System, method and computer program product for access authentication

1. A method comprising:

responsive to receiving an access request from a user for a secure resource in a first access session, logging an Internet Protocol (IP) address of the access request and transmitting a uniform resource locator (URL) to the user via an electronic mail message;

responsive to receiving a request for the URL in a second access session, logging an IP address corresponding to the URL request;

comparing the IP address logged from the first access session with the IP address logged from the second access session; and

responsive to verifying that the IP address corresponding to the first access session matches the IP address of the second access session, providing access to the secure resource.

2. The method of claim 1 , further comprising:

responsive to receiving the access request, querying the user for an electronic mail address; and

responsive to receiving an electronic mail address from the user, verifying the electronic mail address received from the user with a stored electronic mail address corresponding to the user.

3. The method of claim 1 , further comprising:

responsive to transmitting the URL to the user, logging a timestamp for the URL transmission;

responsive to receiving the request for the URL, logging a timestamp for the URL request; and

responsive to verifying that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period, providing access to the secure resource.

4. The method of claim 1 , further comprising:

randomly generating a token; and

combining the token with a character string to form the URL.

5. The method of claim 1 , further comprising:

generating a query to the user based on data received from a third party corresponding to the user; and

responsive to validating a response to the query received from the user, providing access to the secure resource.

6. The method of claim 1 , further comprising:

responsive to transmitting the URL to the user, logging a timestamp for the URL transmission;

responsive to receiving the request for the URL, logging a timestamp for the URL request;

verifying that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period;

generating a query to the user based on data received from a third party corresponding to the user; and

verifying that a response to the query received from the user corresponds to the data received from the third party.

7. The method of claim 6 , further comprising:

responsive to receiving the access request, querying the user for an electronic mail address; and

responsive to receiving an electronic mail address from the user, verifying the electronic mail address received from the user with a stored electronic mail address corresponding to the user.

8. A system comprising:

a processing unit having access to a secure resource; and

an authentication module configured to:

responsive to receiving an access request from a user for the secure resource in a first access session, log an Internet Protocol (IP) address of the access request and transmit a uniform resource locator (URL) to the user via an electronic mail message;

responsive to receiving a request for the URL in a second access session, log an IP address corresponding to the URL request;

compare the IP address logged from the first access session with the IP address logged from the second access session; and

responsive to verifying that the IP address corresponding to the first access session matches the IP address of the second access session, authorize access to the secure resource.

9. The system of claim 8 , wherein the authentication module is configured to:

responsive to receiving the access request, query the user for an electronic mail address; and

responsive to receiving an electronic mail address from the user, verify the electronic mail address received from the user with a stored electronic mail address corresponding to the user.

10. The system of claim 8 , wherein the authentication module is configured to

responsive to transmitting the URL to the user, log a timestamp for the URL transmission;

responsive to receiving the request for the URL, log a timestamp for the URL request; and

verify that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period.

11. The system of claim 8 , wherein the authentication module is configured to:

randomly generating a token; and

combine the token with a character string to form the URL.

12. The system of claim 8 , wherein the authentication module is configured to:

generate a query to the user based on data received from a third party corresponding to the user; and

verify that a response to the query received from the user corresponds to the data received from the third party.

13. The system of claim 8 , wherein the authentication module is configured to:

responsive to transmitting the URL to the user, log a timestamp for the URL transmission;

responsive to receiving the request for the URL, log a timestamp for the URL request;

verify that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period;

generate a query to the user based on data received from a third party corresponding to the user; and

verify that a response to the query received from the user corresponds to the data received from the third party.

14. The system of claim 13 , wherein the authentication module is configured to:

responsive to receiving the access request, query the user for an electronic mail address; and

responsive to receiving an electronic mail address from the user, verify the electronic mail address received from the user with a stored electronic mail address corresponding to the user.

15. A computer program product for having a computer program embodied on a computer-readable storage medium, the computer program executable to:

responsive to receiving an access request from a user for the secure resource in a first access session, log an Internet Protocol (IP) address of the access request and transmit a uniform resource locator (URL) to the user via an electronic mail message;

responsive to receiving a request for the URL in a second access session, log an IP address corresponding to the URL request;

compare the IP address logged from the first access session with the IP address logged from the second access session; and

responsive to verifying that the IP address corresponding to the first access session matches the IP address of the second access session, authorize access to the secure resource.

16. The computer program product of claim 15 , wherein the computer readable program is configured to:

responsive to transmitting the URL to the user, log a timestamp for the URL transmission;

responsive to receiving the request for the URL, log a timestamp for the URL request; and

verify that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period.

17. The computer program product of claim 15 , wherein the computer readable program is configured to:

generate a query to the user based on data received from a third party corresponding to the user; and

verify that a response to the query received from the user corresponds to the data received from the third party.

18. The computer program product of claim 15 , wherein the computer readable program is configured to:

randomly generating a token; and

combine the token with a character string to form the URL.

19. The computer program product of claim 15 , wherein the computer readable program is configured to:

responsive to transmitting the URL to the user, log a timestamp for the URL transmission;

responsive to receiving the request for the URL, log a timestamp for the URL request;

verify that a difference between the timestamp for the URL transmission and the timestamp for the URL request is within a predetermined time period;

generate a query to the user based on data received from a third party corresponding to the user; and

verify that a response to the query received from the user corresponds to the data received from the third party.

20. The computer program product of claim 19 , wherein the computer readable program is configured to:

responsive to receiving the access request, query the user for an electronic mail address; and

responsive to receiving an electronic mail address from the user, verify the electronic mail address received from the user with a stored electronic mail address corresponding to the user.