Step-Up Authentication

Abstract

A method for identifying and/or authenticating a user on a device, the method comprising: requesting identification or authentication of the user for a first task; determining a first threshold in dependence on the first task; selecting a first authentication process from a plurality of authentication processes; determining a confidence score in dependence on a performance of the selected first authentication process, wherein the confidence score indicates a level of confidence in the user's identity; determining whether the confidence score is above or below the first threshold; and if the confidence score is below the first threshold, selecting a second authentication process from the plurality of authentication processes, otherwise identifying or authenticating the user for the first task.

1 - 14 . (canceled) 
     
     
         15 . A method for authenticating a user on a device capable of performing a plurality of tasks, the method comprising:
 requesting authentication of the user for a first task of the plurality of tasks;   determining a first threshold for the first task based at least in part upon a nature of the first task;   selecting a first authentication process for the first task from a plurality of authentication processes;   determining a confidence score based at least in part upon a performance of the selected first authentication process, wherein the confidence score indicates a level of confidence in the user's identity;   determining whether the confidence score is above or below the first threshold; and   if the confidence score is below the first threshold, selecting a second authentication process for the first task from the plurality of authentication processes, otherwise authenticating the user for the first task.   
     
     
         16 . The method of  claim 15 ,
 wherein the second authentication process is selected based at least in part upon a difference between the confidence score and the first threshold.   
     
     
         17 . The method of  claim 15 ,
 wherein the second authentication process is selected based at least in part upon the first task.   
     
     
         18 . The method of  claim 15 , further comprising:
 updating the confidence score based at least in part upon a performance of the selected second authentication process.   
     
     
         19 . The method of  claim 15 , further comprising:
 requesting authentication of the user for a second task;   determining a second threshold for the second task, wherein the second threshold is different from the first threshold.   
     
     
         20 . The method of  claim 19 , further comprising:
 determining whether the confidence score is above or below the second threshold;   if the confidence score is below the second threshold, selecting a third authentication process for the second task from the plurality of authentication processes, otherwise authenticating the user for the second task.   
     
     
         21 . The method of  claim 15 ,
 wherein the first and/or second authentication process is performed automatically by the device and/or a remote computing device.   
     
     
         22 . The method of  claim 15 ,
 wherein the plurality of authentication processes comprises one or more biometric authentication processes.   
     
     
         23 . The method of  claim 15 , further comprising:
 determining a second threshold lower than the first threshold, wherein authentication of the user is rejected if the confidence score is determined to be below the second threshold.   
     
     
         24 . A system for authenticating a user on a device capable of performing a plurality of tasks, the system comprising:
 at least one computer processor configured to perform user authentication operations in the system,   
       wherein the at least one computer processor is further configured to:
 request authentication of the user for a first task of the plurality of tasks; 
 determine a first threshold for the first task based at least in part upon a nature of the first task; 
 select a first authentication process for the first task from a plurality of authentication processes; 
 determine a confidence score based at least in part upon a performance of the selected first authentication process, wherein the confidence score indicates a level of confidence in the user's identity; 
 determine whether the confidence score is above or below the first threshold; 
 if the confidence score is below the first threshold, select a second authentication process for the first task from the plurality of authentication processes, otherwise authenticating the user for the first task. 
 
     
     
         25 . The system of  claim 24 ,
 wherein the second authentication process is selected based at least in part upon a difference between the confidence score and the first threshold.   
     
     
         26 . The system of  claim 24 ,
 wherein the second authentication process is selected based at least in part upon the first task.   
     
     
         27 . The system of  claim 24 ,
 wherein the at least one computer processor is further configured to:   update the confidence score based at least in part upon a performance of the selected second authentication process.   
     
     
         28 . The system of  claim 24 ,
 wherein the at least one computer processor is further configured to:   request authentication of the user for a second task; and   determine a second threshold for the second task, wherein the second threshold is different from the first threshold.   
     
     
         29 . The system of  claim 28 ,
 wherein the at least one computer processor is further configured to:   determine whether the confidence score is above or below the second threshold; and   if the confidence score is below the second threshold, select a third authentication process for the second task from the plurality of authentication processes, otherwise authenticating the user for the second task.   
     
     
         30 . The system of  claim 24 ,
 wherein the first and/or second authentication process is performed automatically by the device and/or a remote computing device.   
     
     
         31 . The system of  claim 24 ,
 wherein the plurality of authentication processes comprises one or more biometric authentication processes.   
     
     
         32 . The system of  claim 24 ,
 wherein the at least one computer processor is further configured to:   determine a second threshold lower than the first threshold, wherein authentication of the user is rejected if the confidence score is determined to be below the second threshold.   
     
     
         33 . An article of manufacture for authenticating a user on a device capable of performing a plurality of tasks, the article of manufacture comprising:
 a non-transitory computer processor readable medium; and   instructions stored on the medium;   wherein the instructions are configured to be readable from the medium by at least one computer processor configured to perform user authentication operations and thereby cause the at least one computer processor to operate so as to:   request authentication of the user for a first task of the plurality of tasks;   determine a first threshold for the first task based at least in part upon a nature of the first task;   select a first authentication process for the first task from a plurality of authentication processes;   determine a confidence score based at least in part upon a performance of the selected first authentication process, wherein the confidence score indicates a level of confidence in the user's identity;   determine whether the confidence score is above or below the first threshold; and   if the confidence score is below the first threshold, select a second authentication process for the first task from the plurality of authentication processes, otherwise authenticating the user for the first task.   
     
     
         34 . At least one processor readable storage medium storing a computer program of instructions configured to be readable by at least one computer processor for instructing the at least one computer processor to execute a computer process for performing the method as recited in  claim 15 .