Patent ID: 8935808
Filing Date: 2015-01-13
Classification: H04L

Abstract:
1. A method comprising: receiving, by a computing device, a request from a user for access to a computer protected resource; determining, by the computing device, a first plurality of user attributes and a second plurality of user attributes needed to access the computer protected resource based on a first context and a second context of the request, respectively; querying an authentication broker for first identity service provider information associated with the user; establishing, on-demand, a trust relationship with a first identity service provider specified in the first identity service provider information associated with the user; requesting the first identity service provider to authenticate a requested user attribute, wherein the requested user attribute comprises a first attribute from the first plurality with the first context and a second attribute from the second plurality with the second context of the user; receiving a first authentication response from the first identity service provider, wherein the first authentication response comprises a corresponding level of assurance associated with the requested user attribute; and determining whether to grant access to the computer protected resource based at least in part on the first authentication response.