Abstract: In an embodiment, a method includes receiving, by a processor and from a user device associated with a user, a request to access a service associated with a first protocol. The method further includes receiving, by the processor, a virtual credential of the user authorized by an authorizing entity. The virtual credential is compliant with a second protocol different than the first protocol. The method further includes verifying, by the processor, that the virtual credential is authorized by the authorizing entity. The method further includes transforming, by the processor, the virtual credential to generate a transformed virtual credential compliant with the first protocol. The method further includes sending, by the processor, a representation of the transformed virtual credential to the service. The method further includes verifying, by the processor and after the sending, that the transformed virtual credential is valid.

Abstract: In an embodiment, a method includes receiving, by a processor and from a user device associated with a user, a request to access a service associated with a first protocol. The method further includes receiving, by the processor, a virtual credential of the user authorized by an authorizing entity. The virtual credential is compliant with a second protocol different than the first protocol. The method further includes verifying, by the processor, that the virtual credential is authorized by the authorizing entity. The method further includes transforming, by the processor, the virtual credential to generate a transformed virtual credential compliant with the first protocol. The method further includes sending, by the processor, a representation of the transformed virtual credential to the service. The method further includes verifying, by the processor and after the sending, that the transformed virtual credential is valid.

Abstract: Methods and systems to synthesize information from multiple discrete and unrelated documents, and from the synthesized information verify the identity of an individual to a high degree of trust are described. Information is adaptively synthesized from varied documents, and through generation of document confidence scores. Enrollment requirements for a trusted identification are evaluated in a real-time environment. The enrollment requirements may represent a minimum level of documentation required to sufficiently verify an individual's true identity in order to permit issuance of the trusted identification. Once sufficient documentation has been obtained and validated to meet or exceed enrollment requirements, the documentation (including any original source copies of any documentation) is securely submitted to the trusted identification issuing authority.

Abstract: Methods, systems, and apparatus, including computer-readable media, for authentication protocol management. In some implementations, a computing device receives data indicating a current context of a client device associated with a particular user. The computing device accesses first authentication data that demonstrates that the particular user has been authenticated using a first authentication protocol. The computing device determines that the particular user is likely to request access to a secured resource based on the current context of the client device and data indicating one or more previous resource accesses by the particular user. The computing device determines that access to the secured resource involves authentication using a second authentication protocol that is different from the first authentication protocol.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, for pre-boot network-based authentication. In some implementations, a computing device enters a UEFI environment upon powering on the computing device. While in the UEFI environment, the computing device restricts booting of an operating system of the computing device, accesses a signed certificate corresponding to a particular user, sends a verification request to a server system over a communication network, and receives a verification response from the server system over the communication network. In response to receiving the verification response, the computing device (i) enables the operating system to boot and (ii) verifies the identity of the particular user to the operating system such that the operating system logs in the particular user without requiring further proof of identity for the particular user.