authentication
90 ResultsDictionary
authentication
(1) Verifying the integrity of a transmitted message. See message integrity, e-mail authentication and MAC. (2) Verifying the identity of a user logging into a network. Passwords, digital...
Dictionary
Definition: authentication
(1) Verifying the integrity of a transmitted message. See message integrity, e-mail authentication and MAC.
(2) Verifying the identity of a user logging into a network. Passwords, digital certificates, smart cards and biometrics can be used to prove the identity of the client to the network. Passwords and digital certificates can also be used to identify the network to the client. The latter is important in wireless networks to ensure that the desired network is being accessed. See identity management, identity metasystem, OpenID, human authentication, challenge/response, two-factor authentication, password, digital signature, IP spoofing and biometrics.
Four Levels of Proof
There are four levels of proof that people are indeed who they say they are. None of them are entirely foolproof, but in order of least to most secure, they are:
1 - What You Know
Passwords are widely used to identify a user, but only verify that somebody knows the password.
2 - What You Have
Digital certificates in the user's computer add more security than a password, and smart cards verify that users have a physical token in their possession, but both laptops and smart cards can be stolen.
3 - What You Are
Biometrics such as fingerprints and iris recognition are more difficult to forge, but you have seen such systems fooled in the movies all the time!
4 - What You Do
Dynamic biometrics such as hand writing a signature and voice recognition are the most secure; however, replay attacks can fool the system.
THIS DEFINITION IS FOR PERSONAL USE ONLY
All other reproduction is strictly prohibited without permission from the publisher.
© 1981-2010 The Computer Language Company Inc. All rights reserved.
Sponsored White Papers, Webcasts & Resources
-
Priceline.com: Booking Vacations Faster with HP Converged Infrastructure
Check out this white paper to learn more about how Priceline used an HP converged infrastructure to change the way they do business and offer better services than ever to their customers.
-
Google dumps keys, passwords; secures services with standards, certs
Google is improving security for Web applications connecting to its server-based platforms by dropping keys and passwords and turning to certificates and an emerging protocol called OAuth 2.0.
-
Researchers discover "worrisome" authentication flaws in many online services, sites
Bugs discovered in Web-based single sign-on services and sites run by the likes of Facebook, Google, Twitter and PayPal can allow hackers to gain access to a user's account, researchers have...
-
Email titans Google, Microsoft, Yahoo aim to battle phishing
A working group is pitching a system that will allow providers to authenticate emails better.
-
DARPA authentication project focuses on humans as secrets
DARPA is working on a plan to create innovative biometric measurements, such as keystrokes and mouse tracking, as a means of authenticating users to Department of Defense (DOD) IT systems. The...
-
Google testing login authentication via QR codes
Instead of entering a Google Account password on public computers that might be infected with keystroke loggers, Google is experimenting with a phone-based authentication scheme.
-
-
Ten little things to secure your online presence
Here's some basic advice on the tools and tricks you can implement immediately to secure your identity and online presence.
-
Microsoft could charge for Skype video archiving and authentication
Microsoft may charge business users for Skype video archiving and authentication, but keep the base consumer video service free, according to one high-ranking company executive.
-
Okta debuts single sign-on authentication for the cloud
Okta says its new cloud-based single sign-on multifactor authentication service keeps user accounts protected even when a password is stolen.
-
NetSuite adds CA Technologies to two-factor authentication
NetSuite adds CA Technologies authentication to its own two-factor authentication security offering, which uses cryptographic tokens in addition to the usual username and password.
-
Everyone becoming a cloud provider: financial services
Equifax -- known for its credit monitoring services -- deepens its cloud offerings.
-
Death of the Password? Markus Jakobsson and Jason Perlow discuss with the CBC
Jason Perlow and computer security researcher Markus Jakobsson discuss the problems with passwords and computer security with Canada's "The Current" on CBC Radio
-
Disney chief Iger: Digital evolving too fast for long-term content deals
Disney isn't into long-term digital content deals. Chalk it up to the lessons learned from Netflix's 2008 deal with Starz.
-
Visa uses carrots, sticks to boost mobile payment adoption
Visa launches three initiatives to prod merchants to get on the mobile payment bandwagon.
-
Microsoft's HealthVault gets Facebook authentication, mobile phone support
Microsoft is continuing to flesh out its HealthVault electronic medical records service with new features and functionality.
-
Google intros advanced sign-in feature
The feature basically offers DIY two factor authentication, with users having to not only enter their passwords, but also, the code that they receive on their mobile devices, or generate for...
-
Huge security win for Google Apps
Password stolen? Who cares! With Google's new authentication enhancements for Google Apps, domain owners now have a new option to make authentication more reliable by throwing your mobile device...
-
Security flaws haunt NTLMv1-2 challenge-response protocol
The NTLMv1-2 challenge-response protocol provides absolutely no protection against credentials forwarding/relay or reflection attacks. This means that an active attacker (such as a man-the-middle)...
-
Centrify releases new, free Mac and Linux integration toolkit for Active Directory
Windows management vendor Centrify this week released Centrify Express, its new integration package for Windows Active Directory services. The software toolkit is a free, lite version of its...
-
5 reasons why the proposed ID scheme for Internet users is a bad idea
Imagine waking up in a world, where you would need to use two-factor authentication/biometric based ID, in order to do anything online. Here are five reasons why I think this is a bad idea.
-
Ubuntu Lucid Lynx 10.04 can read your iPhone's secrets
Do you have a PIN code on your iPhone? Well, while that might protect you from someone making a call or fiddling with your apps, it doesn't prevent access to your data ... as long as the person...
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
Vendor Showcase
Facebook Activity
