IP Library › Granted Patent US 12706915
Granted Patent B2
US 12706915 · App. 18/453,348 · Granted Aug 11, 2026

Scalable authentication management

Inventors: Feng Zhang (Beijing, CN); Peng Hui Jiang (Beijing, CN); Ting Yin (Beijing, CN); Jun Su (Beijing, CN); Zhe Hua Peng (Beijing, CN)
Assignee: International Business Machines Corporation
H04L63/102H04L63/0876H04L63/105H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12706915
App. No.
18/453,348
Granted
Aug 11, 2026
Kind
B2
Abstract

Authentication management by receiving a request to initiate an authentication from a computing device of a user, directing the request to a selected authentication service of a plurality of authentication services, wherein the selected authentication service is determined dynamically based on respective authentication metrics of the plurality of authentication services, receiving authentication information via the selected authentication service, and authenticating the user based on the received authentication information.

Claims (35)

1 . A computer implemented method comprising:

receiving, by one or more processors, a request to initiate an authentication from a computing device of a user;

directing, by one or more processors, the request to initiate the authentication to a selected authentication service tier of a selected authentication service of a plurality of authentication services, wherein the selected authentication service tier is dynamically determined; and

responsive to the selected authentication service tier of the selected authentication service failing to respond to the request to initiate the authentication, directing, by one or more processors, the request to initiate the authentication to a second authentication service tier of the authentication service, wherein authentication metrics of the second authentication service tier are inferior to the selected authentication service tier based on ranks of respective authentication metrics of the selected authentication service tier and the second authentication service tier.

2 . The computer implemented method according to claim 1 , wherein each of the plurality of authentication services is associated with a plurality of authentication service tiers, and wherein the selected authentication service tier is determined dynamically based on respective authentication metrics of the plurality of authentication service tiers.

3 . The computer implemented method according to claim 2 , further comprising:

responsive to all authentication service tiers of the selected authentication service failing to respond to the request to initiate the authentication, directing, by one or more processors, the request to initiate the authentication to a second authentication service of the plurality of authentication services.

4 . The computer implemented method according to claim 3 , further comprising:

retrieving, by one or more processors, authentication information of the user corresponding to the second authentication service from a user profile associated with the user, wherein the user profile stores the authentication information of the user corresponding to the plurality of authentication services.

5 . The computer implemented method according to claim 1 , wherein the selected authentication service is based on respective authentication metrics of the plurality of authentication services and wherein the respective authentication metrics of the plurality of authentication services are selected from the group consisting of: a user level metric, a performance metric, a security level metric of resources being accessed, a historical success rate metric, and an access frequency metric.

6 . The computer implemented method according to claim 5 , wherein the respective authentication metrics of the plurality of authentication services and the respective authentication metrics of a plurality of authentication service tiers are updated in real-time.

7 . A computer program product comprising one or more computer readable storage devices and collectively stored program instructions on the one or more computer readable storage devices, the stored program instructions comprising:

program instructions to receive a request to initiate an authentication from a computing device of a user;

program instructions to direct the request to initiate the authentication to a selected authentication service tier of a selected authentication service of a plurality of authentication services, wherein the selected authentication service tier is dynamically determined; and

program instructions to direct the request to initiate the authentication to a second authentication service tier of the authentication service in response to the selected authentication service tier of the selected authentication service failing to respond to the request to initiate the authentication, wherein authentication metrics of the second authentication service tier are inferior to the selected authentication service tier based on ranks of respective authentication metrics of the selected authentication service tier and the second authentication service tier.

8 . The computer program product according to claim 7 , wherein each of the plurality of authentication services is associated with a plurality of authentication service tiers, and wherein the selected authentication service tier is determined dynamically based on respective authentication metrics of the plurality of authentication service tiers.

9 . The computer program product according to claim 8 , the stored program instructions further comprising:

responsive to all authentication service tiers of the selected authentication service failing to respond to the request to initiate the authentication, program instructions to direct the request to initiate the authentication to a second authentication service of the plurality of authentication services.

10 . The computer program product according to claim 9 , the stored program instructions further comprising:

program instructions to retrieve authentication information of the user corresponding to the second authentication service from a user profile associated with the user, wherein the user profile stores authentication information of the user corresponding to the plurality of authentication services.

11 . The computer program product according to claim 7 , wherein the selected authentication service is based on respective authentication metrics of the plurality of authentication services and wherein the respective authentication metrics of the plurality of authentication services are selected from the group consisting of: a user level metric, a performance metric, a security level metric of resources being accessed, a historical success rate metric, and an access frequency metric.

12 . The computer program product according to claim 11 , wherein the respective authentication metrics of the plurality of authentication services and the respective authentication metrics of a plurality of authentication service tiers are updated in real-time.

13 . A computer system, the computer system comprising:

one or more computer processors;

one or more computer readable storage devices; and

stored program instructions on the one or more computer readable storage devices for execution by the one or more computer processors, the stored program instructions comprising:

program instructions to receive a request to initiate an authentication from a computing device of a user;

program instructions to direct the request to initiate the authentication to a selected authentication service tier of a selected authentication service of a plurality of authentication services, wherein the selected authentication service tier is dynamically determined; and

program instructions to direct the request to initiate the authentication to a second authentication service tier of the authentication service in response to the selected authentication service tier of the selected authentication service failing to respond to the request to initiate the authentication, wherein authentication metrics of the second authentication service tier are inferior to the selected authentication service tier based on ranks of respective authentication metrics of the selected authentication service tier and the second authentication service tier.

14 . The computer system according to claim 13 , wherein each of the plurality of authentication services is associated with a plurality of authentication service tiers, and wherein the selected authentication service tier is determined dynamically based on respective authentication metrics of the plurality of authentication service tiers.

15 . The computer system according to claim 14 , the stored program instructions further comprising:

responsive to all authentication service tiers of the selected authentication service failing to respond to the request to initiate the authentication, program instructions to direct the request to initiate the authentication to a second authentication service of the plurality of authentication services.

16 . The computer system according to claim 15 , the stored program instructions further comprising:

program instructions to retrieve authentication information of the user corresponding to the second authentication service from a user profile associated with the user, wherein the user profile stores authentication information of the user corresponding to the plurality of authentication services.

17 . The computer system according to claim 13 , wherein the selected authentication service is based on respective authentication metrics of the plurality of authentication services and wherein the respective authentication metrics of the plurality of authentication services are selected from the group consisting of: a user level metric, a performance metric, a security level metric of resources being accessed, a historical success rate metric, and an access frequency metric.