Intuit, Inc.

Robert E Lee

Douglas L Foiles

Thomas M Pigoski, Ii

Alex G Balazs

Xiaoyan C Liu-Barker

The disclosed embodiments provide a system that manages access to a computer-based resource. During operation, the system obtains a request for the computer-based resource, wherein the request identifies a user seeking access to the computer-based resource. Next, the system obtains a set of security levels for a set of identity-proofing techniques, wherein the set of security levels is based on a first set of success rates of the identity-proofing techniques in preventing fraudulent access to computer-based resources. The system then calculates an identity assurance level for the user based on the set of security levels and a second set of success rates of the user in completing one or more of the identity-proofing techniques. Upon determining that the identity assurance level of the user meets a minimum identity assurance level for accessing the computer-based resource, the system enables access to the computer-based resource in a response to the request.

Verifying a user's identity based on adaptive identity assurance levels

Disclosed are methods, systems, and articles of manufacture for implementing adaptive levels of authentication assurance according to sensitivity or criticality of information accessed or actions performed in a financial management system to enhance user experience and usability of the financial management system while providing adequate security to safeguard sensitive data. Various flow nodes are associated with one or more levels of assurance which are further associated with some authentication tokens of different authentication strengths. Users are usually first authenticated with a lower authentication strength token. Risk profiles may also be accessed to examine the users' requests for access for fraud detection or prevention purposes. As users attempt to access more sensitive data at a higher level of assurance beyond the authorized level, further authentication with higher authentication strength and involving more user efforts in completing the authentication is required before users are authorized on the higher level of assurance.

Growing community of inventors

Tempe, AZ, United States of America

Robert E Lee