Abstract: An endpoint group (EPG) can be stretched between the sites so that endpoints at different sites can be assigned to the same stretched EPG. Because the sites can use different bridge domains when establishing the stretched EPGs, the first time a site transmits a packet to an endpoint in a different site, the site learns or discovers a path to the destination endpoint. The site can use BGP to identify the site with the host and use a multicast tunnel to reach the site. A unicast tunnel can be used to transmit future packets to the destination endpoint. Additionally, a stretched EPG can be segmented to form a micro-stretched EPG. Filtering criteria can be used to identify a subset of the endpoints in the stretched EPG that are then assigned to the micro-stretched EPG, which can have different policies than the stretched EPG.

Abstract: Subscriber identity modules can be bound to devices and utilized for authentication. An initial or additional subscriber identity module can be bound to a user device, for instance after successful user authentication by way of an alternate mechanism. A subscriber identity module of a device can be identified, and carrier data associated with the subscriber identity module can be requested and received. A determination can be made regarding whether the subscriber identity module is linked to the device, for instance by an original linkage. A user profile can be automatically updated with the carrier data to bind the user to the user device based on the subscriber identity module when the subscriber identity module is verified to be linked to the user device. Subsequently, the subscriber identity module can be utilized as a basis for authentication.

Abstract: Provided is adaptive authentication that utilizes relational analysis, sentiment analysis, or both relational analysis and sentiment analysis to facilitate an authentication procedure. The relational analysis evaluates a transactional profile and a behavioral profile of the user. The sentiment analysis evaluates available user information that is obtained from various forms of Internet activity related to the user. A level of authentication is selectively modified based on a result of the relational analysis and/or the sentiment analysis.

Abstract: Subscriber identity modules can be bound to devices and utilized for authentication. An initial or additional subscriber identity module can be bound to a user device, for instance after successful user authentication by way of an alternate mechanism. A subscriber identity module of a device can be identified, and carrier data associated with the subscriber identity module can be requested and received. A determination can be made regarding whether the subscriber identity module is linked to the device, for instance by an original linkage. A user profile can be automatically updated with the carrier data to bind the user to the user device based on the subscriber identity module when the subscriber identity module is verified to be linked to the user device. Subsequently, the subscriber identity module can be utilized as a basis for authentication.

Abstract: Intelligent authentication is disclosed. Data associated with a request for resource access by a user is compared to values of factors related to previous resource access by the user. A score is computed based on a result of the compare. Here, the score represents a degree of likelihood the user is the user associated with the previous resource access. An authentication level can then be determined based on the score, and authentication of the user triggered at the authentication level. In one instance, the authentication can be triggered to re-authenticate a user after a user session times out.

Abstract: Provided is contextual and time sensitive out-of-band transactional signing. The transactional signing includes providing a token code in response to a request to initiate a transaction within a secure network. The request is received over a first channel and the token code is provided over a second channel. The first channel and the second channel are different channels. The transactional signing also includes evaluating a received context, wherein the context is appended to the token code. In addition, the transactional signing includes selectively allowing the transaction based on the context appended to the token code.

Abstract: Systems, methods, and other embodiments associated with multi SIM card device binding are described herein. According to one embodiment, a system includes an authentication logic configured to enable communication between an entity and a user. The user is associated with a user profile. The system further includes a carrier logic configured to identify a subscriber identity module (SIM) card of a carrier. The carrier logic also requests carrier data associated with the SIM card from the carrier. An update logic is configured to update the user profile with the carrier data.

Abstract: Intelligent authentication is disclosed. According to one embodiment, a system includes a transaction logic configured to receive transaction metadata associated with an attempted transaction. The transaction logic is also configured to identify a user attempting the attempted transaction. The system further includes an activity logic configured to access an activity log associated with the user. The activity log includes values corresponding to previous transactions made by the user and any additional information provided by 3rd party feeds. The activity logic is also configured to compare transaction metadata to the values. The system also includes an authentication logic configured to select an authentication level for the transaction based, at least in part, on the comparison.

Abstract: Provided is adaptive authentication that utilizes relational analysis, sentiment analysis, or both relational analysis and sentiment analysis to facilitate an authentication procedure. The relational analysis evaluates a transactional profile and a behavioral profile of the user. The sentiment analysis evaluates available user information that is obtained from various forms of Internet activity related to the user. A level of authentication is selectively modified based on a result of the relational analysis and/or the sentiment analysis.

Abstract: Provided is contextual and time sensitive out of band transactional signing. The transactional signing includes providing a token code in response to a request to initiate a transaction within a secure network. The request is received over a first channel and the token code is provided over a second channel. The first channel and the second channel are different channels. The transactional signing also includes evaluating a received context, wherein the context is appended to the token code. In addition, the transactional signing includes selectively allowing the transaction based on the context appended to the token code.

Abstract: Systems, methods, and other embodiments associated with intelligent authentication. According to one embodiment, a system includes a transaction logic configured to receive transaction metadata associated with an attempted transaction. The transaction logic is also configured to identify a user attempting the attempted transaction. The system further includes an activity logic configured to access an activity log associated with the user. The activity log includes values corresponding to previous transactions made by the user and any additional information provided by 3rd party feeds. The activity logic is also configured to compare transaction metadata to the values. The system also includes an authentication logic configured to select an authentication level for the transaction based, at least in part, on the comparison.

Abstract: Systems, methods, and other embodiments associated with multi SIM card device binding are described herein. According to one embodiment, a system includes an authentication logic configured to enable communication between an entity and a user. The user is associated with a user profile. The system further includes a carrier logic configured to identify a subscriber identity module (SIM) card of a carrier. The carrier logic also requests carrier data, associated with the SIM card from the carrier. An update logic is configured to update the user profile with the carrier data.

Abstract: Provided is contextual and time sensitive out of band transactional signing. The transactional signing includes providing a token code in response to a request to initiate a transaction within a secure network. The request is received over a first channel and the token code is provided over a second channel. The first channel and the second channel are different channels. The transactional signing also includes evaluating a received context, wherein the context is appended to the token code. In addition, the transactional signing includes selectively allowing the transaction based on the context appended to the token code.

Abstract: Systems, methods, and other embodiments associated with multi SIM card device binding are described herein. According to one embodiment, a system includes an authentication logic configured to enable communication between an entity and a user. The user is associated with a user profile. The system further includes a carrier logic configured to identify a subscriber identity module (SIM) card of a carrier. The carrier logic also requests carrier data associated with the SIM card from the carrier. An update logic is configured to update the user profile with the carrier data.

Abstract: Provided is adaptive authentication that utilizes relational analysis, sentiment analysis, or both relational analysis and sentiment analysis to facilitate an authentication procedure. The relational analysis evaluates a transactional profile and a behavioral profile of the user. The sentiment analysis evaluates available user information that is obtained from various forms of Internet activity related to the user. A level of authentication is selectively modified based on a result of the relational analysis and/or the sentiment analysis.

Abstract: Systems, methods, and other embodiments associated with multi SIM card device binding are described herein. According to one embodiment, a system includes an authentication logic configured to enable communication between an entity and a user. The user is associated with a user profile. The system further includes a carrier logic configured to identify a subscriber identity module (SIM) card of a carrier. The carrier logic also requests carrier data associated with the SIM card from the carrier. An update logic is configured to update the user profile with the carrier data.

Abstract: Systems, methods, and other embodiments associated with multi SIM card device binding are described herein. According to one embodiment, a system includes an authentication logic configured to enable communication between an entity and a user. The user is associated with a user profile. The system further includes a carrier logic configured to identify a subscriber identity module (SIM) card of a carrier. The carrier logic also requests carrier data associated with the SIM card from the carrier. An update logic is configured to update the user profile with the carrier data.

Abstract: Systems, methods, and other embodiments associated with intelligent authentication. According to one embodiment, a system includes a transaction logic configured to receive transaction metadata associated with an attempted transaction. The transaction logic is also configured to identify a user attempting the attempted transaction. The system further includes an activity logic configured to access an activity log associated with the user. The activity log includes values corresponding to previous transactions made by the user and any additional information provided by 3rd party feeds. The activity logic is also configured to compare transaction metadata to the values. The system also includes an authentication logic configured to select an authentication level for the transaction based, at least in part, on the comparison.