Abstract: A processing device in an illustrative embodiment includes a processor coupled to a memory and is configured to receive user credentials from a user device in conjunction with an access request, to apply one or more automated tests in order to determine one or more device identifiers of the user device, to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers, and to grant or deny the access request based at least in part on the risk score.

Abstract: A processing device in an illustrative embodiment comprises a processor coupled to a memory and is configured to receive user credentials from a user device in conjunction with an access request, to apply one or more automated tests in order to determine one or more device identifiers of the user device, to generate a risk score for the access request based at least in part on the received user credentials and the one or more determined device identifiers, and to grant or deny the access request based at least in part on the risk score. As one example, an initial risk score is generated for the access request without utilizing the one or more determined device identifiers, and responsive to the initial risk score being above a specified threshold, the one or more determined device identifiers are utilized to generate a modified risk score that is used to grant or deny the access request.

Abstract: There are disclosed techniques for determining whether to establish a call in a click-to-call environment. In one embodiment, there is disclosed a method, comprising the step of receiving a communication resulting from an interaction between a user and a click-to-call feature. The method also comprises the step of performing an analysis of the communication to determine a risk in connection with the communication. The method further comprises determining whether to establish a call between the user and a helper associated with the click-to-call feature based on the risk in connection with the communication.

Abstract: A technique performs authentication with an external device. The technique involves receiving, by electronic circuitry, a messaging command. The technique further involves providing, by the electronic circuitry, a message to the external device in response to the messaging command. The message includes message fields which store message operating parameters e.g., Hypertext Transfer Protocol (HTTP) header fields containing HTTP operating parameters to form part of an HTTP transaction. The message fields of the message are arranged in a particular order to match an expected order during an order comparison operation performed by the external device to gauge authenticity of the message source. If the particular order matches the expected order, there is lower risk that the message source is fraudulent. However, if the particular order does not match the expected order, there is higher risk that the message source is fraudulent.

Abstract: A technique detects mobile device emulation. The technique involves identifying, by processing circuitry, a user apparatus for mobile device emulation detection. The technique further involves collecting, by the processing circuitry, motion sensor data from the identified user apparatus (e.g., samples of accelerometer attributes, gyroscopic attributes, gravity attributes, etc. over multiple time periods). The technique further involves performing, by the processing circuitry, a motion sensor data analysis operation based on the collected motion sensor data. A result of the motion sensor data analysis operation indicates whether the identified user apparatus is a physical mobile device or an emulated mobile device.

Abstract: A method includes (a) receiving an authentication request from a user seeking access to a protected resource, (b) in response, generating a set of one or more face images, each face image having a facial expression score for a particular emotion associated with that face image, the facial expression scores being specific to the user, (c) displaying each face image of the set to the user together with a request for the user to score that face image for the particular emotion associated with that face image, (d) in response, receiving a user score for that face image, (e) comparing the received user score for each face image of the set to the respective facial expression score for the particular emotion associated with that face image, yielding a set of results, and (f) selectively providing access to the protected resource in response to each of the results being affirmative.

Abstract: A technique perform authentication. The technique involves receiving an authentication request from a user operating a client apparatus (e.g., the user's smart phone). The technique further involves performing, in response to the authentication request, an analysis of a set of credentials obtained from the client apparatus. The set of credentials includes an authentication factor acquired by the client apparatus from an electronic card in possession of the user (e.g., an integrated circuit credit card). The electronic card is separate from the client apparatus. The technique further involves outputting, based on the analysis of the set of credentials, an authentication result indicating whether the processing circuitry deems the user operating the client apparatus to be authentic.

Abstract: A method includes (a) receiving, by the authentication server device, an authentication request from a requesting device in the name of a particular user, the requesting device being a mobile computer seeking access to the protected resource in the name of the particular user, (b) in response to receiving the authentication request, verifying that the requesting device is an enrolled device, the enrolled device being a mobile computer previously assigned to the particular user, (c) in response to verifying that the requesting device is equivalent to the enrolled device, remotely locking, by the authentication server device, the enrolled device, (d) receiving confirmation, by the authentication server device, that the enrolled device has been unlocked within a timeout period, and (e) in response to the authentication server device receiving confirmation that the enrolled device has been unlocked within the timeout period, providing the requesting device with access to the protected resource.