公开(公告)号：US20170118225A1

公开(公告)日：2017-04-27

申请号：US15400876

申请日：2017-01-06

Applicant: Facebook, Inc.

Inventor： Ryan McGeehan ,  Lev Timourovich Popov ,  Christopher William Palow ,  Robert J. Read ,  Pedram Keyani

IPC: H04L29/06

CPC classification number: H04L63/107 ,  G06F21/316 ,  G06F2221/2111 ,  H04L63/08 ,  H04L63/1483

Abstract: User sessions are authenticated based on locations associated with a user account used for sending a request for creating a session. Examples of locations of a source of a request include a geographical location, a network address, or a machine cookie associated with a device sending the request. Locations of the request are compared with stored safe locations associated with the user account and a suspiciousness index is determined for the session. The level of authentication required for the session is determined based on the suspiciousness index. Locations are associated with a reputation based on past history of sessions originating from the locations. A location associated with a history of creating suspicious session is considered an unsafe location. Reputation of the location originating the session is used to determine the level of authentication required for the session.

公开(公告)号：US09853983B2

公开(公告)日：2017-12-26

申请号：US15400876

申请日：2017-01-06

Applicant: Facebook, Inc.

Inventor： Ryan McGeehan ,  Lev Timourovich Popov ,  Christopher William Palow ,  Robert J. Read ,  Pedram Keyani

IPC: H04L29/06

CPC classification number: H04L63/107 ,  G06F21/316 ,  G06F2221/2111 ,  H04L63/08 ,  H04L63/1483

Abstract: User sessions are authenticated based on locations associated with a user account used for sending a request for creating a session. Examples of locations of a source of a request include a geographical location, a network address, or a machine cookie associated with a device sending the request. Locations of the request are compared with stored safe locations associated with the user account and a suspiciousness index is determined for the session. The level of authentication required for the session is determined based on the suspiciousness index. Locations are associated with a reputation based on past history of sessions originating from the locations. A location associated with a history of creating suspicious session is considered an unsafe location. Reputation of the location originating the session is used to determine the level of authentication required for the session.