Delayed user authentication
Techniques are disclosed relating to a delayed presentation of authentication challenge for users, such as in the context of a chat session. In various embodiments, a server system receives an indication of a request for service initiated by a user in a chat session within an application executed by a client device. The request for service involves an authentication of the user that is dependent on the authentication being successfully completed within a particular time period after the authentication is initiated. The server system delays the initiation of authentication for the request for service until a readiness condition is satisfied. The readiness condition includes the server system being available to process the request for service, as well as subsequently detecting engagement with the user relating to the request for service. In response to the readiness condition being satisfied, the server system initiates the authentication of the user.
1 . A system, comprising:
a non-transitory memory; and
one or more hardware processors coupled to the non-transitory memory and configured to read instructions from the non-transitory memory to cause the system to perform operations comprising:
receiving an indication of a request for service initiated by a user, wherein the request for service involves an authentication of the user, and wherein the authentication is dependent on an authentication challenge at a computing device of the user being successfully completed within a particular time period after the authentication is initiated;
upon receiving the indication of the request for service, making an initial determination regarding an authentication type to be initiated for authenticating the user; and
upon subsequently detecting engagement of the user, initiating the authentication of the user, within the particular time period, based on the engagement of the user and the authentication type.
2 . The system of claim 1 , wherein the authentication type of the initial determination is a first authentication type corresponding to a first level of strictness.
3 . The system of claim 2 , wherein the operations further comprise:
upon subsequently detecting engagement of the user, making a final determination regarding the authentication type.
4 . The system of claim 3 , wherein the final determination selects a second authentication type distinct from the first authentication type, the second authentication type corresponding to a second level of strictness higher than the first level of strictness.
5 . The system of claim 3 , wherein the operations further comprise:
detecting, at the computing device of the user, an event relating to the user that occurred between the initial determination and the final determination, wherein the detection of the event triggers, at least in part, the making of the final determination regarding the authentication type.
6 . The system of claim 1 , wherein the operations further comprise:
determining a readiness condition for the request for service.
7 . The system of claim 6 , wherein the authentication of the user is initiated at least in part based on the readiness condition for the request for service.
8 . A method, comprising:
receiving, at a user device, an indication of a request for service initiated by a user, wherein the request for service involves an authentication of the user, wherein the authentication is dependent on an authentication factor at the user device being successfully completed within a particular time period after the authentication is initiated;
upon receiving the indication of the request for service, making an initial determination regarding an authentication type to be initiated for authenticating the user; and
upon subsequently detecting engagement of the user, initiating the authentication of the user, within the particular time period, based on the engagement of the user and the authentication type.
9 . The method of claim 8 , wherein the authentication type of the initial determination is a first authentication type corresponding to a first level of strictness.
10 . The method of claim 9 , further comprising:
upon subsequently detecting engagement of the user, making a final determination regarding the authentication type.
11 . The method of claim 10 , wherein the final determination selects a second authentication type distinct from the first authentication type, the second authentication type corresponding to a second level of strictness higher than the first level of strictness.
12 . The method of claim 10 , further comprising:
detecting, at the user device, an event relating to the user that occurred between the initial determination and the final determination, wherein the detection of the event triggers, at least in part, the making of the final determination regarding the authentication type.
13 . The method of claim 8 , further comprising:
determining a readiness condition for an application that received the request for service, and wherein the authentication of the user is initiated at least in part based on the readiness condition for the application.
14 . A non-transitory machine-readable medium having instructions stored thereon that are executed by a computer system to perform operations comprising:
receiving an indication of a request for service initiated by a user, wherein the request for service involves an authentication of the user, and wherein the authentication of the user is dependent on an authentication challenge at a device of the user being successfully completed within a particular time period after the authentication is initiated;
upon receiving the indication of the request for service, making an initial determination regarding an authentication type to be initiated for authenticating the user;
subsequently detecting engagement of the user with the device of the user; and
upon detecting the engagement of the user, initiating the authentication of the user, within the particular time period, based on the engagement of the user and the authentication type.
15 . The non-transitory machine-readable medium of claim 14 , wherein the authentication type of the initial determination is a first authentication type corresponding to a first level of strictness.
16 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:
upon subsequently detecting engagement of the user, making a final determination regarding the authentication type.
17 . The non-transitory machine-readable medium of claim 16 , wherein the final determination selects a second authentication type distinct from the first authentication type, the second authentication type corresponding to a second level of strictness higher than the first level of strictness.
18 . The non-transitory machine-readable medium of claim 16 , wherein the operations further comprise:
detecting, at the device of the user, an event relating to the user that occurred between the initial determination and the final determination, wherein the detection of the event triggers, at least in part, the making of the final determination regarding the authentication type.
19 . The non-transitory machine-readable medium of claim 14 , wherein the operations further comprise:
determining a readiness condition for an application that received the request for service.
20 . The non-transitory machine-readable medium of claim 19 , wherein the authentication of the user is initiated at least in part based on the readiness condition for the application.