Systems and methods for performing disturbed authentication using a bridge computer system

A distributed authentication system comprising:

• a first computer system configured to,
• first authenticate a user in response to receiving a first request from a user computer system of the user,
• send a first message to a bridge computer system in response to determining that the first authentication was unsuccessful,
• determine that the user has been successfully authenticated based on receiving an identify confirmation message from the bridge computer system, and
• provide a first service to the user over a network in response to determining that the user has been successfully authenticated;
• an eID provider computer system different from the first computer system and the bridge computer system, the eID provider computer system configured to perform ID token-based authentication;
• and
• the bridge computer system configured to,
• send a second request to the user computer system of the user requesting a user ID of the user in response to receiving the first message,
• receive the user ID in response to the second request,
• identify a reference value stored in association with the received user ID,
• cause the eID provider computer system to perform the ID token-based authentication based on the identified reference value, the ID token-based authentication including comparing the identified reference value with a data value received from an ID token associated with the user, and
• send the identify confirmation message regarding the user to the first computer system in response to determining that the ID token-based authentication based on the identified reference value was successful.

A bridge computer system comprising:

• a memory storing,
• computer-readable instructions, and
• a plurality of associations between a plurality of user IDs and a plurality of computer systems;
• and
• at least one processor configured to execute the computer-readable instructions to,
• receive a first message from a first computer system of the plurality of computer systems, the first message indicating an unsuccessful first authentication attempt by a user, the first computer system being configured to provide a first service to the user over a network in response to determining that the user has been successfully authenticated,
• send a request to a user computer system of the user requesting a first user ID of the user in response to receiving the first message, the first user ID being one of the plurality of user IDs,
• receive the user ID in response to the request,
• identify an address of a second computer system of the plurality of computer systems based on the received user ID and the plurality of associations, the second computer system being configured to provide a second service to the user over the network in response to determining that the user has been successfully authenticated, the second computer system being different from the first computer system and the bridge computer system,
• cause the second computer system to second authenticate the user,
• receive an indication from the second computer system that the second authentication was successful, and
• send an identity confirmation message regarding the user to the first computer system in response to the reception of the indication, the identity confirmation message causing the first computer system to determine that the user has been successfully authenticated.

A bridge computer system, comprising:

• a memory storing,
• computer-readable instructions, and
• a plurality of associations between a plurality of user IDs and a plurality of reference values;
• and
• at least one processor configured to execute the computer-readable instructions to,
• receive a first message from a first computer system indicating an unsuccessful first authentication attempt by a user, the first computer system providing a service to the user over a network in response to determining that the user has been successfully authenticated,
• send a request to a user computer system of the user requesting a first user ID of the user in response to receiving the first message, the first user ID being one of the plurality of user IDs,
• receive the user ID in response to the request,
• identify a first reference value of the plurality of reference values based on the received user ID and the plurality of associations,
• cause an eID provider computer system to perform ID token-based authentication based on the identified first reference value, the eID provider computer system being different from the first computer system and the bridge computer system, the ID token-based authentication including comparing the identified first reference value with a data value received from an ID token associated with the user, and
• send an identify confirmation message regarding the user to the first computer system in response to determining that the ID token-based authentication based on the identified first reference value was successful, the identity confirmation message causing the first computer system to determine that the user has been successfully authenticated.

A method performed by a bridge computer system to authenticate a user, the method comprising:

• receiving a first message from a first computer system indicating an unsuccessful first authentication attempt by a user, the first computer system being configured to provide a first service to the user over a network in response to determining that the user has been successfully authenticated;
• sending a request to a user computer system of the user requesting a user ID of the user in response to receiving the first message;
• receiving the user ID in response to the request;
• identifying an address of a second computer system stored in association with the received user ID, the second computer system being configured to provide a second service to the user over the network in response to determining that the user has been successfully authenticated, the second computer system being different from the first computer system and the bridge computer system;
• causing the second computer system to second authenticate the user;
• receiving an indication from the second computer system that the second authentication was successful;
• and
• sending an identity confirmation message regarding the user to the first computer system in response to the receiving the indication, the identity confirmation message causing the first computer system to determine that the user has been successfully authenticated.

A method performed by a bridge computer system to authenticate a user, the method comprising:

• receiving a first message from a first computer system indicating an unsuccessful first authentication attempt by a user, the first computer system being configured to provide a service to the user over a network in response to determining that the user has been successfully authenticated;
• sending a request to a user computer system of the user requesting a user ID of the user in response to receiving the first message;
• receiving the user ID in response to the request;
• identifying a stored reference value based on the received user ID;
• causing an eID provider computer system to perform ID token-based authentication based on the identified reference value, the eID provider computer system being different from the first computer system and the bridge computer system, the ID token-based authentication including comparing the identified reference value with a data value received from a first ID token associated with the user;
• and
• sending an identify confirmation message regarding the user to the first computer system in response to determining that the ID token-based authentication based on the identified reference value was successful, the identity confirmation message causing the first computer system to determine that the user has been successfully authenticated.

A method performed by a first computer system to authenticate a user, the method comprising:

• receiving an authentication request from a user computer system associated with a user over a network;
• attempting authentication of the user;
• sending a message to a bridge computer system in response to determining that the attempting the authentication was unsuccessful, the message indicating that authentication of the user was unsuccessful and including an address of a user computer system different from the first computer system and the bridge computers system, the first computer system and the bridge computer system being operated by different persons or organizations, implementation of the attempting the authentication of the user being exclusively controlled by an operator of the first computer system;
• receiving an identity confirmation message regarding the user from the bridge computer system in response to the message;
• determining the user has been successfully authenticated in response to the receiving the identity confirmation message;
• and
• providing a service to the user over the network in response to the determining.