Please enable JavaScript.

Coggle requires JavaScript to display documents.

Domain 5 - Coggle Diagram

- - - - Something you have
        
        One-time Passwords
        
        Soft Tokens
        
        Software based devices that generate keys
        
        Synchronous
        
        Both server and client generate same key
        
        Typically uses shared secret key and current time
        
        Hard Tokens
        
        Physical devices such as an RSA key
        
        Asynchronous
        
        Server issues challenge, user enters challenge and pin into token device, token then presents a different value, and the user enters the new value into the service and is then authenticated
        
        Smart/Memory Cards
    - - Something you are
        
        Errors
        
        Type 1: False Reject
        
        Type 2: False Accept
        
        Crossover Error Rate
        
        Physiological
        
        Fingerprint, hand geometry, vascular pattern, facial, iris, retina
        
        Fingerprint
        
        Uses minutiae (whorls, ridges, and bifurcation)
        
        Behavioral
        
        Voice, signature, key stroke, gait
    - - Something you know
        
        Passphrase
        
        Security Questions
        
        Password
        
        Dynamic Passwords
        
        One-time passwords
        
        Passphrases
        
        Static Passwords
  - - - Some assurance, at least single-factor authentication
    - - High confidence with two different authentication factors with approved cryptographic techniques
    - - Very high confidence, proof-of-possession through cryptographic protocol and requires a "hard" cryptographic authenticator.
  - - - body fluid exchange and health data
- - - - More flexibility and improved AAA framework
- - - - Loops, whorls, ridges, and bifurcations
- - - - SAML
        
        XML-based framework for exchanging security information, including authentication info.
      - OpenID
        
        Built on OAuth 2.0, uses ID token (JSON web token), mostly used to login to consumer websites and mobile apps