Identity assurance based authorization and authentication systems
Aspects of the subject technology include a method comprising obtaining an enrollment confidence score and a validation confidence score, and determining an identity assurance score associated with the user account that indicates a level of confidence in an identity of the user. The identity assurance score is determined based at least in part on one or more of the enrollment confidence score or the validation confidence score. The method also comprises receiving, from a service provider, a request for the identity assurance score for the user account, the request corresponding to at least one of an authorization or an authentication of the user account at the service provider, and providing, responsive to the request, the identity assurance score of the user account to the service provider for at least one of the authorization or the authentication of the user account at the service provider.
1. A method comprising:
obtaining an enrollment confidence score that indicates a level of confidence in an enrollment provider that issued a credential to a user that was used by the user to register a user account;
obtaining a validation confidence score that indicates a level of confidence in a validation process for validating the credential that was used by the user to register the user account;
determining an identity assurance score associated with the user account that indicates a level of confidence in an identity of the user, wherein the identity assurance score is determined based at least in part on one or more of the enrollment confidence score or the validation confidence score;
receiving, from a service provider, a request for the identity assurance score for the user account, the request corresponding to at least one of an authorization or an authentication of the user account at the service provider; and
providing, responsive to the request, the identity assurance score of the user account to the service provider for at least one of the authorization or the authentication of the user account at the service provider.
2. The method of claim 1 , wherein obtaining the enrollment confidence score comprises generating the enrollment confidence score as a function of one or more of a type of credential issued by the enrollment provider, an enrollment history of the enrollment provider, or a complexity of an enrollment process of the enrollment provider.
3. The method of claim 1 , wherein the validation confidence score is based on one or more of the enrollment confidence score, the credential issued by the enrollment provider, or a validation type that indicates a manner in which the credential is validated.
4. The method of claim 3 , wherein the validation type comprises at least one of an in-person validation, video call validation, photo validation, or credential authentication.
5. The method of claim 1 , further comprising:
determining an age of the identity assurance score; and
decreasing the identity assurance score as a function of the age when the age exceeds an age threshold.
6. The method of claim 1 , further comprising:
determining an age of the credential; and
decreasing the validation confidence score as a function of the age when the age exceeds an age threshold.
7. The method of claim 1 , wherein the user account is authorized when the identity assurance score satisfies a threshold.
8. The method of claim 7 , wherein the identity assurance score satisfies the threshold when the identity assurance score exceeds the threshold.
9. A system comprising:
a memory; and
a processor configured to:
obtain an enrollment confidence score that indicates a level of confidence in an enrollment provider that issued a credential to a user that was used by the user to register a user account;
obtain a validation confidence score that indicates a level of confidence in a validation process for validating the credential that was used by the user to register the user account;
determine an identity assurance score associated with the user account that indicates a level of confidence in an identity of the user, wherein the identity assurance score is determined based at least in part on one or more of the enrollment confidence score or the validation confidence score;
receive, from a service provider, a request for the identity assurance score for the user account, the request corresponding to at least one of an authorization or an authentication of the user account at the service provider; and
provide, responsive to the request, the identity assurance score of the user account to the service provider for at least one of the authorization or the authentication of the user account at the service provider.
10. The system of claim 9 , wherein obtaining the enrollment confidence score comprises generating the enrollment confidence score as a function of one or more of a type of credential issued by the enrollment provider, an enrollment history of the enrollment provider, or a complexity of an enrollment process of the enrollment provider.
11. The system of claim 9 , wherein the validation confidence score is based on one or more of the enrollment confidence score, the credential issued by the enrollment provider, or a validation type that indicates a manner in which the credential is validated.
12. The system of claim 11 , wherein the validation type comprises at least one of an in-person validation, video call validation, photo validation, or credential authentication.
13. The system of claim 9 , wherein the processor is further configured to:
determine an age of the identity assurance score; and
decrease the identity assurance score as a function of the age when the age exceeds an age threshold.
14. The system of claim 9 , wherein the processor is further configured to:
determine an age of the credential; and
decrease the validation confidence score as a function of the age when the age exceeds an age threshold.
15. The system of claim 9 , wherein the user account is authorized when the identity assurance score satisfies a threshold.
16. The system of claim 15 , wherein the identity assurance score satisfies the threshold when the identity assurance score exceeds the threshold.
17. A non-transitory computer-readable medium comprising:
computer-readable instructions that, when executed by a processor, cause the processor to perform one or more operations comprising:
obtaining an enrollment confidence score that indicates a level of confidence in an enrollment provider that issued a credential to a user that was used by the user to register a user account;
obtaining a validation confidence score that indicates a level of confidence in a validation process for validating the credential that was used by the user to register the user account;
determining an identity assurance score associated with the user account that indicates a level of confidence in an identity of the user, wherein the identity assurance score is determined based at least in part on one or more of the enrollment confidence score or the validation confidence score;
receiving, from a service provider, a request for the identity assurance score for the user account, the request corresponding to at least one of an authorization or an authentication of the user account at the service provider; and
providing, responsive to the request, the identity assurance score of the user account to the service provider for at least one of the authorization or the authentication of the user account at the service provider.
18. The non-transitory computer-readable medium of claim 17 , wherein obtaining the enrollment confidence score comprises generating the enrollment confidence score as a function of one or more of a type of credential issued by the enrollment provider, an enrollment history of the enrollment provider, or a complexity of an enrollment process of the enrollment provider.
19. The non-transitory computer-readable medium of claim 17 , wherein the validation confidence score is based on one or more of the enrollment confidence score, the credential issued by the enrollment provider, or a validation type that indicates a manner in which the credential is validated.
20. The non-transitory computer-readable medium of claim 19 , wherein the validation type comprises at least one of an in-person validation, video call validation, photo validation, or credential authentication.