Summarize authentication and authorization design concepts. Flashcards
1
Q
Identification
A
User claims an identity, usually with a username or password
2
Q
Authentication
A
user proves a claimed an identity, usually with a password
3
Q
access control
A
access control system grants access to resources
4
Q
Logging
A
provides accounting
5
Q
authentication factors
A
something you know, such as a password or a PIN.
something you have, such as a smartcard, phone or USB token
6
Q
Knowledge based authentication
A
static KBA: something you know
dynamic KBA: something known about you
7
Q
HOTP
A
Hash based one time password
8
Q
TOPT
A
Time limited one time password.
9
Q
Biometric authentication
A
Fingerprint
Face recognition
Iris scan
Vein matching
Voice
Gate analysis
10
Q
biometric efficiency rates
A
False positive
False negative
True rejection
True acceptance
