An access control method comprising: receiving a first input via a first input interface wherein the first input includes an iris scan input; determining whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data wherein the determining includes: determining whether the first input includes valid first authentication data; and based on determining whether the first input is valid first authentication data: if the first input does not include valid first authentication data, disallowing access; and if the first input includes valid first authentication data, determining whether the first input also includes duress authentication data by determining whether the iris scan input is verified against a sequence of eye movements stored as the duress authentication data; and based on determining whether the first input also includes duress authentication data: if the first input does not include duress authentication data, allowing access; and if the first input includes duress authentication data: receiving a second input via a second input interface; wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, pointing device input, facial or hand gesture input, pen / stylus input, or voice input; determining whether the second input includes valid second authentication data; and allowing access only when the second input includes valid second authentication data. receiving a first input via a first input interface wherein the first input includes an iris scan input; determining whether the first input includes valid first authentication data, invalid authentication data, or duress authentication data determining whether the first input includes valid first authentication data; and based on determining whether the first input is valid first authentication data: if the first input does not include valid first authentication data, disallowing access; and if the first input includes valid first authentication data, determining whether the first input also includes duress authentication data by determining whether the iris scan input is verified against a sequence of eye movements stored as the duress authentication data; and based on determining whether the first input also includes duress authentication data: if the first input does not include duress authentication data, allowing access; and if the first input includes duress authentication data: receiving a second input via a second input interface; wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, pointing device input, facial or hand gesture input, pen / stylus input, or voice input; determining whether the second input includes valid second authentication data; and allowing access only when the second input includes valid second authentication data. if the first input does not include valid first authentication data, disallowing access; and if the first input includes valid first authentication data, determining whether the first input also includes duress authentication data by determining whether the iris scan input is verified against a sequence of eye movements stored as the duress authentication data; and based on determining whether the first input also includes duress authentication data: if the first input does not include duress authentication data, allowing access; and if the first input includes duress authentication data: receiving a second input via a second input interface; wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, pointing device input, facial or hand gesture input, pen / stylus input, or voice input; determining whether the second input includes valid second authentication data; and allowing access only when the second input includes valid second authentication data. if the first input does not include duress authentication data, allowing access; and if the first input includes duress authentication data: receiving a second input via a second input interface; wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, pointing device input, facial or hand gesture input, pen / stylus input, or voice input; determining whether the second input includes valid second authentication data; and allowing access only when the second input includes valid second authentication data. receiving a second input via a second input interface; wherein the second input includes a non-biometric input including at least one of an alphanumeric input, a touchscreen gesture input, pointing device input, facial or hand gesture input, pen / stylus input, or voice input; determining whether the second input includes valid second authentication data; and allowing access only when the second input includes valid second authentication data.