Authentication request fulfilment

1 . A computer-implemented method for fulfilling an authentication request for authenticating an identity of an individual, the method comprising:

monitoring, by an authentication provider module that is configured to authenticate an identity of an individual and which is provided on a non-trusted computing system, an authentication request queue, stored on a server of a trusted computing system coupled to the non-trusted computing system and comprising at least one authentication request;

determining, by the authentication provider module, a selected authentication request in the authentication request queue that the authentication provider module is capable of fulfilling;

responsive to said determining, receiving, by the authentication provider module, data associated with the selected authentication request; and

responsive to said receiving, fulfilling, by the authentication provider module, the selected authentication request.

2 . The method as claimed in claim 1 , wherein fulfilling comprises:

authenticating, by the authentication provider module, the identity of the individual.

3 . The method as claimed in claim 2 , wherein authenticating comprises:

transmitting a notification to a mobile device of the individual requesting the individual to confirm that they are attempting to authenticate their identity.

4 . The method as claimed in claim 3 , further comprising:

receiving, at the authentication provider module, a confirmation notification that the individual wishes to authenticate their identity.

5 . The method as claimed in claim 3 , further comprising:

requesting the individual to perform biometric authentication at the mobile device when sending the notification.

6 . The method as claimed in claim 3 , further comprising:

receiving a first authentication token from the mobile device of the individual at the authentication provider module.

7 . The method as claimed in claim 6 , further comprising:

receiving the first authentication token as a token issued to the mobile device by an identity provider module external to the trusted computing system.

8 . The method as claimed in claim 2 , wherein fulfilling further comprises:

responsive to authenticating, transmitting, by the authentication provider module, a response to the selected authentication request to the server.

9 . The method as claimed in claim 8 , further comprising:

when transmitting the response to the selected authentication request to the server, providing a second authentication token to the server.

10 . The method as claimed in claim 9 , further comprising:

providing the second authentication token as a token issued by a trusted identity provider module of the trusted computing system.

11 . The method as claimed in claim 8 , further comprising:

providing the response to the selected authentication request to an authentication response queue on the server.

12 . The method as claimed in claim 1 , wherein monitoring comprises:

receiving, at the authentication provider module, data from the server indicative of pending authentication requests.

13 . The method as claimed in claim 1 , wherein determining comprises:

receiving, by the authentication provider module, a request identifier for the selected authentication request from a mobile device of the individual; and

determining the selected authentication request based on the request identifier.

14 . The method as claimed in claim 1 , wherein determining comprises:

determining, by the authentication provider module, that the authentication provider module has a trust level score equal to or greater than a minimum required score indicated in the selected authentication request.

15 . The method as claimed in claim 1 , wherein determining comprises:

determining, by the authentication provider module, that the authentication provider module is indicated in the selected authentication request.

16 . The method as claimed in claim 1 , wherein determining comprises:

determining, by the authentication provider module, that the authentication provider module has attribute(s) indicated as required attribute(s) in the selected authentication request.

17 . The method as claimed in claim 1 , wherein receiving data associated with the selected authentication request comprises:

receiving, by the authentication provider module, the selected authentication request from the server.

18 . The method as claimed in claim 17 , further comprising:

removing the selected authentication request from the authentication request queue.

19 . A communication network, comprising:

a trusted computing system comprising a server;

a non-trusted computing system comprising an authentication provider module configured to authenticate an identity of an individual independently of the trusted computing system;

wherein the authentication provider module is configured to:

monitor an authentication request queue, stored on the server and comprising at least one authentication request;

determine a selected authentication request in the authentication request queue that the authentication provider module is capable of fulfilling;

receive data associated with the selected authentication request; and

fulfil the selected authentication request.

20 . The communication network as claimed in claim 19 , wherein the authentication provider module is a mobile backend associated with a mobile banking application executing on a mobile device of the individual.