Methods, devices, and mediums associated with security access requested on an as-needed basis

摘要

In one example, a network device may be configured to authenticate a user based on a first pre-shared secret associated with a first login request as a condition to granting the user limited access. The network device may be configured to determine whether a received second request for the user is associated with an additional level of access. The network device may be configured to, in response to determining that the second request is associated with the additional level of access, authenticate the user based on a second pre-shared secret as a condition to granting the user the additional level of access.

主权项

1. An apparatus comprising memory having instructions stored thereon that, in response to execution by a processing device, cause the processing device to perform operations comprising,
authenticating a user based on a first pre-shared secret associated with a first login request as a condition to granting the user limited access to a resource, wherein the first pre-shared secret is associated with the user; after granting the user the limited access to the resource, receiving a second request for the user, wherein the second request is received over a first communication path; determining whether the second request corresponds to an additional level of access to the resource; and in response to determining that the second request corresponds to the additional level of access to the resource, authenticating the user based on a second pre-shared secret as a condition to granting the user the additional level of access to the resource, wherein the additional level of access includes an access privilege that is not included in the grant of the limited access, wherein the second pre-shared secret is associated with the user, and wherein the second pre-shared secret is different than the first pre-shared secret; wherein granting the additional level of access to the resource further comprises transmitting control access information over a second communication path that is different than the first communication path.