Abstract: An access gateway may control access of user devices to remote computer resource systems in a multi-resource computing environment. The access gateway may determine an assurance level associated with a user of the multi-resource environment, where the assurance level is based on multiple authentication factors included in multiple previous access requests. The access gateway may receive, from a user device, an additional access request to access an additional resource system in the multi-resource environment. Based on a comparison of the assurance level with a threshold authentication level for the additional resource system, the access gateway may allow or deny access to the additional resource system. In addition, based on the comparison, the access system may request additional authentication data from the user device.

Abstract: An access gateway may control access of user devices to remote computer resource systems in a multi-resource computing environment. The access gateway may determine an assurance level associated with a user of the multi-resource environment, where the assurance level is based on multiple authentication factors included in multiple previous access requests. The access gateway may receive, from a user device, an additional access request to access an additional resource system in the multi-resource environment. Based on a comparison of the assurance level with a threshold authentication level for the additional resource system, the access gateway may allow or deny access to the additional resource system. In addition, based on the comparison, the access system may request additional authentication data from the user device.

Abstract: An access gateway may control access of user devices to remote computer resource systems in a multi-resource computing environment. The access gateway may determine an assurance level associated with a user of the multi-resource environment, where the assurance level is based on multiple authentication factors included in multiple previous access requests. The access gateway may receive, from a user device, an additional access request to access an additional resource system in the multi-resource environment. Based on a comparison of the assurance level with a threshold authentication level for the additional resource system, the access gateway may allow or deny access to the additional resource system. In addition, based on the comparison, the access system may request additional authentication data from the user device.

Abstract: According to one embodiment, an authentication tool includes a memory, an interface, and a processor. The memory stores a workflow to authenticate a user to access an application. The workflow includes a first control frame for a first authentication type and a second control frame for a second authentication type. The authentication types are different and include one of a device identification, a biometric identification, a personal identification number (PIN) identification, and a security question identification. The interface receives a request to access the application and receives a first input and a second input. The processor determines a first numerical score in response to the first input and a second numerical score in response to the second input. The processor allows the user to access the application upon a determination that the scores exceed a predetermined threshold.

Abstract: According to one embodiment, an authentication tool includes a memory, an interface, and a processor. The memory stores a workflow to authenticate a user to access an application. The workflow includes a first control frame for a first authentication type and a second control frame for a second authentication type. The authentication types are different and include one of a device identification, a biometric identification, a personal identification number (PIN) identification, and a security question identification. The interface receives a request to access the application and receives a first input and a second input. The processor determines a first numerical score in response to the first input and a second numerical score in response to the second input. The processor allows the user to access the application upon a determination that the scores exceed a predetermined threshold.

Abstract: A user may be authenticated using credentials associated with online retailers. A username and password associated with an online retailer, for example, may be submitted to a different online retailer. The different online retailer may thus use the username and password to verify the user, even though the username and password are associated with the online retailer. A single user identity, in other words, is more convenient for the user.

Abstract: A method of authenticating an entity includes associating a local identity of the entity with a global identity of the entity, the local identity being associated with a first one of a plurality of restricted access zones, associating the global identity of the entity with particular ones of the plurality of restricted access zones for granting access to the particular ones of the plurality of restricted access zones, receiving an authentication request from the entity to access a second one of the plurality of access zones where the authentication request includes the local identity of the entity, and authenticating the entity for access to the second one of the plurality of access zones responsive to receiving the authentication request when the second one of the plurality of restricted access zones is one of the particular ones of the plurality of restricted access zones that are associated with the global identity of the entity.

Abstract: A user's identity is authenticated by evaluating the identity of the user using a plurality of authentication techniques, the plurality of authentication techniques generating a plurality of numerical confidence indicators, respectively, of the identity of the user, associating a plurality of authentication technique weights with the plurality of numerical confidence indicators, respectively, and calculating a weighted combination of the respective numerical confidence indicators using the plurality of authentication technique weights to generate a composite numerical confidence indicator of the identity of the user.

Abstract: A method and an apparatus with computer readable media for creation of a common token, with at least one associated usage limitation, for authenticating a user within a multiple website environment are disclosed. The methodology employs a secured user authentication mechanism, for example, as a common token representative of the user, to be used in the authentication of a user and for performing secure online network transactions by the authenticated user in a multiple website environment. The common token can be used at a first website to perform a business, financial, or personal transaction for example; and then, the common token can be used again at a second website, a third website, etc. to perform one or more tasks on behalf of the authenticated user and within the token's usage or associated limitations.

Abstract: A user's identity is authenticated by evaluating the identity of the user using a plurality of authentication techniques, the plurality of authentication techniques generating a plurality of numerical confidence indicators, respectively, of the identity of the user, associating a plurality of authentication technique weights with the plurality of numerical confidence indicators, respectively, and calculating a weighted combination of the respective numerical confidence indicators using the plurality of authentication technique weights to generate a composite numerical confidence indicator of the identity of the user.

Abstract: A method of authenticating an entity includes associating a local identity of the entity with a global identity of the entity, the local identity being associated with a first one of a plurality of restricted access zones, associating the global identity of the entity with particular ones of the plurality of restricted access zones for granting access to the particular ones of the plurality of restricted access zones, receiving an authentication request from the entity to access a second one of the plurality of access zones where the authentication request includes the local identity of the entity, and authenticating the entity for access to the second one of the plurality of access zones responsive to receiving the authentication request when the second one of the plurality of restricted access zones is one of the particular ones of the plurality of restricted access zones that are associated with the global identity of the entity,

Abstract: An authentication management platform that enables authentication systems from various vendors to be integrated into a single service offering. The disclosed arrangement can support multiple, distinct customers and multiple primary authentication servers on a single platform. The management platform provides access only to users that enter a valid passcode comprising both: (1) a personal identification number (PIN) and (2) the current code generated by a security token card assigned to that user. The authentication management platform may be configured to be controlled and maintained by the subscriber to the system, or may be serviced/maintained by a third party service provider.