Two factor authentication

Master of Science in Computer Science and Information security 2013-2015 EXT Meraj Uddin Jenson Jacob and Vivek S "Mirox Cyber Security and Technologies Pvt. Ltd"

In this paper we describe the methods for implementing methods security methods forstronger authentication. This connectionless approach includes the two factor authentication using device. It is a current trend that many companies seek to improve their authentication method in order to increase their security protection and reinforce their defense-in-depth. In doing so, these companies face a dilemma: What kind of two-factor authentication should be implemented? What “provider” should be trusted? What media should be used? Which methods should or could be combined and integrated to the existing infrastructures? And what costs will be incurred?

This paper will serve as a great beginning stepping stone for those who have chosen to adopt this type of authentication. This is especially true when a company has decided to add security to its authentication mechanism. It has been proven that username and password alone do not provide sufficient security for sensitive information that needs more protection than other information. Generally speaking, the two-factor authentication adds more security because the user must provide more than one “secret” password or passphrase. As I will show with the following example, the two-factor authentication combines “something that you know” (password – PIN), with “something that you have” (hardware token, mobile phone) and/or “something that you are” (biometric technologies), to make sure that the person is who he/she claims to be.