IP Library › Granted Patent US 10,210,317
Granted Patent B2
US 10,210,317 · App. 15/236,796 · Granted Feb 19, 2019

Multiple-point cognitive identity challenge system

Inventors: Duncan S. Anderson (Sevenoaks, GB); Oliver C. W. Blodgett (New York, NY); Timothy Durniak (Poughkeepsie, NY); Mikaela R. Moore (New York, NY); Martin Schmid (Stare Hradiste, CZ)
Assignee: International Business Machines Corporation
G06F21/31
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,210,317
App. No.
15/236,796
Granted
Feb 19, 2019
Kind
B2
Abstract

A mechanism is provided for verifying an identity of a user using dynamically generated questions based on transactions conducted by the user. Responsive to receiving a request to verify the identity of the user, one or more transaction based sources associated with the user are scanned for a set of transactions conducted by the user within a first predetermined time frame of a current time. A subset of transactions from the set of transactions are randomly selected as the basis for forming a set of questions to be used to verify the identity of the user. The set of questions are generated such that the user is required to identify one or more details about the subset of transactions in order to verify the user's identity. Responsive to the user correctly answering the one or more details about the subset of transactions, the user is authenticated.

Claims (40)

1. A method, in a data processing system, for verifying an identity of a user using dynamically generated questions based on transactions conducted by the user, the method comprising:

receiving a request to verify the identity of the user;

scanning one or more transaction based sources associated with the user for a set of transactions conducted by the user within a first predetermined time frame of a current time;

randomly selecting a subset of transactions from the set of transactions as the basis for forming a set of questions to be used to verify the identity of the user;

generating the set of questions such that the user is required to identify one or more details about the subset of transactions in order to verify the user's identity, wherein the random selection of the subset of transactions used to generate the set of questions are such that an answer to a question in the set of questions presented and answered by the user changes a next question in the set of questions to be presented to the user;

presenting the set of questions to the user; and

responsive to the user correctly answering the one or more details about the subset of transactions, authenticating the user.

2. The method of claim 1 , wherein the predetermined time frame from the current time frame may be automatically increased responsive to the number of transactions within the predetermined time frame falling below a required transaction threshold.

3. The method of claim 1 , wherein the set of transactions conducted by the user are identified from at least one unstructured data stream.

4. The method of claim 1 , wherein each answer to each question in the set of questions has an associated time input value that is required to be met for the answer to be considered valid.

5. The method of claim 1 , wherein one question from the set of questions is a request for an image to be submitted to be compared to a preexisting image and wherein the image to be submitted is required to be taken within a second predetermined time frame of the current time.

6. The method of claim 1 , wherein all of the set of questions are required to be answered before a determination as to whether the user is authentic is made.

7. The method of claim 1 , wherein each answer to each question in the set of questions may have at least one of a percentage, predetermined threshold, or range from the actual answer for the answer to be considered correct.

8. A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a computing device, causes the computing device to:

receive a request to verify the identity of a user,

scan one or more transaction based sources associated with the user for a set of transactions conducted by the user within a first predetermined time frame of a current time;

randomly select a subset of transactions from the set of transactions as the basis for forming a set of questions to be used to verify the identity of the user,

generate the set of questions such that the user is required to identify one or more details about the subset of transactions in order to verify the user's identity, wherein the random selection of the subset of transactions used to generate the set of questions are such that an answer to a question in the set of questions presented and answered by the user changes a next question in the set of questions to be presented to the user;

present the set of questions to the user, and

responsive to the user correctly answering the one or more details about the subset of transactions, authenticate the user.

9. The computer program product of claim 8 , wherein the predetermined time frame from the current time frame may be automatically increased responsive to the number of transactions within the predetermined time frame falling below a required transaction threshold.

10. The computer program product of claim 8 , wherein the set of transactions conducted by the user are identified from at least one unstructured data stream.

11. The computer program product of claim 8 , wherein each answer to each question in the set of questions has an associated time input value that is required to be met for the answer to be considered valid.

12. The computer program product of claim 8 , wherein one question from the set of questions is a request for an image to be submitted to be compared to a preexisting image and wherein the image to be submitted is required to be taken within a second predetermined time frame of the current time.

13. The computer program product of claim 8 , wherein all of the set of questions are required to be answered before a determination as to whether the user is authentic is made.

14. The computer program product of claim 8 , wherein each answer to each question in the set of questions may have at least one of a percentage, predetermined threshold, or range from the actual answer for the answer to be considered correct.

15. An apparatus comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:

receive a request to verify the identity of a user;

scan one or more transaction based sources associated with the user for a set of transactions conducted by the user within a first predetermined time frame of a current time;

randomly select a subset of transactions from the set of transactions as the basis for forming a set of questions to be used to verify the identity of the user;

generate the set of questions such that the user is required to identify one or more details about the subset of transactions in order to verify the user's identity, wherein the random selection of the subset of transactions used to generate the set of questions are such that an answer to a question in the set of questions presented and answered by the user changes a next question in the set of questions to be presented to the user;

present the set of questions to the user; and

responsive to the user correctly answering the one or more details about the subset of transactions, authenticate the user.

16. The apparatus of claim 15 , wherein the predetermined time frame from the current time frame may be automatically increased responsive to the number of transactions within the predetermined time frame falling below a required transaction threshold.

17. The apparatus of claim 15 , wherein the set of transactions conducted by the user are identified from at least one unstructured data stream.

18. The apparatus of claim 15 , wherein each answer to each question in the set of questions has an associated time input value that is required to be met for the answer to be considered valid.

19. The apparatus of claim 15 , wherein one question from the set of questions is a request for an image to be submitted to be compared to a preexisting image and wherein the image to be submitted is required to be taken within a second predetermined time frame of the current time.

20. The apparatus of claim 15 , wherein all of the set of questions are required to be answered before a determination as to whether the user is authentic is made.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 15, 2016
From: ANDERSON, DUNCAN S.; BLODGETT, OLIVER C. W.; DURNIAK, TIMOTHY; MOORE, MIKAELA R.; SCHMID, MARTIN
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 039434/0721 →
Continuity (1)
Related Publication 20180046785A1 · Feb 15, 2018
Cited By (1)
US 12,731,122