Jump to content

Authentication

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 195.149.37.229 (talk) at 14:53, 6 April 2002. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

Authentication is a term used in computer security for the process by which a computer user (or occasionally a computer program) gains priviledges to perform operations in a protected computer system. Practical examples include:

  • withdrawing cash from an ATM.
  • controlling a remote computer over the Internet.
  • using an Internet banking system.

The methods by which a human can authenticate themselves are classified into three classes:

  • Something the user is (e.g., fingerprint or retinal scanners)
  • Something the user has (e.g., ID card)
  • Something the user knows (e.g., a password, a passphrase or a PIN)

Sometimes a combination of methods is used, e.g., a bank card and a PIN number.

Historically, methods of authentication have used increasingly sophisticated mathematics in order to remain reliable against newly discovered techniques of impersonation.

See also: Public key cryptography, Kerberos, SSH, Encrypted Key Exchange (EKE), Secure Remote Password Protocol (SRP)