Patent ID: 8572683

Claim:
An apparatus comprising: a memory operable to store a plurality of tokens that indicate a user is using a device to access a resource over a network; and a processor operable to: detect at least one token indicating a change associated with at least one of the device, the network, or the resource, wherein the change poses a risk to a current authentication of the user; block the user from accessing the resource in response to the change; determine whether to re-authenticate the user in response to the change and in response to the determination to re-authenticate the user; request generation of a first password, wherein the first password is generated using a combination of personal information associated with the user; receive a re-authentication token comprising the first password; request, from the user, a second password, the request for the second password comprising a message instructing the user how to for the second password to match the first password; receive a response comprising the second password; determine that the second password matches the first password; and re-authenticate the user in response to the determination that the second password matches the password.