Lexisnexis Risk Solutions, Inc.

Emc Corporation

Bryan Knauss

Yedidya Dotan

Benny Rotem

David Buchler

Peter Joseph Greene

Dean Weinert

Ayelet Avni

Matthew Robert Hathaway

Yaniv Koss

Ayelet Levin

Erez Yakoel

Elina Yaakobovich

Richard Perkett

Raanan Lidji

Systems and methods are disclosed for detecting certain online activities associated with a digital identity. A Digital Identity Network may be monitored for potentially fraudulent activities (such as new account openings and certain transactions) related to an enrolled User identification (User ID) without requiring personally identifying information (PII). Corresponding alerts may be generated and sent to inform the associated user of such suspicious activity so that fraudulent account access or transactions may be prevented.

Digital identity network alerts

A combination of target images and control images are presented to a user device for selection by the user. Based on a correct selection of images that the user either recognizes or does not recognize, the user may be authenticated. Target images have some connection to a legitimate user in a way that a legitimate user may recognize the target image. Control images have no known connection to the legitimate user, such that they would not typically be recognized by the legitimate user. The legitimacy of a user may be determined based on images selected and/or not selected, depending on accompanying instructions for selection.

Systems and methods for photo recognition-based identity authentication

Certain implementations include systems and methods for combined one-time-passcode (OTP) and knowledge-based-authentication (KBA) identity authentication. A method is provided that includes receiving a set of identity information associated with a subject; querying one or more databases; receiving personally identifiable information; producing at least one knowledge based authentication (KBA) identity proofing question having a personally identifiable correct answer; generating a unique correct one-time pass (OTP) code for the personally identifiable correct answer; generating one or more incorrect answers with corresponding incorrect codes; outputting, the at least one KBA identity proofing question; outputting the personally identifiable correct answer with the unique correct OTP code, and the one or more incorrect answers with corresponding incorrect codes; receiving a response code; comparing the response code and the unique correct OTP code; and responsive to a match between the response code and the unique correct OTP code, outputting a first indication of authentication.

Systems and methods for combined OTP and KBA identity authentication utilizing academic publication data

Systems and methods for combined OTP and KBA identity authentication

A technique manages consumer authentication. The technique involves communicating with an institutional entity to perform an authentication operation regarding a consumer. The technique further involves conveying a query to the consumer in response to the authentication operation. The query prompts the consumer to indicate whether the consumer participated in the authentication operation. The technique further involves obtaining a response to the query indicating whether the consumer participated in the authentication operation. The authentication operation is legitimate when the response indicates that the consumer participated in the authentication operation. The authentication operation is fraudulent when the response indicates that the consumer did not participate in the authentication operation. In some arrangements, the authentication operation involves knowledge-based authentication (KBA) activity. In some arrangements, the query is conveyed to the consumer through an identity protection entity which is different than the institutional entity.

Managing authentication based on contacting a consumer as soon as the consumer has performed an authentication operation

An improved technique employs knowledge-based authentication (KBA) based on data stored in a mobile apparatus. The mobile apparatus collects data from sources including email data, web browsing data, accessed YouTube video data, and GPS location data recently stored in the mobile apparatus. From such data, the mobile apparatus builds questions and stores the questions on a database on the phone. Upon receiving a request to access a resource stored in the mobile apparatus from a user, the mobile apparatus selects questions at random and ranks them according to a policy accessible to the mobile apparatus. The mobile apparatus presents the highest-ranked questions to the user. The mobile apparatus grants or rejects access to the resource based on an authentication result that the mobile apparatus generates from answers to the questions submitted by the user.

Knowledge-based authentication for restricting access to mobile devices

A method is used in authenticating using organization based information. Organization based information is analyzed for information that is suitable for use in authenticating a user. The organization based information includes employee-used information. A question is derived from the organization based information. Based on the question, a process used to authenticate a user is executed.

Authenticating using organization based information

An improved technique involves converting facts from multiple fact sources to a common data format. Along these lines, for each fact source having a source-specific format, a KBA system provides an adaptor that converts incoming facts in the source-specific format to the common data format prior to generating questions. The KBA system stores the facts in the common format in a database for subsequent access. In response to an authorization request, the KBA system then builds questions based on the facts from multiple sources in the common data format stored in the database.

Growing community of inventors

Broadlands, VA, United States of America

Bryan Knauss