Abstract: A method comprises an authentication agent receiving a communications protocol message from a login agent of a client attempting to login to a target system. The authentication agent determines a login metric associated with the protocol message. The login metric comprises a latency, network, and/or data entry metric. The authentication agent receives credentials associated with an authentic client of the target system and compares the login metric with a registered metric associated with the authentic client. Based on the login metric comporting with the registered metric, the authentication agent continues login processing or performs a non-comporting metric action. Another method comprises the authentication agent sending a training request to the login agent, receiving a training response, determining a login metric associated with the training response, and recording the login metric among registered metrics of an authentic client. A computing system can implement the methods.

Abstract: A method comprises an authentication agent receiving a communications protocol message from a login agent of a client attempting to login to a target system. The authentication agent determines a login metric associated with the protocol message. The login metric comprises a latency, network, and/or data entry metric. The authentication agent receives credentials associated with an authentic client of the target system and compares the login metric with a registered metric associated with the authentic client. Based on the login metric comporting with the registered metric, the authentication agent continues login processing or performs a non-comporting metric action. Another method comprises the authentication agent sending a training request to the login agent, receiving a training response, determining a login metric associated with the training response, and recording the login metric among registered metrics of an authentic client. A computing system can implement the methods.