CLIENT DEVICE TOKEN BASED MULTIFACTOR AUTHENTICATION

摘要

A multifactor authentication (MFA) enforcement server provides multifactor authentication services to users and existing services. During registration, the MFA enforcement server changes a user's password on an existing service to a password unknown to the user. During normal usage when the user accesses the existing service through the MFA enforcement server, the MFA enforcement server enforces a multifactor authentication enforcement policy.

主权项

1. A method performed by a multifactor authentication enforcement server comprising:
receiving login credentials for a plurality of services from a user of a client device, the login credentials including passwords known to the user; accessing each of the plurality of services and changing the passwords to new passwords unknown to the user; registering a plurality of authentication factors for use by the user to login to the multifactor authentication enforcement server, wherein at least one of the plurality of authentication factors includes verification of a smartcard chip embedded in the client device; logging in to the services using the passwords unknown to the user when the user logs in to the multifactor enforcement server; receiving access to content provided by the plurality of services; enforcing multifactor authentication policies for each of the plurality of services, wherein the multifactor authentication policies filter content provided by the plurality of services if less than all of the plurality of authentication factors are satisfied.