In recent years some additional authentication assurance methods have been grouped to form what some call the 4th factor of authentication. This is also called risk-based, location-based or adaptive authentication. It could also be called "somewhere you are" or "something you are doing".
The basis of this method is in establishing a rich profile of the user. This can include:
- the machine used for access;
- software used;
- time or day of accesses;
- IP address(es) used;
- what country the connection comes from, or;
- what actions the user attempts.
