Providing privileges and granting or denying a level of access to resources based on authentication by authentication sources

Abstract

A system and method for a service level application are described. The service level application receives authentication data from a client seeking access to establish an account in an online marketplace. The service level application identifies a source of truth corresponding to the authentication data and verifies the authentication data with the corresponding source of truth. The service level application determines an access level tier to the online marketplace for the client based on the source of truth.

What is claimed is: 
     
         1 . A system comprising:
 one or more computer processors; and   a computer-readable medium storing instructions that, when executed by the one or more computer processors, cause the system to perform operations comprising:   receiving authentication request data from a client;   determining a plurality of authentication types for different portions of the authentication request data;   identifying a plurality of sources for authenticating the client based on the plurality of authentication types, the plurality of sources corresponding to the plurality of authentication types;   transmitting a plurality of authentication requests to the plurality of sources, each authentication request in the plurality of authentication requests comprising a portion of the authentication request data;   in response to receiving authentication response data from the plurality of sources, determining a first set of privileges and a second set of privileges, the second set of privileges including one or more privileges excluded from the first set of privileges;   granting the client access to first resources with the first set of privileges; and   granting the client access to second resources with the second set of privileges.   
     
     
         2 . The system of  claim 1 , wherein the operations further comprise identifying the plurality of authentication types of the different portions of the authentication request data based on a plurality of formats of the different portions of the authentication request data. 
     
     
         3 . The system of  claim 1 , wherein the operations further comprise:
 storing the authentication response data in an access level tier matrix for the client; and   determining at least one of the first set of privileges or the second set of privileges from the access level tier matrix for the client.   
     
     
         4 . The system of  claim 1 , wherein the operations further comprise verifying an identity associated with the client based on the authentication response data. 
     
     
         5 . The system of  claim 1 , wherein the operations further comprise limiting the client to a specified number of transaction activities within a publication system based on the first set of privileges excluding the one or more privileges. 
     
     
         6 . The system of  claim 1 , wherein the operations further comprise limiting the client to one or more transactions within a publication system that add up to a specified monetary amount based on the first set of privileges excluding the one or more privileges. 
     
     
         7 . The system of  claim 1 , wherein the operations further comprise:
 transmitting an authentication challenge to the client;   receiving a response to the authentication challenge from the client;   identifying a verification program associated with the authentication challenge;   applying the verification program to the response to validate the response to the authentication challenge from the client; and   determining at least one of the first set of privileges or the second set of privileges based on the verification program.   
     
     
         8 . A method comprising:
 receiving authentication request data from a client;   determining a plurality of authentication types for different portions of the authentication request data;   identifying a plurality of sources for authenticating the client based on the plurality of authentication types, the plurality of sources corresponding to the plurality of authentication types;   transmitting a plurality of authentication requests to the plurality of sources, each authentication request in the plurality of authentication requests comprising a portion of the authentication request data;   in response to receiving authentication response data from the plurality of sources, determining a first set of privileges and a second set of privileges, the second set of privileges including one or more privileges excluded from the first set of privileges;   granting the client access to first resources with the first set of privileges; and   granting the client access to second resources with the second set of privileges.   
     
     
         9 . The method of  claim 8 , further comprising, identifying the plurality of authentication types of the different portions of the authentication request data based on a plurality of formats of the different portions of the authentication request data. 
     
     
         10 . The method of  claim 8 , further comprising:
 storing the authentication response data in an access level tier matrix for the client; and   determining at least one of the first set of privileges or the second set of privileges from the access level tier matrix for the client.   
     
     
         11 . The method of  claim 8 , further comprising, verifying an identity associated with the client based on the authentication response data. 
     
     
         12 . The method of  claim 8 , further comprising, limiting the client to a specified number of transaction activities within a publication system based on the first set of privileges excluding the one or more privileges. 
     
     
         13 . The method of  claim 8 , further comprising, limiting the client to one or more transactions within a publication system that add up to a specified monetary amount based on the first set of privileges excluding the one or more privileges. 
     
     
         14 . The method of  claim 8 , further comprising:
 transmitting an authentication challenge to the client;   receiving a response to the authentication challenge from the client;   identifying a verification program associated with the authentication challenge;   applying the verification program to the response to validate the response to the authentication challenge from the client; and   determining at least one of the first set of privileges or the second set of privileges based on the verification program.   
     
     
         15 . A non-transitory computer-readable storage medium storing a set of instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:
 receiving authentication request data from a client;   determining a plurality of authentication types for different portions of the authentication request data;   identifying a plurality of sources for authenticating the client based on the plurality of authentication types, the plurality of sources corresponding to the plurality of authentication types;   transmitting a plurality of authentication requests to the plurality of sources, each authentication request in the plurality of authentication requests comprising a portion of the authentication request data;   in response to receiving authentication response data from the plurality of sources, determining a first set of privileges and a second set of privileges, the second set of privileges including one or more privileges excluded from the first set of privileges;   granting the client access to first resources with the first set of privileges; and   granting the client access to second resources with the second set of privileges.   
     
     
         16 . The non-transitory computer-readable storage medium of  claim 15 , further comprising, identifying the plurality of authentication types of the different portions of the authentication request data based on a plurality of formats of the different portions of the authentication request data. 
     
     
         17 . The non-transitory computer-readable storage medium of  claim 15 , further comprising:
 storing the authentication response data in an access level tier matrix for the client, and   determining at least one of the first set of privileges or the second set of privileges from the access level tier matrix for the client.   
     
     
         18 . The non-transitory computer-readable storage medium of  claim 15 , further comprising, verifying an identity associated with the client based on the authentication response data. 
     
     
         19 . The non-transitory computer-readable storage medium of  claim 15 , further comprising, limiting the client to a specified number of transaction activities within a publication system based on the first set of privileges excluding the one or more privileges. 
     
     
         20 . The non-transitory computer-readable storage medium of  claim 15 , further comprising:
 transmitting an authentication challenge to the client;   receiving a response to the authentication challenge from the client;   identifying a verification program associated with the authentication challenge;   applying the verification program to the response to validate the response to the authentication challenge from the client; and   determining at least one of the first set of privileges or the second set of privileges based on the verification program.