Systems and methods for authenticating the identity of a user prior to giving access to confidential data at a user interface via a network. In an embodiment, a user provides initial data as part of a request to access the confidential data. At least one database having the confidential data stored therein is accessed by the server to retrieve confidential data relating to the user based on the initial data. An exam creation function causes creation of an exam comprising at least one question based at least in part on a portion of the confidential data relating to the user. This function creates the exam based on at least one exam definition. An exam administration function causes transmitting of the exam to the client interface for presentation to the user. The user is granted access to the confidential data subsequent to determination that the user successfully passed the exam.