Abstract: A method includes, in response to receiving a request to authenticate a user, and retrieving a predefined security message created by the user and an indication of a preferred communication channel selected by the user, wherein the request to authenticate the user is sent to the server over a first communication channel that is different than the preferred communication channel. The method also includes transmitting, by the one or more processors and over the preferred communication channel, the predefined security message to a mobile device associated with the user for verification by the user. The method additionally includes authenticating the user using a secret password received from the user after transmitting the predefined security message.

Abstract: Techniques are disclosed relating to authenticating a user via a login screen. In one embodiment, a computer system displays a login screen having an arrangement of input fields where each input field is operable to receive a character. In some embodiments, the computer system receives a request from a user to access the computer system. The request may include a first passcode having characters input into a first subset of the input fields. The computer system then verifies the first passcode against a second passcode of an authorized user. The verifying may include comparing characters of the first passcode with characters of the second passcode and determining whether the first subset of input fields matches a second subset of the input fields used by the authorized user to input characters. Based on the verifying, the computer system may provide the user with access to the computer system.

Abstract: Various methods, apparatus, computer program products embodied on computer-readable storage mediums, and systems of providing alertness-based authorization include determining the alertness of a user and authorizing access permissions for that user based on the determined alertness. Although the user is associated with access permissions that are predefined, the access permissions actually authorized for that user are distinct from the predefined access permissions with which the user is associated.