Patent ID: 8832812
Filing Date: 2014-09-09
Classification: G06F,H04L

Abstract:
1. A method for controlling access of a user to a protected resource during a session, the method comprising the steps of: issuing an authentication information request responsive to an access request from the user to access the protected resource; receiving user-supplied authentication information from the user responsive to the authentication information request; authenticating the user based upon verification of the received authentication information; and repeating one or more of the issuing, receiving and authenticating steps during the session to re-authenticate the user using at least a portion of the user-supplied authentication information that is different from a corresponding portion of the user-supplied authentication information used during the first authenticating step, wherein said user-supplied authentication information received during an initial authentication and said user-supplied authentication information received during said re-authentication are based on a variable tokencode generated by a security token, wherein at least one of said issuing, receiving and authenticating steps is performed by at least one hardware device.