公开(公告)号：GB2524010A

公开(公告)日：2015-09-16

申请号：GB201404187

申请日：2014-03-10

Applicant: IBM

Inventor： DUFFELL JOHN ,  MARLAND SAM ,  PIPES STEPHEN

IPC: H04L29/06 ,  G06F21/31

Abstract: A user apparatus (1) sends, via a network (7), a request to access a computer system (3) comprising a plurality of services and a plurality of authentication levels. The system (3) negotiates with a distributed authentication provider (5) to determine a risk associated with the user request and a multi-level authentication scheme for the user. The system then redirects the user to the authentication provider for authentication according to the multi-level scheme, which may involve input by the user of one or more passwords and other identifiers including biometric identification The user is provided with access to the requested service if authentication is successful, which may be notified from the authentication provider to the system using a pre-agreed shared secret associated with the respective authentication level.