System and method for pool-based identity authentication for service access without use of stored credentials

摘要

A computer-implemented system and method for pool-based identity authentication for service access without use of stored credentials is disclosed. The method in an example embodiment includes providing provisioning information for storage in a provisioning repository; receiving a service request from a service consumer, the service request including requestor identifying information; generating an authentication request to send to an authentication authority, the authentication request including requestor identifying information; receiving validation of an authenticated service request from the authentication authority; and providing the requested service to the service consumer.

主权项

1. A method comprising:
receiving a service request from a service consumer, the service request including requestor identifying information; obtaining an authentication request to send to an authentication authority, the authentication request including information from the service request; verifying the information from the service request using independently verifiable data corresponding to the service consumer, the independently verifiable data being obtained independently of a service provider providing the requested service; receiving validation of an authenticated service request; and providing the requested service to the service consumer.