MFA

Multi-factor authentication (MFA) on monesta tekijästä yhdistelty tunnistusmenetelmä jossa sen kaikkien osatekijöiden tulee onnistua tunnistushetkellä tai muuten tunnistus hylätään.

Turvallisuus perustuu kolmeen perustekijään^[1]

salaiseen tietoon (something you know)
fyysiseen välineeseen (something you have)
biometriaan (something you are)

Kaksitekijäiseksi mentelmäksi (Two-factor authentication, 2FA) kutsutaan menetelmää, joka hyödyntää vähintään kahta edelläolevista tekijöistä. Esimerkiksi:

asiointi maksukortilla (fyysinen väline) kysyy tunnuslukua (salainen tieto) täyttää MFA-määritelmän.
asiointi pankkitunnuksilla, asiakasnumerolla (salainen tieto) ja tunnusluvulla (salainen tieto) ei täytä MFA-määritelmää.

Väärinkäyttö on helpompaa jos tunnistaminen ei koostu monesta tekijästä - esimerkiksi salaiset tiedot voi vahingossa syöttää huijaussivustolle koska se on ainoa mitä vaaditaan hyväksyttyyn tunnistustapahtumaan.

Katso myös

Lähteet

↑
cs.cornell.edu: Fred B. Schneider: Something You Know, Have, or Are All approaches for human authentication rely on at least one of the following:
- Something you know (eg. a password). This is the most common kind of authentication used for humans. We use passwords every day to access our systems. Unfortunately, something that you know can become something you just forgot. And if you write it down, then other people might find it.
- Something you have (eg. a smart card). This form of human authentication removes the problem of forgetting something you know, but some object now must be with you any time you want to be authenticated. And such an object might be stolen and then becomes something the attacker has.
- Something you are (eg. a fingerprint). Base authentication on something intrinsic to the principal being authenticated. It's much harder to lose a fingerprint than a wallet. Unfortunately, biometric sensors are fairly expensive and (at present) not very accurate. Viitattu: 2015-07-07

Aiheesta muualla

[scheider-cornell-edu-1] s.cornell.edu: Fred B. Schneider: Something You Know, Have, or Are All approaches for human authentication rely on at least one of the following:
Something you know (eg. a password). This is the most common kind of authentication used for humans. We use passwords every day to access our systems. Unfortunately, something that you know can become something you just forgot. And if you write it down, then other people might find it.

Something you have (eg. a smart card). This form of human authentication removes the problem of forgetting something you know, but some object now must be with you any time you want to be authenticated. And such an object might be stolen and then becomes something the attacker has.

Something you are (eg. a fingerprint). Base authentication on something intrinsic to the principal being authenticated. It's much harder to lose a fingerprint than a wallet. Unfortunately, biometric sensors are fairly expensive and (at present) not very accurate. Viitattu: 2015-07-07

[2] Something you know (eg. a password). This is the most common kind of authentication used for humans. We use passwords every day to access our systems. Unfortunately, something that you know can become something you just forgot. And if you write it down, then other people might find it.

[3] Something you have (eg. a smart card). This form of human authentication removes the problem of forgetting something you know, but some object now must be with you any time you want to be authenticated. And such an object might be stolen and then becomes something the attacker has.

[4] Something you are (eg. a fingerprint). Base authentication on something intrinsic to the principal being authenticated. It's much harder to lose a fingerprint than a wallet. Unfortunately, biometric sensors are fairly expensive and (at present) not very accurate. Viitattu: 2015-07-07

[1]

MFA

Katso myös

Lähteet

Aiheesta muualla

Navigointivalikko

Henkilökohtaiset työkalut

Nimiavaruudet

Kirjoitusjärjestelmät

Näkymät

Muut

Haku

Valikko

Työkalut