IP Library › Granted Patent US 10,747,857
Granted Patent B2
US 10,747,857 · App. 16/137,619 · Granted Aug 18, 2020

Event-based security challenges

Inventors: Robert Alan Koch (Norcross, GA); Robert Bridger, II (Alpharetta, GA); James T. Lee, Jr. (New Lenox, IL)
Assignee: AT&T Intellectual Property I, L.P.
G06F21/31H04L63/08G06F2221/2101G06F2221/2103
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,747,857
App. No.
16/137,619
Granted
Aug 18, 2020
Kind
B2
Abstract

Concepts and technologies are disclosed herein for event-based security challenges. A computer can execute a security application. The computer can receive a request for authentication information associated with a user device. The computer can access event data corresponding to the user device. The computer can generate, based upon the event data, a challenge question and a response to the challenge question. The computer can provide data indicating the challenge question and the response to a requestor associated with the request.

Claims (40)

1. A method comprising:

storing, by a first computing device comprising a processor, event data that relates to an event associated with a user of a user device, wherein the event data is generated by the user device, and wherein the event data is obtained by the first computing device from the user device;

detecting, by the first computing device, a request, by the user device, for a resource;

determining, by the first computing device and based on a setting associated with the user and based on a resource type associated with the resource being requested by the user device, a difficulty level to be required for a response to a challenge question, wherein the difficulty level comprises a degree of accuracy;

generating, by the first computing device, the challenge question based on the event data and the difficulty level;

generating, by the first computing device, the response based on the event data and the difficulty level, the response comprising a valid response to the challenge question; and

providing, by the first computing device and to a second computing device that hosts the resource, the challenge question and the response, wherein the second computing device is configured to authenticate the user associated with the user device using the challenge question and the response.

2. The method of claim 1 , wherein the resource comprises a website.

3. The method of claim 1 , wherein the event comprises a transaction.

4. The method of claim 1 , wherein the challenge question and the response are based on an identity of a device that was in a proximity of the user device.

5. The method of claim 1 , wherein the challenge question and the response relate to a time at which the user device was near an automobile.

6. The method of claim 1 , wherein the challenge question and the response are based on a data download.

7. The method of claim 1 , wherein the event data is obtained from another user device that is associated with the user.

8. A system comprising:

a first computing device comprising a processor; and

a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising

storing, by the first computing device, event data that relates to an event associated with a user of a user device, wherein the event data is generated by the user device, and wherein the event data is obtained by the first computing device from the user device,

detecting, by the first computing device, a request, by the user device, for a resource,

determining, by the first computing device and based on a setting associated with the user and based on a resource type associated with the resource being requested by the user device, a difficulty level to be required for a response to a challenge question, wherein the difficulty level comprises a degree of accuracy,

generating, by the first computing device, the challenge question based on the event data and the difficulty level,

generating, by the first computing device, the response based on the event data and the difficulty level, the response comprising a valid response to the challenge question, and

providing, by the first computing device and to a second computing device that hosts the resource, the challenge question and the response, wherein the second computing device is configured to authenticate the user associated with the user device using the challenge question and the response.

9. The system of claim 8 , wherein the resource comprises a website.

10. The system of claim 8 , wherein the event comprises a transaction.

11. The system of claim 8 , wherein the challenge question and the response are based on an identity of a device that was in a proximity of the user device.

12. The system of claim 8 , wherein the challenge question and the response are based on a data download.

13. The system of claim 8 , wherein the event data is obtained from another user device that is associated with the user.

14. A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:

storing, by a first computing device, event data that relates to an event associated with a user of a user device, wherein the event data is generated by the user device, and wherein the event data is obtained by the first computing device from the user device;

detecting, by the first computing device, a request, by the user device, for a resource;

determining, by the first computing device and based on a setting associated with the user and based on a resource type associated with the resource being requested by the user device, a difficulty level to be required for a response to a challenge question, wherein the difficulty level comprises a degree of accuracy;

generating, by the first computing device, the challenge question based on the event data and the difficulty level;

generating, by the first computing device, the response based on the event data and the difficulty level, the response comprising a valid response to the challenge question; and

providing, by the first computing device and to a second computing device that hosts the resource, the challenge question and the response, wherein the second computing device is configured to authenticate the user associated with the user device using the challenge question and the response.

15. The computer storage medium of claim 14 , wherein the resource comprises a website.

16. The computer storage medium of claim 14 , wherein the event comprises a transaction.

17. The computer storage medium of claim 14 , wherein the challenge question and the response are based on an identity of a device that was in a proximity of the user device.

18. The computer storage medium of claim 14 , wherein the challenge question and the response are based on a data download.

19. The computer storage medium of claim 14 , wherein the event data is obtained from another user device that is associated with the user.

20. The computer storage medium of claim 14 , wherein the event comprises a purchase.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2018
From: KOCH, ROBERT ALAN; BRIDGER, ROBERT, II; LEE, JAMES T., JR.
To: AT&T INTELLECTUAL PROPERTY I, L.P.
Reel/Frame 046934/0168 →
Continuity (3)
Continuation 15082079 · Mar 28, 2016
Continuation 13945359 · Jul 18, 2013
Related Publication 20190026447A1 · Jan 24, 2019
Cited By (1)
US 12,664,252