CUMULATIVE AUTHENTICATION FOR STEP-UP INCREASED AUTHENTICATION FACTORS

摘要

Techniques are disclosed for providing an authentication service that performs authentication of users on behalf of a relying party. The authentication service receives authentication requirements from the relying party and compares those requirements with authentication capabilities of the user and user equipment. If the authentication requirements are met, the authentication service may perform authentication using the corresponding authentication factors. If the available authentication factors are insufficient or the user fails authentication using the authentication factors used by the authentication service, the relying party may be notified that authentication failed. Upon successful authentication, the authentication service notifies the requiring party that the user has been authenticated.

主权项

1. A system for authenticating a user to a relying party, comprising:
one or more processors; and memory coupled to the one or more processors on which are stored instructions, comprising instructions that when executed cause at least some of the one or more processors to:
receive a set of authentication requirements from a relying party;compare the set of authentication requirements with a set of available authentication factors for a user device;select a set of candidate authentication factors corresponding to the set of authentication requirements;authenticate the user on the user device using the candidate authentication factors; andindicate success or failure of the authentication.