Patent ID: 8474018

Claim:
A system, the system providing access control for access to the system by an access device, the system comprising: a server executing a server application for communication with the access device, wherein: the server application receives an identity claim from the access device; an authentication service in communication with the server, wherein: the authentication service receives the identity claim from the server application; a risk service in communication with the authentication service, wherein: the risk service provides a risk evaluation to the authentication service based on applying a risk model to the identity claim; and the authentication service provides a token to the server application based on the identity claim and the risk evaluation; and an authorization service in communication with the server application and the risk service, wherein: the authorization service receives the token from the server application; and the authorization service provides a response whether to allow access to the system by the access device according to input from the token, and input from a risk based access control, a role based access control, and an attribute based access control.