Patent ID: 8490154
Filing Date: 2013-07-16
Classification: H04L

Abstract:
1. A computer-implemented method for authentication, the method comprising: defining a demanded level of security in a server, the demanded level of security defining a minimum level of trust necessary to allow a request, wherein the demanded level of security is defined independent of any particular authentication instance; providing security levels for each of at least three authentication instances, each security level representing a level of trust in the corresponding authentication instance; receiving at least one request sent from a client to the server, the request comprising information verifying that the client has successfully authenticated using at least two of the at least three authentication instances, the at least two of the at least three authentication instances selected by the client from the at least three authentication instances; combining the at least two security levels which correspond to the at least two of the at least three authentication instances selected by the client by applying one or more combining operators to the at least two security levels, wherein the at least two security levels are different; and allowing the request if the combined at least two security levels exceeds the demanded level of security.