Patent ID: 8856954

Claim:
A processor-executed method for use in authenticating a user corresponding to an authentication request originating on a first device, using organization based information corresponding to an organization, comprising: in response to the authentication request, on a second one or more devices corresponding to the organization: analyzing the organization based information for information that is suitable for use in authenticating the user, wherein the organization based information comprises employee-used information and sensitive information that should not be revealed in authenticating the user, and wherein the sensitive information is information sensitive to the organization; and deriving a question from the organization based information, wherein the act of deriving includes preventing the sensitive information from being used to derive the question; and based on the question, executing a process used to authenticate the user; wherein the organization based information includes information having different levels of sensitivity, wherein the authentication request pertains to one of the levels, and wherein the act of deriving includes deriving the question based on the level of sensitivity.