On demand multifactor authentication

Abstract

A domain name registrar may suggest and/or allow a user to select one or more domain names registered to the user for on demand multifactor authentication. The user may select one or more protected activities that trigger the enhanced security for the selected domain name(s). The user may also enter a plurality of authenticatees, contact information for the authenticatees and a minimum number of authenticatees required to approve the one or more protected activities. The user and/or authenticatees may also enter at least two authentication methods for each authenticatee and corresponding correct responses. The selected domain names are thus protected from the protected activities until approved by a minimum number of authenticatees using at least a first authentication method and a second authentication method selected from different groups of “what you know,” what you have” and “what you are” authentication methods.

The invention claimed is: 
     
         1 . A method, comprising:
 receiving, using a computer network, a request to execute a first protected activity on a first domain name;   determining a first plurality of authenticatees associated with the first domain name and the first protected activity, a first minimum number of authenticatees, and an authentication method for each authenticate in the first plurality of authenticatees, wherein the first minimum number of authenticatees is less than a number of the first plurality of authenticatees; and   upon receiving authentications from at least the first minimum number of authenticatees of the first plurality of authenticatees, performing the first protected activity on the first domain name.   
     
     
         2 . The method of  claim 1 , wherein the first protected activity includes removing the first domain name from a current account, changing a domain name system record for the first domain name, editing a website pointed to by the first domain name, or changing access to an email account associated with the first domain name. 
     
     
         3 . The method of  claim 1 , wherein the authentication method for a first authenticatee includes is a type of authentication including what you know based authentication, what you are based authentication, or what you have based authentication. 
     
     
         4 . The method of  claim 1 , wherein at least two authenticatees in the first plurality of authenticatees are associated with different authentication methods that must be authenticated before performing the first protected activity. 
     
     
         5 . The method of  claim 1 , further comprising the steps of:
 receiving a second protected activity for the first domain name;   receiving a selection of a second plurality of authenticatees;   receiving a second minimum number of authenticatees; and   upon receiving authentications from at least the second minimum number of authenticatees of the second plurality of authenticatees, performing the second protected activity on the first domain name.   
     
     
         6 . The method of  claim 5 , wherein the first protected activity is different from the second protected activity. 
     
     
         7 . The method of  claim 5 , wherein the first minimum number of authenticatees is a different number from the second minimum number of authenticatees. 
     
     
         8 . The method of  claim 5 , wherein the first plurality of authenticatees is different from the second plurality of authenticatees. 
     
     
         9 . A method, comprising:
 encoding, into a database and in association with a first domain name, an indication of a first protected activity, a first plurality of authenticatees, an authentication method for each authenticatee in the first plurality of authenticatees, and a first minimum number of authenticatees, wherein the first minimum number of authenticatees is less than a number of the first plurality of authenticatees; and   upon receiving authentications from at least the first minimum number of authenticatees of the first plurality of authenticatees, performing the first protected activity on the first domain name.   
     
     
         10 . The method of  claim 9 , wherein the first protected activity includes removing the first domain name from a current account, changing a domain name system record for the first domain name, editing a website pointed to by the first domain name, or changing access to an email account associated with the first domain name. 
     
     
         11 . The method of  claim 9 , wherein the authentication method for a first authenticatee includes is a type of authentication including what you know based authentication, what you are based authentication, or what you have based authentication. 
     
     
         12 . The method of  claim 9 , wherein at least two authenticatees in the first plurality of authenticatees have different authentication methods that must be authenticated before performing the first protected activity. 
     
     
         13 . The method of  claim 9 , further comprising the steps of:
 receiving a second protected activity for the first domain name;   receiving a selection of a second plurality of authenticatees;   receiving a second minimum number of authenticatees; and   upon receiving authentications from at least the second minimum number of authenticatees of the second plurality of authenticatees, performing the second protected activity on the first domain name.   
     
     
         14 . The method of  claim 13  wherein the first protected activity is different from the second protected activity. 
     
     
         15 . The method of  claim 13 , wherein the first minimum number of authenticatees is a different number from the second minimum number of authenticatees. 
     
     
         16 . The method of  claim 13 , wherein the first plurality of authenticatees is different from the second plurality of authenticatees. 
     
     
         17 . A system, comprising:
 a memory storing instructions that when executed by a processor cause the processor to perform the steps of:
 receiving, using a computer network, a request to execute a first protected activity on a first domain name; 
 determining a first plurality of authenticatees associated with the first domain name and the first protected activity and a first minimum number of authenticatees, wherein the first minimum number of authenticatees is less than a number of the first plurality of authenticatees; and 
 upon receiving authentications from at least the first minimum number of authenticatees of the first plurality of authenticatees, performing the first protected activity on the first domain name. 
   
     
     
         18 . The system of  claim 17 , wherein the first protected activity includes removing the first domain name from a current account, changing a domain name system record for the first domain name, editing a website pointed to by the first domain name, or changing access to an email account associated with the first domain name. 
     
     
         19 . The system of  claim 17 , wherein at least two authenticatees in the first plurality of authenticatees are associated with different authentication methods that must be authenticated before performing the first protected activity. 
     
     
         20 . The system of  claim 17 , wherein the processor is configured to execute the steps of:
 receiving a second protected activity for the first domain name;   receiving a selection of a second plurality of authenticatees;   receiving a second minimum number of authenticatees; and   upon receiving authentications from at least the second minimum number of authenticatees of the second plurality of authenticatees, performing the second protected activity on the first domain name.