US 12,074,885 B2
Dynamically-tiered authentication
Hyunsuk Han, San Ramon, CA (US); and Saverio Sgro, Mountain View, CA (US)
Assigned to LendingClub Bank, National Association, Lehi, UT (US)
Filed by LendingClub Bank, National Association, Lehi, UT (US)
Filed on Oct. 11, 2022, as Appl. No. 17/963,703.
Application 17/963,703 is a continuation of application No. 16/836,814, filed on Mar. 31, 2020, granted, now 11,470,090.
Prior Publication US 2023/0031484 A1, Feb. 2, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/105 (2013.01) [H04L 63/083 (2013.01); H04L 63/108 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A computer-executed method comprising:
generating a particular session identifier for a session of a client of an application;
wherein the application supports a plurality of authentication tiers;
wherein each authentication tier, of the plurality of authentication tiers, is associated with one or more respective authentication steps of a plurality of authentication steps;
wherein the plurality of authentication tiers includes (a) a higher-security authentication tier that allows first one or more restricted actions, and (b) a lower-security authentication tier that allows second one or more restricted actions;
authenticating the client to the higher-security authentication tier;
based on said authenticating the client to the higher-security authentication tier, maintaining, on a server device that remote from the client, authentication-tier data that identifies an authentication tier for the session by associating the particular session identifier with the higher-security authentication tier;
detecting an explicit request to downgrade the authentication tier associated with the particular session identifier;
in response to detecting the explicit request to downgrade, downgrading the authentication tier of the session by updating the authentication-tier data to associate the particular session identifier with the lower-security authentication tier;
wherein the method is performed by one or more computing devices.