Credential validation using multiple computing devices

Abstract

A tool for credential validation using multiple computing devices. The tool selects at least one challenge question. The tool selects one or more user owned devices, wherein selecting the one or more user owned devices includes querying a database for each user owned device associated with a user account. The tool selects at least one device order, based, at least in part, on a level of security desired in credential validation. The tool presents the at least one challenge question to the one or more user owned devices, wherein the at least one challenge question includes the at least one device order for returning at least one response. The tools determines whether the at least one response received from the one or more user owned devices is a correct response relative to the at least one challenge question and the at least one device order.

Description

BACKGROUND OF THE INVENTION[0001]The present invention relates generally to cyber security, and more particularly to credential validation across multiple computing devices.[0002]Some computing systems that utilize a password to authenticate a user provide the capability to reset a forgotten password if the user can correctly answer one or more private security questions, such as “What is your mother's maiden name”. While this security feature provides a way to verify the identity of the user, the security questions asked are often answered by information that is publicly available, and as such, are easily circumvented. Additionally, harvesting programs designed to gather this information from various public sources are often employed by computer hackers to obtain answers to commonly asked security questions. Therefore, the use of common security questions and answers are for the convenience of the users, and not for the security of the system.SUMMARY[0003]Aspects of an embodiment o...

AI Technical Summary

Benefits of technology

The present invention is a method and system for verifying user accounts using multiple computing devices. The method includes selecting a challenge question, choosing user-owned devices, and assigning a level of security to the devices. The challenge question is then sent to the chosen devices, and the devices' responses are determined to be correct or not. The technical effect is a more secure way of verifying user accounts through multiple devices and ensuring the proper order of challenge and response.

Problems solved by technology

Therefore, the use of common security questions and answers are for the convenience of the users, and not for the security of the system.

Images