IBM WebSphere V5.0 Security - CGISecurity

knowledge
based
user name/password
digital certificates
key based
harware key
symmetric encription
base
authentication
mechanisms
voice password
biometric
retinal images
finger print
Figure 2-1 Base authentication mechanisms
The following paragraphs will discuss some of the authentication mechanisms
used in IT systems.
User name and password
User name and password are the common method for authentication. The user
who wants to access the system provides a user name and a password for login,
which will be compared with the values stored in the system.
Physical keys
Physical keys are objects that can be used to prove the identity of the object
holder. Physical keys can be a piece of metal used to unlock your computer, a
hardware device that is plugged into the computer to execute certain programs
or smart cards that have an embedded memory or microprocessor.
Biometric authentication
Biometric authentication is the use of physiological or behavioral characteristics
used to verify the identity of an individual. The biometric authentication consists
of comparing the physical characteristics of an individual against the values of
those characteristics stored in a system.
Delegation
Delegation is the ability to leave an intermediary to do the work initiated by a
client according to a delegation policy.
Chapter 2. Security fundamentals 9