Patent ID: 9548997
Date: 2017-01-17
CPC Classifications: H04L

Claim:
1. An apparatus comprising: at least one memory device; at least one processor coupled to the at least one memory device and configured to perform, based on instructions stored in the at least one memory device: receiving a service request over a first service channel from a user device, wherein the first service channel is one of a plurality of service channels and the service request includes an authentication token and a received set of attributes of the user device; extracting, from the received authentication token, a signed set of attributes of an authenticated device when the authentication token was created; comparing the received set of attributes with the signed set of attributes to obtain an authentication indicator; when the authentication indicator is indicative that the received set of attributes and the signed attributes do not match, denying the service request; when the authentication indicator is indicative that the received set of attributes and the signed attributes match, extracting an initial level of authentication from the authentication token, wherein the initial level of authentication is one of a plurality of authentication levels; when the initial level of authentication is not sufficient for the first service channel, generating a challenge message to the user device requesting a further authentication information based on at least one additional authenticator; determining an achieved level of authentication based on the initial level of authentication and the further authentication information; and when the achieved level of authentication is at least as great as a first target authentication level for the first service channel, continue processing the service request by the first service channel.