Friction-less identity proofing during employee self-service registration
A method for proving identity when registering for a service includes presenting by the entity a user with options for registering for the service, wherein the options comprise validating an identity of the user through a trusted partner. The method includes receiving, by the entity, user data from the trusted partner responsive to the user logging into a page on the trusted partner. The method includes validating the user identity for the service responsive to a determination that a user identifier from the trusted partner matches a user identifier on record with the entity. The method includes populating entity user data for the service according to the user data received from the trusted partner responsive to successfully validation of the user identity. In embodiments, a risk analysis score is determined for the user and registration steps for registering are selected based on comparison of the registration score with a threshold.
1. A system, comprising:
one or more processors, coupled with memory, to:
receive, in response to a request to register for a service provided by an entity, identifying information from a user of a client device;
generate, via application of an artificial intelligence analysis to the identifying information, a score;
update, based on changes in information comprising previous locations of the client device that performed attempts to register to the service provided by the entity, a threshold risk score used to identify low risk or high risk authentications;
determine, based on a comparison of the score with the threshold risk score, to allow or not allow the user to register for the service provided by the entity; and
provide, to the client device based on the determination to allow or not allow the user, a response to the request to register for the service.
2. The system of claim 1 , wherein the one or more processors are further configured to:
provide, for presentation via the client device, a plurality of options configured to register the user for the service; and
receive, responsive to selection of an option of the plurality of options, the identifying information from the client device.
3. The system of claim 1 , wherein the one or more processors are further configured to:
provide, for presentation via the client device, a plurality of options configured to register the user for the service, the plurality of options comprising a first option to validate via a trusted partner and a second option to validate via the identifying information; and
receive, responsive to selection of the second option of the plurality of options, the identifying information from the client device.
4. The system of claim 1 , wherein the one or more processors are further configured to:
determine the score satisfies the threshold risk score based on the comparison;
authenticate, responsive to the determination that the score satisfies the threshold risk score, the user to register for the service provided by the entity; and
allow, responsive to the authentication, the user to register for the service.
5. The system of claim 1 , wherein the one or more processors are further configured to:
determine the score is less than or equal to the threshold risk score based on the comparison; and
allow, responsive to the score being less than or equal to the threshold risk score, the user to register for the service.
6. The system of claim 1 , wherein the one or more processors are further configured to:
determine the score does not satisfy the threshold risk score based on the comparison; and
prevent, responsive to the determination, the user from registering for the service.
7. The system of claim 1 , wherein the one or more processors are further configured to:
determine the score is greater than the threshold risk score based on the comparison; and
prevent, responsive to the score being greater than the threshold risk score, the user from registering for the service.
8. The system of claim 1 , wherein the one or more processors are further configured to:
determine the score does not satisfy the threshold risk score based on the comparison; and
select a different authentication option for the user responsive to the determination the score does not satisfy the threshold risk score, wherein the different authentication option comprises at least one of an on-the-fly registration via a personal registration code or a knowledge based authentication.
9. The system of claim 1 , wherein the one or more processors are further configured to:
dynamically update the threshold risk score based on additional information received for the client device.
10. The system of claim 1 , wherein the one or more processors are further configured to:
determine one or more of the previous locations of the client device based on an IP address of the client device.
11. A method, comprising:
receiving, by one or more processors coupled with memory, in response to a request to register for a service provided by an entity, identifying information from a user of a client device;
generating, by the one or more processors via application of an artificial intelligence analysis to the identifying information, a score;
updating, by the one or more processors based on changes in information comprising previous locations of the client device that performed attempts to register to the service provided by the entity, a threshold risk score used to identify low risk or high risk authentications;
determining, by the one or more processors based on a comparison of the score with the threshold risk score, to allow or not allow the user to register for the service provided by the entity; and
providing, by the one or more processors to the client device based on the determination to allow or not allow the user, a response to the request to register for the service.
12. The method of claim 11 , comprising:
providing, by the one or more processors for presentation via the client device, a plurality of options configured to register the user for the service; and
receiving, by the one or more processors responsive to selection of an option of the plurality of options, the identifying information from the client device.
13. The method of claim 11 , comprising:
providing, by the one or more processors for presentation via the client device, a plurality of options configured to register the user for the service, the plurality of options comprising a first option to validate via a trusted partner and a second option to validate via the identifying information; and
receiving, by the one or more processors responsive to selection of the second option of the plurality of options, the identifying information from the client device.
14. The method of claim 11 , comprising:
determining, by the one or more processors, the score satisfies the threshold risk score based on the comparison;
authenticating, by the one or more processors, responsive to the determination that the score satisfies the threshold risk score, the user to register for the service provided by the entity; and
allowing, by the one or more processors responsive to the authentication, the user to register for the service.
15. The method of claim 11 , comprising:
determining, by the one or more processors, the score is less than or equal to the threshold risk score based on the comparison; and
allowing, by the one or more processors, responsive to the score being less than or equal to the threshold risk score, the user to register for the service.
16. The method of claim 11 , comprising:
determining, by the one or more processors, the score does not satisfy the threshold risk score based on the comparison; and
preventing, by the one or more processors responsive to the determination, the user from registering for the service.
17. The method of claim 11 , comprising:
determining, by the one or more processors, the score is greater than the threshold risk score based on the comparison; and
preventing, by the one or more processors, responsive to the score being greater than the threshold risk score, the user from registering for the service.
18. The method of claim 11 , comprising:
determining, by the one or more processors, the score does not satisfy the threshold risk score based on the comparison; and
selecting, by the one or more processors, a different authentication option for the user responsive to the determination the score does not satisfy the threshold risk score, wherein the different authentication option comprises at least one of an on-the-fly registration via a personal registration code or a knowledge based authentication.
19. The method of claim 11 , comprising:
dynamically updating, by the one or more processors, the threshold risk score based on additional information received for the client device.
20. The method of claim 11 , comprising:
determining, by the one or more processors, one or more of the previous locations of the client device based on an IP address of the client device.