User definable policy for graduated authentication based on the partial orderings of principals

An apparatus having a central processing unit (CPU) and a memory coupled to said CPU to protect a computerized artifact, said apparatus comprising:

• a first determination logic configured to determine an actor context of an actor;
• a second determination logic configured to determine an access environment for an attempted operation responsive to said actor context from the first determination logic;
• a third determination logic configured to determine a necessary condition;
• a first evaluation logic configured to evaluate whether said access environment from the second determination logic satisfies said necessary condition from the third determination logic;
• and
• an authentication logic configured to authenticate said actor and activate a principal responsive to the first evaluation logic.

A computer program product comprising to protect a computerized artifact, said product comprising:

• a computer-usable data carrier providing instructions that, when executed by a computer, cause said computer to perform a method comprising:
• determining an actor context of an actor;
• determining an access environment for an attempted operation responsive to said actor context;
• determining a necessary condition;
• evaluating whether said access environment satisfies said necessary condition;
• and
• authenticating said actor and activating a principal responsive to evaluating.