Abstract: Methods performed by an identity provider system, a service provider system and a user device are provided. The identity provider system performs an authentication process to confirm an identity of a user. In a case that the identity of the user is confirmed by the authentication process, the identity provider system determines a portion of resources made available at the service provider system that the user is allocated permission to access and generates a permission indication. The permission indication defines a portion of a structure of the resources corresponding to the portion of the resources which the user is permitted to access. The user can access resources made available by the service provider system which are both requested by user device via a resource request and permitted to be accessed by the user according to the permission indication.

Abstract: A method of verifying, by a processing system, whether a user of a device corresponds to a previously authenticated user. The processing system has access to a first image and a second image. The first image is an image of an identity document comprising an image of the previously authenticated user. The second image is an image captured by the device. The method comprises: comparing said first image to said second image, whereby to determine whether they are images of the same user; and, in the event that it is determined that the first and second images are images of the same user: encoding one of the first and second images using a one-way encoding algorithm; and, storing the encoded image as a validated image of the previously authenticated user.

Abstract: A method of verifying, by a processing system, whether a user of a device corresponds to a previously authenticated user. The processing system has access to a first image and a second image. The first image is an image of an identity document comprising an image of the previously authenticated user. The second image is an image captured by the device. The method comprises: comparing said first image to said second image, whereby to determine whether they are images of the same user; and, in the event that it is determined that the first and second images are images of the same user: designating one of the first and second images as a higher quality image; and, storing said designated image as a validated image of the previously authenticated user.

Abstract: A method of verifying whether a user of a device corresponds to a previously authenticated user is disclosed. In some embodiments, a processing system has access to a first image and a second image. The first image is of an identity document comprising an image of the previously authenticated user and data identifying the authenticated user. The identity document has been validated by a trusted authority. The second image is an image captured by the device. The first image is compared to said second image to determine whether they are images of the same user. One of the images is designated as a higher quality image, and stored as a validated image along with an identifier for the previously authenticated user. The validated image may be used in a subsequent verification event. The identifying data is be stored with the identifier, whereby to enable said data to be retrieved in a subsequent verification event.