated with said entity and a pair of dimensional values associated said plane bin based on said three-stamped field-value;

making said output a part of a plurality of outputs;

obtaining a plurality of weights associated with a plurality of entities of said destination plane;

computing a sum based on said plurality outputs and said plurality of weights;

assigning OK to said authentication message if said sum exceeds a pre-defined value; and

assigning NG to said authentication message if said sum does not exceed said pre-defined value.

27. The method of claim 1 , wherein said step of cube filling in further comprising:

allowing said user to select an entity from said source bag by double clicking on said entity;

displaying said entity along with a blank box to obtain a value for said entity, wherein said blank box contains two pre-defined values OK and NG if sand entity is an m-entity from said m3-info table;

accepting said value provided by said user for said entity as a response;

making said response along with said entity a part of a response of said plurality of responses;

allowing said user to double click on a cube bin of said plurality of cube bins to display to a plurality of line bins;

allowing of said user to move said response along with said entity to a line bin of said plurality of line bins selected by said user;

allowing of said user to double click on said plurality of line bins to remove the display of said plurality of line bins; and

removing said entity from said source bag.

28. The method of claim 27 , wherein said step of cube filling in further comprising:

allowing said user to select an entity from a list box associated with said source bag based on the identification number associated with said entity.

29. The method of claim 27 , wherein said step of cube filling in further comprising:

allowing said user to select an entity from a cube bin of said plurality of cube bins by double clicking on said entity or using a list box associated with said cube bin based on an identification number associated with said entity;

allowing said user to select said entity from said cube bin by double clicking on said cube bin resulting in a display of a plurality of line bins, and double clicking on said entity that is a part of a line bin of said plurality of line bins or using a list box associated said plurality of line bins;

displaying said entity along with a box containing a value associated with said entity;

removing said entity from said cube bin;

accepting said value provided by said user for said entity as a response; and

making said response along with said entity a part of a response of said plurality of responses;

allowing said user to double click on a cube bin of said plurality of cube bins to display to a plurality of line bins;

allowing said user to move said response along with said entity to a line bin of said plurality of line bins selected by said user; and

allowing said user to double click on said plurality of line bins to remove the display of said plurality of line bins.

30. The method of claim 1 , wherein said step of cube re-authenticating further comprising:

obtaining an entity from a cube bin of said plurality of cube bins;

obtaining of a three-stamped field-value associated with said entity;

assigning of value 1 to an output if the response associated with said entity is correct with respect to the value associated with said entity and a three dimensional value associated with said cube bin based on said three-stamped field-value;

assigning of value 0 to said output if the response associated with said entity is incorrect with respect to the value associated with said entity and a three dimensional value associated with said cube bin based on said three-stamped field-value;

making of said output a part of a plurality of outputs;

obtaining of a plurality of weights associated with a plurality of entities of said destination cube;

computing a sum based on said plurality outputs and said plurality of weights;

assigning OK to said authentication message if said sum exceeds a pre-defined value; and

assigning NG to said authentication message if said sum does not exceed said pre-defined value.