Non-repeatable challenge-response authentication
User data is aggregated across a plurality of electronic communication channels and domains. An online system initially authenticates a user for access to the online system over a network. The online system provides a user identifier for the user to an authentication service. The authentication service generates a non-repeatable challenge from the aggregated user data for the user identifier and provides the non-repeatable challenge to the online system. The online system provides the challenge to the user and receives a response from the user. The online system provides the response to the authentication service and the authentication sends a success or failure back to the online system based on the response to the challenge, and based on the success or failure the online system makes a final determination for authenticating the user for accessing to the online system.
1. A system, comprising:
a hardware processor;
an authentication service configured to: (i) execute on the hardware processor; (ii) generate non-repeatable user-specific and temporal-based challenge-response questionnaires as requested by an authentication system for users based on recent electronically tracked activities for the users, wherein the users are already authenticated for a first factor authentication from an authentication mechanism of an online system, wherein the authentication mechanism is interfaced to the authentication system to request a second factor authentication on the user, and wherein the recent electronically tracked activities are gathered from a plurality of different communication channels associated with the user's recent electronically tracked activities, and wherein at least one of the different communication channels includes a social media communication channel, iii) provide indications to the authentication system as to whether proposed responses by the users were correct or incorrect, and providing the indications by the authentication system to the online system as second factor authentication results for the users, wherein when an indication for a given user is incorrect, asking the given user whether the given user would like to try another set of challenge-response questionnaire and when selected by the given user iterate back to (ii) for a different non-repeatable user-specific and temporal-based challenge-response questionnaire and check a different proposed response by the given user and continue the iterations for a preset number of iterations unless the given user correctly answers a given non-repeatable user-specific and temporal-based challenge response questionnaire during a given iteration, and wherein the preset number of iterations is defined in an authentication policy set by the online system, wherein each of the user-specific and temporal-based challenge-response questionnaires comprises questions based on recent in time transaction activity associated with each user.
2. The system of claim 1 , wherein the authentication service is configured to: iv) perform a second factor authentication for the authentication system, wherein the authentication system performs a first factor authentication against the users.
3. The system of claim 1 , the authentication is configured to one of:
interface as a Software as a Service (SaaS) with the authentication system,
and integrate within a processing environment of an online system associated with the authentication system.