Flerpass

Flerpass is a term encountered in information security discussions to denote a multi-pass authentication framework. The term is not part of a formal standard, and its usage varies by author, but it generally refers to authentication procedures that require multiple discrete verification steps, or passes, before access is granted.

Conceptually, a flerpass system operates by performing successive verification passes. Each pass evaluates different attributes—such as knowledge factors, possession tokens, biometrics, network context, or device integrity—and yields an independent assurance score or token. A policy engine then aggregates the passes according to risk thresholds to decide whether to authorize, challenge further, or deny access. The architecture emphasizes modularity, allowing new passes to be added or retired without redesigning the entire system. It can also support progressive disclosure, wherein subsequent passes are only triggered if earlier ones indicate insufficient confidence.

Use and reception: The term is primarily found in theoretical discussions and vendor white papers proposing layered or adaptive access approaches. It is not a standardized protocol and is not widely adopted as a formal specification. In practice, similar ideas appear under multi-factor authentication, risk-based access control, or step-up authentication.

Advantages and challenges: Potential benefits include increased resilience against credential theft and finer-grained control. Drawbacks include higher system complexity, longer login times, and privacy considerations due to more data collection. Real-world implementations must balance security gains against usability and compliance requirements.

See also: multi-factor authentication, risk-based authentication, step-up authentication, continuous authentication.