security

Definition

Authentication

Authentication is the process of verifying the claimed identity of a subject.

It establishes confidence that an entity is who or what it purports to be before granting access to resources.

Classes

Definition

Knowledge-based Authentication

Authentication based on information known only to the subject.

Something the subject knows

Examples: passwords, PINs, security questions

Link to original

Definition

Possession-based Authentication

Authentication based on the possession of an object owned by the subject.

Something the subject has

Examples: smart cards, TAN lists, hardware tokens, SIM cards, certificates, authenticator apps

Link to original

Definition

Inherence-based Authentication

Authentication based on biometric characteristics of the subject.

Something the subject is

Examples: fingerprint, face recognition, iris recognition, DNA

Link to original

Methods

  • Passwords
  • One-Time Passwords
  • Challenge-Response
  • Biometry