Andres Gonzalez

US Patent:

20190392448, Dec 26, 2019

Filed:

Jun 21, 2019

Appl. No.:

16/448572

Inventors:

- Purchase NY, US
Ranjita Shankar Iyer - Chappaqua NY, US
Brian Piel - Ballwin MO, US
Christopher John Merz - Wildwood MO, US
Felix Johannes Flory - Wildwood MO, US
Andres Gonzalez - Doral FL, US

International Classification:

G06Q 20/40
G06Q 20/32
H04L 29/06

Abstract:

A computer-implemented method for authenticating an online user with an access control server (ACS) is provided. The method includes receiving, at a risk-based authentication enabled (RBA-enabled) directory server, an authentication request message including authentication data, extracting, using the RBA-enabled directory server, the authentication data from the authentication request message, transmitting the extracted authentication data to an RBA engine, generating, using the RBA engine, based at least in part on the extracted authentication data, RBA result data including a risk score, a risk analysis, and at least one reason code, transmitting the RBA result data to the RBA-enabled directory server, embedding, using the RBA-enabled directory server, the RBA result data into the authentication request message to generate an enhanced authentication request message, and transmitting the enhanced authentication request message to the ACS to enable the ACS to make an authentication decision based on the RBA result data.