Acceptto Corporation

Secureauth Corporation

Other

Nahal Shahidzadeh

Haitham H Akkary

Shahrokh Shahidzadeh

Frank Stefan Ulbrich

Mani Malekmohammadi

Seyedamir Karimikho

Christopher Clifford

Aspects of the disclosure provide techniques for using behavior based information for providing and restricting access to a secure website, or computer network and its assets to a user. Components of the system may include the following. Client remote computing device, network and browser unique attribute data collection and fingerprinting. Method for capturing user habits and fingerprinting with ability to detect abnormalities through AIML using mobile and wearable device applications. System for detection of normality of user behavior based on habits, and cyber transactions, device access and determining a confidence score associated with each transaction. Method for calculating individual transaction risk based on contextual factors such as user behavior, device, browser and the network traffic and request for authentication by account owner when risk greater than allowed threshold. Method and system to identify user device, browser, and behavior unique attributes, storing and later matching to infer change upon consequent transactions and measuring transaction risk through a search and match against classified set of static and dynamic attributes using a user, browser traffic, device search and match engine.

System and method for using user context and behavior for providing access to a secure computer network

A system and method for biobehavioral identification may include a user device, a secure system/client device, and a server. The elements of the system work together to monitor the biologic features (e.g., fingerprints, pupils, or the like) and behavior (e.g., wake time, exercise time, location) to verify the authenticity of a user requesting access to a database and/or secure facility.

System and method for secure pair and unpair processing using a dynamic level of assurance (LOA) score

A system and method for authorizing a Client Device requested access, the method comprising: forming a proximity enforced Bluetooth&#xae; binded communication link between the Client Device and a Level of Assurance (LOA) Provider; providing a login screen to a user entity at the Client Device from a Relying Party (RP) Services Application; receiving login information from the user entity; obtaining identity of the user entity on the LOA Provider using a biometric information of the user entity; sending the biometric information, a private key and contextual identifiers to an LOA Server; and identifying the user entity at the LOA Server using the biometric information, the private key and the contextual identifiers and the Client Device in determining whether to grant access to the RP Services Application.

System and method for bluetooth proximity enforced authentication

A computer implemented system and method for a consumer based access control for identity information. The method and system involve receiving at an identity organization a request for registration and verification of the identity information and configuring a specific user selected policy for notification and authorization of such identity requests of a desired (or intended) identity service (or plurality of services) associated with the targeted user identification. Next, processing the request in a Joint Identity Information Service Network (JIISN) server framework for the detection and verification of a request against an active directory of users or organizations who have opted in for notification; computing the required action based on the configuration of the policies in one of the group consisting of: a JISN policy engine and a user remote mobile control system; communicating with a real time authorization server (e.g., eGuardian&#x2122;) which in part identifies the registered authorizing party including delivering notification for the identity services requested by the user based on the JISN policy engine setting through the agency or organization Identity System Service (e.g., It'sMe&#x2122; service) and alternatively user mobile rules; automatic rejection (or lock down of the Identity or data), automatic approval or real time authorization delivering the request authorization through a secure communication network back to a joint identity network service comprised of a plurality of government or private identity and credit report services; and determining if a user is to be verified using a second or multi factor authenticating service.

Method and system for identity verification and authorization of request by checking against an active user directory of identity service entities selected by an identity information owner

A system and method for secure authentication of user entity and user entity device identity. The system and method described herein allows an identity to be continuously proven because of user entity's behavior and their biometrics. With all the fraud and risk that exists today, if someone has a user entity's driver's license they can do a lot of harm. A primary identity provider passes user contextual and behavioral information to third party secondary identity providers to allow risk based continuous authentication and step up post-authorization authentication or termination of session as required upon detection of an anomaly.

System and method for continuous authentication of user entity identity using context and behavior for real-time modeling and anomaly detection

System and method to identify user and device behavior abnormalities to continuously measure transaction risk

A system and method for authentication policy orchestration may include a user device, a client device, and a server. The server may include a network interface configured to be communicatively coupled to a network. The server may further include a processor configured to obtain, from a client device via the network, a transaction request for a transaction, determine an authorization requirement for the transaction request based, at least in part, on a plurality of authorization policies, individual ones of the plurality of authorization policies being separately configurable by at least one of a relying party and an authorizing party, and complete the transaction based on the authorization requirement having been met.

System and method for multi-transaction policy orchestration with first and second level derived policies for authentication and authorization

A system and method for issuing an authorization token and performing real time multi-factor authentication using a unique device or devices to enable authorization to perform secure services for an online service based on desired on demand level of assurance. The level of assurance of the authentication may be on a distributed and dynamic authenticated system. This dynamic system delivers on-demand level of assurance depending on the Relying Party's (RP) requirements, orchestrated by policies set by the RP and/or the consumer (or user agent), and possibly augmented by other regulatory requirement based on a fine-grain control requirement of the authentication token(s). The level of assurance throttles up and down depending each transaction authentication requirement.

System and method for on-demand level of assurance depending on a predetermined authentication system

Method and system for consumer based access control for identity information

A system and method for biobehavorial identification may include a user device, a secure system/client device, and a server. The elements of the system work together to monitor the biologic features (e.g., fingerprints, pupils, or the like) and behavior (e.g., wake time, exercise time, location) to verify the authenticity of a user requesting access to a database and/or secure facility.

System and method of biobehavioral derived credentials identification

Authentication and authorization through derived behavioral credentials using secured paired communication devices

System and method to identify abnormalities to continuously measure transaction risk

A system and method for secure authentication of user entity and user entity device identity. The system and method described herein allows an identity to be continuously proven because of user entity's behavior and their biometrics. With all the fraud and risk that exists today, if someone has a user entity's driver's license they can do a lot of harm. A primary identity provider receives user contextual and behavioral information from third party secondary identity providers to allow risk based continuous authentication and step up post-authorization authentication or termination of session as required upon detection of an anomaly by third party identity provider.

Growing community of inventors

Portland, OR, United States of America

Nahal Shahidzadeh