Authentication

For years, biometric authentication has been seen in movies and television shows as a purely fictional piece of technology. However, in the past two decades, biometric authentication has become so common is it everywhere from phones, to computers, and even national digital based identification systems. There are still concerns about the privacy that this type of identification may lack. There are three major categories of authentication: what you know, what you have, and what you are. (See Figure 1). What you are is the category that biometric authentication falls into because it measures authentication through mainly physiological means; the most common being finger print and iris scans. Biometrics are favored because they are less likely to change; finger prints don’t change over time and neither do irises. For mobile phones, a simple four number password is easy to hack and even guess, creating very little privacy. Even with more complicated passwords, there is still the strong chance personal information, such as credit card…

It has been a long established conceit that two actor authentication is essential for secure remote access scenarios. Anyone who has accessed private networks from the internet is familiar with the concept in one form or another. Whether the additional factors include Smart Badges, Security Tokens, Soft Certificates (encrypted code downloaded to a device to identify it as genuine), or a combination of the above, using two factor authentication has become a familiar and even expected part of our…

Describe identification, authentication, and authorization. Authentication is the process utilized by the server requires to recognized or know exactly who is or accessing the system information or the system. In addition, authentication is utilized by the client when they need to recognize that the server is the system that it portray to be. In authentication, the computer or the user has to prove its identity to the client or the server. Generally authentication via use of the server it…

When OpenID was first created and starting to be used by major companies as their go-to single sign-on solution, people were skeptical. Today, it is used just about everywhere and people do not usually think twice before using it to log into their favorite website. We will explore how the improvements OpenID has made over the years have caused it along with OAuth to become some of the most widely used cross-site authentication protocols. In this paper, we will also touch on what flaws still…

Acar, T., Belenkiy, M., & Küpçü, A. (2013). Single password authentication. Computer Networks, 57(13), 2597-2614. doi:10.1016/j.comnet.2013.05.007 This qualitative analysis illustrates the authors’ proposed protocols for a password authentication system requiring the user to remember only one login and password. Their protocols would allow access to either a cloud server or mobile device to handle all authentication needs. They analyze how the protocols would be resistant to online…

Abstract— The focus of this paper is to use Mobile-OTP and QR code in online banking authentication system to provide the best hacker security. Recently, personal information has been leaked through a high degree of methods, such as phishing or pharmacy, to capture user IDs and passwords. This will result in an inappropriate ID / password being propagated between different users; thus a secure user authentication system is essential. In this paper, we use a different technology to provide a…

On www.ahima.org I found an article that talks about electronic health record (EHR) and the electronic signatures used in today’s electronic age. Because more and more providers in the health care industry utilize the EHR, it is very important to understand the electronic signature and how it is used. The article explains authentication and the differences between an electronic signature, authorship and attestation. The article also discusses the purposes for an electronic signature and the…

Authentication and Digital signatures INTRODUCTION This paper will focus on Authentication and Digital Signatures, and outline strategies for Implementation, present techniques on how to apply, adapt, and extend Authentication and Digital Signatures in areas such as encryption, and verification. Digital signatures prevent persons from acting as the originator of a specific document, which is comparable to forgery on a printed text. Authentication is the primary and most critical line of defense…

each user to have a lock for their own workspace and a private set of files (Hiscott). From the 1980s to 1990s, passwords evolved to include cryptographic hash, DES-based cryptography, salting, and strength checking. Cryptographer Robert Morris created a one-way encryption method, known as hashing, to convert passwords into numerical values (Hiscott). UNIX-based systems now use salting, a technique that adds characters to a password before converting it via a cryptographic function to increase…

What form of authentication best meets the Person or Entity Authentication standard for different healthcare applications? The personal or entity authentication requires that all people who are using the system are identified and authenticated (Security Standards: Technical Safeguards). The basic authentication requires that the individuals who want to access the system are well identified. The identity authentication is put in place so as to ensure that the individuals who want to access the…