7. A system for authenticating users that reduces transaction risks, said system comprising: a computer configured as a server, said server including at least a database, said server being configured to store within said database a first configurable policy, to determine whether at least one transaction requires access to protected resources when a workstation user indicates a desire to conduct the at least one transaction, to receive information inputted by the workstation user, to determine whether the inputted information is known, and to determine a level of risk associated with the at least one transaction; at least one workstation comprising at least a workstation computer operationally coupled to said server, said at least one workstation being configured to receive information input by the workstation user, wherein said at least one workstation, said server and a network comprise a first communications channel; an authentication system including an authentication database, said authentication system being configured to communicate with said server, to store within said authentication database biometric authentication data and personal data associated with each of a plurality of authorized users, to store an authentication policy, to verify that the at least one transaction is pending, and to conduct a biometric authentication process over a second communications channel in response to a communication from said first communications channel; and a communications device included in said second channel, said communications device being associated with one of the plurality of authorized users and being configured to communicate with said authentication system over said second communications channel, to receive a biometric authentication data capture request transmitted over said second communications channel from said authentication system, to capture biometric authentication data in accordance with the biometric authentication data capture request from the workstation user and transmit the captured biometric data to said authentication system over said second communications channel, wherein said communications device is not configured to store the captured biometric data, the one authorized user is associated with information inputted by the workstation user, said authentication system is further configured to validate said communications device, to determine a state of said communications device when the inputted information is known, to transmit the biometric authentication data capture request corresponding to the level of risk of the at least one transaction, to validate the identity of the user by comparing the captured biometric data against biometric authentication data of the one authorized user, and generate and transmit a one-time pass-phrase over said second communications channel when the workstation user is authenticated as the one authorized user, said communications device is further configured to display the at least one transaction, to receive and display the one-time pass-phrase such that the one-time pass-phrase can be inputted into said at least one workstation and transmitted over said first communications channel to said authentication system, said authentication system is further configured to compare the one-time pass-phrase transmitted from said authentication system against the one-time pass-phrase received by said authentication system, and said server is configured to grant access to the protected resources of the one authorized user when the one-time pass-phrase transmitted from said authentication system matches the one-time pass-phrase received by said authentication system.
7. A system for authenticating users that reduces transaction risks, said system comprising: a computer configured as a server, said server including at least a database, said server being configured to store within said database a first configurable policy, to determine whether at least one transaction requires access to protected resources when a workstation user indicates a desire to conduct the at least one transaction, to receive information inputted by the workstation user, to determine whether the inputted information is known, and to determine a level of risk associated with the at least one transaction; at least one workstation comprising at least a workstation computer operationally coupled to said server, said at least one workstation being configured to receive information input by the workstation user, wherein said at least one workstation, said server and a network comprise a first communications channel; an authentication system including an authentication database, said authentication system being configured to communicate with said server, to store within said authentication database biometric authentication data and personal data associated with each of a plurality of authorized users, to store an authentication policy, to verify that the at least one transaction is pending, and to conduct a biometric authentication process over a second communications channel in response to a communication from said first communications channel; and a communications device included in said second channel, said communications device being associated with one of the plurality of authorized users and being configured to communicate with said authentication system over said second communications channel, to receive a biometric authentication data capture request transmitted over said second communications channel from said authentication system, to capture biometric authentication data in accordance with the biometric authentication data capture request from the workstation user and transmit the captured biometric data to said authentication system over said second communications channel, wherein said communications device is not configured to store the captured biometric data, the one authorized user is associated with information inputted by the workstation user, said authentication system is further configured to validate said communications device, to determine a state of said communications device when the inputted information is known, to transmit the biometric authentication data capture request corresponding to the level of risk of the at least one transaction, to validate the identity of the user by comparing the captured biometric data against biometric authentication data of the one authorized user, and generate and transmit a one-time pass-phrase over said second communications channel when the workstation user is authenticated as the one authorized user, said communications device is further configured to display the at least one transaction, to receive and display the one-time pass-phrase such that the one-time pass-phrase can be inputted into said at least one workstation and transmitted over said first communications channel to said authentication system, said authentication system is further configured to compare the one-time pass-phrase transmitted from said authentication system against the one-time pass-phrase received by said authentication system, and said server is configured to grant access to the protected resources of the one authorized user when the one-time pass-phrase transmitted from said authentication system matches the one-time pass-phrase received by said authentication system. 14. A system for authenticating users in accordance with claim 7 , wherein when said authentication system verifies that the at least one transaction is pending: said communications device is configured to display the plurality of transactions such that the workstation user can choose one of the plurality of transactions to conduct; said server is configured to determine the level of risk of the chosen transaction; and said authentication system is configured to determine the biometric authentication data requirement of the chosen transaction.