Method and apparatus for providing authentication using policy-controlled authentication articles and techniques

摘要

A method and apparatus provides first or second factor authentication by providing selectability of a plurality of second factor authentication policies associated with a second factor authentication article. The first or second factor authentication article includes authentication information, such as a plurality of data elements in different cells or locations on the authentication article, which can be located by using corresponding location information. The method and apparatus provides second factor authentication based on the first or second factor authentication article by enforcing at least one of the plurality of selected authentication policies.

主权项

1. A method for providing second factor authentication comprising:
providing, by an authentication device, selectability of a plurality of second factor authentication policies associated with a second factor authentication article comprising a card containing row and column identification information and corresponding sender authentication information at row and column positions on the card to serve as response data to a challenge, to provide a second factor of user authentication; providing, based on a selected policy of the plurality of second factor authentication policies that determines a length of a challenge sent as part of a second factor authentication process, by the authentication device, second factor authentication based on received response data corresponding to sender authentication information at row and column positions on the second factor authentication article, by enforcing at least one of the plurality of the selected policies wherein at least one of the selected policies is a challenge strength policy.