Patent ID: 8413221
Filing Date: 2013-04-02
Classification: H04L

Abstract:
1. A user authentication method comprising the steps of: receiving a request from a relying party for delegated authentication information associated with a particular user, the delegated authentication information having the property that the user can be presently authenticated based on such information; determining a level of trust associated with the relying party; and providing the delegated authentication information to the relying party responsive to the request only if the relying party has a sufficient level of trust, so as to permit the relying party to authenticate the user based on the delegated authentication information; wherein each of the steps is performed at least in part by one or more processing devices; and wherein the step of determining a level of trust associated with the relying party further comprises determining which of a plurality of trust levels is associated with the relying party, the plurality of trust levels corresponding to respective ones of a plurality of different types of delegated authentication information, and the step of providing the delegated authentication information to the relying party further comprises providing delegated authentication information of a particular one of the plurality of different types to the relying party based on the particular one of the plurality of trust levels determined to be associated with the relying party.