Patent ID: 8931064
Filing Date: 2015-01-06
Classification: H04L

Abstract:
1. A method, comprising: receiving, by a computing device, a request from a user for access to a protected computer resource on a designated computer; determining, by the computing device, a plurality of user attributes needed to access the protected computer resource; authenticating, by the computing device, a first attribute of the plurality of attributes based on a first level of assurance received from a first computer of the first identity service provider; authenticating, by the computing device, a second attribute of the plurality of attributes based on a second level of assurance received from a second computer of a second identity service provider; when the computing device requires a greater degree of assurance than the first level of assurance, authenticating, by the computing device, the first attribute based on a third level of assurance received from a third computer of a third identity service provider, wherein the third level of assurance has a higher assurance level; when the plurality of attributes are each authenticated at their respective required levels of assurance, granting access to the protected computer resource; and when the plurality of attributes are not all authenticated at their respective required levels of assurance, denying access to the protected computer resource.