Definition
Step-up authentication is the practice of requiring an additional or stronger identity check partway through an interaction when the user attempts a higher-risk action, rather than demanding the strongest check for every interaction.
A step-up model matches the strength of verification to the risk of the moment. A low-risk interaction, such as confirming an appointment time, may need only basic verification, while viewing a lab result, changing payment details, or confirming a prescription triggers a stronger factor, such as a passkey, a device biometric, or a one-time passcode. The trigger can be the action itself or risk signals such as an unfamiliar device or unusual behavior.
The approach builds on identity frameworks such as NIST SP 800-63B, which grades authentication into assurance levels (AAL1 through AAL3); step-up raises a session to a higher level only when an action calls for it. In healthcare, that lets a call or app keep routine interactions quick while still verifying identity strongly before sensitive PHI, such as medication or clinical instructions, is discussed.
How Consig handles it
Consig supports step-up authentication for higher-risk interactions such as prescription confirmations, billing, or post-discharge clinical instructions, through Journey.ai's Zero Knowledge Network embedded in every Consig call. The workflow receives only the authentication result.