Authentication systems with selective authentication method
There is disclosed a technique for use in authentication. The technique comprises receiving an authentication request. The technique also comprises evaluating an attribute associated with the implementation of the authentication request. The attribute is evaluated with respect to at least one available authentication method. The technique also comprises selecting an available authentication method suitable for use in authentication based on the said evaluation.
1. A method, comprising:
receiving an authentication request for a device attempting to connect to a network communications system;
assessing, by a risk engine, a risk score associated with the authentication request;
if the risk engine determines the risk score indicates potential fraudulent activity associated with the authentication request, evaluating, by an authentication method selector, the authentication request by evaluating an attribute associated with implementation of the authentication request, wherein the attribute is evaluated with respect to at least one available authentication method, wherein the attribute comprises a mode of implementation used to perform authentication; and
based on the said evaluation, selecting, by the authentication method selector, an available authentication method suitable for use in authenticating the device in the network communications system.
2. The method as claimed in claim 1 , where the attribute comprises a device-based feature used to implement the authentication request; and
evaluating the attribute, comprises:
determining the reliability of the device-based feature with respect to at least one available authentication method; and
based on the reliability, selecting the available authentication method suitable for use in authentication.
3. The method as claimed in claim 2 , wherein the reliability is dependent on the success or failure of previous authentication requests comprising the device-based feature.
4. The method as claimed in claim 2 , wherein the device-based feature relates to at least one of a device, an operating system, a sensor or an application.
5. The method as claimed in claim 1 , wherein a second attribute is associated with the authentication request, and
the method further comprises:
evaluating the second attribute with respect to the at least one authentication methods; and
based on the said evaluation, determining the usability of the at least one authentication methods.
6. The method as claimed in claim 5 , wherein the selection of the available authentication method is based on the usability.
7. An apparatus, comprising:
a memory; and
at least one hardware device, coupled to the memory, operative to:
receive an authentication request for a device attempting to connect to a network communications system;
assess, by a risk engine, a risk score associated with the authentication request;
if the risk engine determines the risk score indicates potential fraudulent activity associated with the authentication request, evaluate, by an authentication method selector, the authentication request by evaluating an attribute associated with implementation of the authentication request, wherein the attribute is evaluated with respect to at least one available authentication method, wherein the attribute comprises a mode of implementation used to perform authentication; and
based on the said evaluation, select, by the authentication method selector, an available authentication method suitable for use in authenticating the device in the network communications system.
8. The apparatus as claimed in claim 7 , where the attribute comprises a device-based feature used to implement the authentication request; and
evaluating the attribute, comprises:
determining the reliability of the device-based feature with respect to at least one available authentication method; and
based on the reliability, selecting the available authentication method suitable for use in authentication.
9. The apparatus as claimed in claim 8 , wherein the reliability is dependent on the success or failure of previous authentication requests comprising the device-based feature.
10. The apparatus as claimed in claim 8 , wherein the device-based feature relates to at least one of a device, an operating system, a sensor or an application.
11. The apparatus as claimed in claim 7 , wherein a second attribute is associated with the authentication request, and
the apparatus further operative to:
evaluate the second attribute with respect to the at least one authentication methods; and
based on the said evaluation, determine the usability of the at least one authentication methods.
12. The apparatus as claimed in claim 11 , wherein the selection of the available authentication method is based on the usability.
13. A computer program product comprising a tangible non-transitory machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed perform the steps of:
receiving an authentication request for a device attempting to connect to a network communications system;
assessing, by a risk engine, a risk score associated with the authentication request;
if the risk engine determines the risk score indicates potential fraudulent activity associated with the authentication request, evaluating, by an authentication method selector, the authentication request by evaluating an attribute associated with implementation of the authentication request, wherein the attribute is evaluated with respect to at least one available authentication method, wherein the attribute comprises a mode of implementation used to perform authentication; and
based on the said evaluation, selecting, by the authentication method selector, an available authentication method suitable for use in authenticating the device in the network communications system.
14. The computer program product as claimed in claim 13 , where the attribute comprises a device-based feature used to implement the authentication request; and
evaluating the attribute, comprises:
determining the reliability of the device-based feature with respect to at least one available authentication method; and
based on the reliability, selecting the available authentication method suitable for use in authentication.
15. The computer program product as claimed in claim 14 , wherein the reliability is dependent on the success or failure of previous authentication requests comprising the device-based feature.
16. The computer program product as claimed in claim 14 , wherein the device-based feature relates to at least one of a device, an operating system, a sensor or an application.
17. The computer program product as claimed in claim 13 , wherein a second attribute is associated with the authentication request, and
wherein the one or more software programs when executed also perform the steps of:
evaluating the second attribute with respect to the at least one authentication methods; and
based on the said evaluation, determining the usability of the at least one authentication methods.
18. The computer program product as claimed in claim 17 , wherein the selection of the available authentication method is based on the usability.