User-enabled, two-factor authentication service
A user may have real-time control over whether accessing a network service account implements two-factor authentication. When a username and password is provided to log into the network service account, a determination may be made about whether the login attempt is a potential security threat. When the login attempt does not appear to be a threat, the login attempt may be processed based on the username and password. When the login attempt is a potential security threat, the actual user corresponding to the network service account may be notified and asked to confirm whether the login attempt is a security threat. When the user confirms that the login attempt is not a security threat, the user may be logged in based on the username and password. When the user confirms that the login attempt is a security threat, two-factor authentication may be implemented for accessing the network service account.
1. A method, comprising:
receiving, by one or more devices and from a first user device, a first request to access a particular network service account based on a first username and a first password provided by the first user device to the one or more devices;
determining, by the one or more devices, and based on historical access information regarding the particular network service account, whether the first request to access the particular network service account is a potential security threat;
when determining that the first request is not a potential security threat, based on the historical access information, authenticating the first request based on the first username and the first password received from the first user device;
when determining it is not determined that the first request is authorized a potential security threat, based on the access information:
communicating, by the one or more devices and to a second user device previously associated with the particular network service account, a request to confirm whether the first request is an actual security threat;
receiving, from the second user device, a response to the request to confirm whether the first request is an actual security threat;
when the response from the second user device does not confirm that the first request is an actual security threat:
authenticating the first request based on the first username and the first password, and
forgoing requiring at least two factors of authentication for a second request to access the particular network service account, received after the first request, from the first user device or from the second user device; and
when the response from the second user device confirms that the first request is an actual security threat:
denying the first request from the first user device, and
requiring at least two factors of authentication for a third request to access the particular network service account, received after the first request, from the second user device.
2. The method of claim 1 , wherein the communicating with the second user device includes communicating a first Short Messaging Service (SMS) message to the second user device.
3. The method of claim 2 , wherein the receiving of the confirmation from the second user device includes receiving a second SMS message from the second user device.
4. The method of claim 1 , wherein the at least two factors of authentication include a Short Messaging Service (SMS) message being sent to the second user device.
5. The method of claim 1 , further comprising:
disabling a login session, corresponding to the first request to access the particular network service account, when the response, to the request to confirm whether the first request device is an actual security threat, confirms that the first request is an actual security threat.
6. The method of claim 1 , wherein the historical access information includes a first geographical location associated with a previous access of the particular network service account, wherein determining whether the first request is a potential security threat further includes:
identifying a second geographic location associated with the first user device at a time that the first username and the first password were provided by the first user device; and
comparing the first geographic location with the second geographic location.
7. The method of claim 1 , wherein the historical access information includes a first Internet Protocol (IP) address associated with a previous access of the particular network service account, wherein determining whether the first request is a potential security threat further includes:
identifying a second IP address associated with the first user device at a time that the first username and the first password were provided by the first user device; and
comparing the first IP address with the second IP address.
8. The method of claim 1 , wherein the historical access information further includes a first time of day associated with a previous access of the particular network service account, wherein determining whether the first request is a potential security threat further includes:
identifying a second time of day corresponding to when the first username and the first password were provided by the first user device; and
comparing the first time of day with the second time of day.
9. One or more server devices, comprising:
a non-transitory memory device storing a plurality of processor-executable instructions; and
a processor configured to execute the processor-executable instructions, wherein executing the processor-executable instructions causes the processor to:
receive, from a first user device, a first request to access a particular network service account based on a first username and a first password provided by the first user device to the one or more server devices;
determine, based on the historical access information regarding the particular network service account, whether the first request to access the particular network service account is a potential security threat;
when determining that the first request is not a potential security threat, based on the historical access information, authenticate the first request based on the first username and the first password received from the first user device;
when determining that the first request is a potential security threat, based on the historial access information:
communicate, to a second user device previously associated with the particular network service account, a request to confirm whether the first request is an actual security threat;
receive, from the second user device, a response to the request to confirm whether the first request is an actual security threat;
when the response from the second user device does not confirm that the first request is an actual security threat:
authenticate the first request based on the first username and the first password, and
forgo requiring at least two factors of authentication for a second request to access the particular network service account, received after the first request, from the first user device or from the second user device; and
when the response from the second user device confirms that the first request is an actual security threat:
deny the first request from the first user device, and
require at least two factors of authentication for a third request to access the particular network service account, received after the first request, from the second user device.
10. The one or more server devices of claim 9 , wherein executing the processor-executable instructions, to communicate with the second user device, further causes the processor to:
communicate a Short Messaging Service (SMS) message to the second user device.
11. The one or more server devices of claim 9 , wherein the at least two factors of authentication include a Short Messaging Service (SMS) message being sent to the second user device.
12. The one or more server devices of claim 9 , wherein executing the processor-executable instructions further causes the processor to:
disable a login session, corresponding to the first request to access the particular network service account, when the response, to the request to confirm whether the first request is an actual security threat, confirms that the first threat is an actual security threat.
13. The one or more server devices of claim 9 , wherein the historical access information includes a first geographical location associated with a previous access of the particular network service account, wherein executing the processor-executable instructions, to determine whether the first request is a potential security threat, further causes the processor to:
identify a second geographic location associated with the first user device at a time that the first username and the first password were provided by the first user device; and
compare the first geographic location with the second geographic location.
14. The one or more devices of claim 9 , wherein the historical access information further includes a first time of day associated with a previous access of the particular network service account, wherein executing the processor-executable instructions, to determine whether the first request is a potential security threat, further causes the processor to:
identify a second time of day corresponding to when the first username and the first password were provided by the first user device; and
compare the first time of day with the second time of day.
15. A non-transitory computer-readable medium, storing a set of processor-executable instructions, which, when executed by one or more processors of a device, cause the one or more processors to:
receive, from a first user device, a first request to access a particular network service account based on a first username and a first password provided by the first user device to the one or more server devices;
determine, based on the historical access information regarding the particular network service account, whether the first request to access the particular network service account is a potential security threat;
when determining that the first request is not a potential security threat, based on the historical access information, authenticate the first request based on the first username and the first password received from the first user device;
when determining that the first request is a potential security threat, based on the historical access information:
communicate, to a second user device previously associated with the particular network service account, a request to confirm whether the first request is an actual security threat;
receive, from the second user device, a response to the request to confirm whether the first request is an actual security threat;
when the response from the second user device does not confirm that the first request is an actual security threat:
authenticate the first request based on the first username and the first password, and
forgo requiring at least two factors of authentication for a second request to access the particular network service account, received after the first request, from the first user device or the second user device; and
when the response from the second user device confirms that the first request is an actual security threat:
deny the first request from the first user device, and
require at least two factors of authentication for a third request to access the particular network service account, received after the first request, from the second user device.
16. The non-transitory computer-readable medium of claim 15 , wherein the processor-executable instructions, to communicate with the second user device, further include processor-executable instructions to:
communicate a Short Messaging Service (SMS) message to the second user device.
17. The non-transitory computer-readable medium of claim 15 , wherein the at least two factors of authentication include a Short Messaging Service (SMS) message being sent to the second user device.
18. The non-transitory computer-readable medium of claim 15 , wherein the processor-executable instructions further include processor-executable instructions to:
disable a login session, corresponding to the first request to access the particular network service account, when the response, to the request to confirm whether the first request is an actual security threat, confirms that the first request is an actual security threat.
19. The non-transitory computer-readable medium of claim 15 , wherein the historical access information includes a first geographical location associated with a previous access of the particular network service account, wherein the processor-executable instructions, to determine whether the first request is a potential security threat, further include processor-executable instructions to:
identify a second geographic location associated with the first user device at a time that the first username and the first password were provided by the first user device; and
compare the first geographic location with the second geographic location.
20. The non-transitory computer-readable medium of claim 15 , wherein the historical access information includes a first Internet Protocol (IP) address associated with a previous access of the particular network service account, wherein the processor-executable instructions, to determine whether the first request is a potential security threat, further include processor-executable instructions to:
identify a second IP address associated with the first user device at a time that the first username and the first password were provided by the first user device; and
compare the first IP address with the second IP address.