SYSTEMS, DEVICES AND METHODS FOR AUTHENTICATION AND AUTHORIZATION TO PROVIDE ADAPTIVE ACCESS TO RESOURCES
An apparatus, system, or method for authentication, authorization, and access-control is disclosed. The method includes receiving identity information from one or more sources regarding a user attempting to access a resource. The method also includes consolidating the received identity information into a contextualized identity for the user and determining whether to authenticate the user based on the contextualized identity. The method further includes receiving at least one piece of contextual information related to the user and determining whether to enforce a policy based on the authentication of the contextualized identity and at least one piece of contextual information.
1 . A method for authentication, authorization, and access-control, the method comprising:
receiving identity information from one or more sources regarding a user attempting to access a resource;
consolidating the received identity information into a contextualized identity for the user;
determining whether to authenticate the user based on the contextualized identity;
receiving at least one piece of contextual information related to the user; and
determining whether to enforce a policy based on the authentication of the contextualized identity and at least one piece of contextual information.
2 . The method of claim 1 , wherein determining to enforce the policy based on the authentication of the contextualized identity and at least one piece of contextual information comprises one or more of granting access to the resource, denying access to the resource, or throttling access to the resource.
3 . The method of claim 2 , further comprising notifying the user of the determination to grant access to the resource, deny access to the resource, or throttle access to the resource.
4 . The method of claim 1 , wherein the at least one piece of contextual information comprises location, network security, human resource status, attached network, or geo-location related compliance regulations.
5 . The method of claim 1 , wherein the contextualized identity comprises a trust level associated with the user.
6 . The method of claim 5 , further comprising automatically adjusting the trust level based on the at least one piece of contextual information related to the user.
7 . A computer configured to access a storage device, the computer comprising:
a processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the processor cause the computer to perform:
receiving identity information from one or more sources regarding a user attempting to access a resource;
consolidating the received identity information into a contextualized identity for the user;
determining whether to authenticate the user based on the contextualized identity;
receiving at least one piece of contextual information related to the user; and
determining whether to enforce a policy based on the authentication of the contextualized identity and at least one piece of contextual information.
8 . The method of claim 7 , wherein determining to enforce the policy based on the authentication of the contextualized identity and at least one piece of contextual information comprises one or more of granting access to the resource, denying access to the resource, or throttling access to the resource.
9 . The method of claim 8 , further comprising notifying the user of the determination to grant access to the resource, deny access to the resource, or throttle access to the resource.
10 . The method of claim 7 , wherein the at least one piece of contextual information comprises location, network security, human resource status, attached network, or geo-location related compliance regulations.
11 . The method of claim 7 , wherein the contextualized identity comprises a trust level associated with the user.
12 . The method of claim 11 , further comprising automatically adjusting the trust level based on the at least one piece of contextual information related to the user.
13 . A computer program product comprising:
a computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable code comprising computer-readable program code configured to:
receive identity information from one or more sources regarding a user attempting to access a resource;
consolidate the received identity information into a contextualized identity for the user;
determine whether to authenticate the user based on the contextualized identity;
receive at least one piece of contextual information related to the user; and
determine whether to enforce a policy based on the authentication of the contextualized identity and at least one piece of contextual information.
14 . The method of claim 13 , wherein determining to enforce the policy based on the authentication of the contextualized identity and at least one piece of contextual information comprises one or more of granting access to the resource, denying access to the resource, or throttling access to the resource.
15 . The method of claim 14 , further comprising notifying the user of the determination to grant access to the resource, deny access to the resource, or throttle access to the resource.
16 . The method of claim 13 , wherein the at least one piece of contextual information comprises location, network security, human resource status, attached network, or geo-location related compliance regulations.
17 . The method of claim 13 , wherein the contextualized identity comprises a trust level associated with the user.
18 . The method of claim 17 , further comprising automatically adjusting the trust level based on the at least one piece of contextual information related to the user.