Intuit, Inc.

Thomas M Pigoski, Ii

Douglas L Foiles

Robert E Lee

Alex G Balazs

Xiaoyan C Liu-Barker

Edward L Farmer

Theresa M Dayog

Rajan Bansal

Mark Richard Friberg

The disclosed embodiments provide a system that manages access to a computer-based resource. During operation, the system obtains a request for the computer-based resource, wherein the request identifies a user seeking access to the computer-based resource. Next, the system obtains a set of security levels for a set of identity-proofing techniques, wherein the set of security levels is based on a first set of success rates of the identity-proofing techniques in preventing fraudulent access to computer-based resources. The system then calculates an identity assurance level for the user based on the set of security levels and a second set of success rates of the user in completing one or more of the identity-proofing techniques. Upon determining that the identity assurance level of the user meets a minimum identity assurance level for accessing the computer-based resource, the system enables access to the computer-based resource in a response to the request.

Verifying a user's identity based on adaptive identity assurance levels

A re-stacking data visualization display is generated that includes individual graphic representations of instances (virtual computing systems) used to provide a software application in a cloud computing environment. The re-stacking data visualization display shows a launch date for each instance, a termination date for the instance, an indication of the instance creation template used to generate that instance, and the base instance creation template release dates for each of the base instance creation templates. Consequently, the re-stacking policy associated with a software application offering can be readily determined by a simple examination of the re-stacking data visualization display. As a result, any potential security issues and vulnerabilities can be readily identified and addressed.

Method and system for providing visualization of instance data to identify and evaluate re-stacking policies in a cloud computing environment

A re-stacking and security vulnerability data display is generated that includes individual graphic representations of instances (virtual computing systems) used to provide a software application in a cloud computing environment. The re-stacking and security vulnerability data display shows a launch date for each instance, a termination date for the instance, an indication of an instance vulnerability score assigned to the instance, and the base instance creation template release dates for each of the base instance creation templates. Consequently, the re-stacking policy and security vulnerabilities associated with that re-stacking policy for an account can be readily determined by a simple examination of the re-stacking and security vulnerability data display. As a result, any potential security issues and vulnerabilities can be readily identified and addressed.

Method and system for providing instance re-stacking and security ratings data to identify and evaluate re-stacking policies in a cloud computing environment

Disclosed are methods, systems, and articles of manufacture for implementing adaptive levels of authentication assurance according to sensitivity or criticality of information accessed or actions performed in a financial management system to enhance user experience and usability of the financial management system while providing adequate security to safeguard sensitive data. Various flow nodes are associated with one or more levels of assurance which are further associated with some authentication tokens of different authentication strengths. Users are usually first authenticated with a lower authentication strength token. Risk profiles may also be accessed to examine the users' requests for access for fraud detection or prevention purposes. As users attempt to access more sensitive data at a higher level of assurance beyond the authorized level, further authentication with higher authentication strength and involving more user efforts in completing the authentication is required before users are authorized on the higher level of assurance.

Growing community of inventors

San Francisco, CA, United States of America

Thomas M Pigoski, Ii