2.4 Review Questions

Federation

• sharing access to your network with others employees, partners, suppliers, and customers

• a way for people to login and access certain resources without needing separate accounts for each service

• EXAMPLES : People sign into your website via Google Credentials

Attestation

• proves your hardware is authentic/trustworthy

Totp

• one time password

• secret key combines with the current time of the day

• used by google, facebook, and microsoft

• does not use a counter to generate a code ( a counter make sure each generated code is unique

Hotp

• one time password

• secret key combined with a counter

• the counter changes each time you authenticated

• counter starts with 0 and works its way up

Static Code

• credentials that remain unchanged

Authentication applications

• an application that can be used for authentication (OTPs codes)

• google authentication, duo

• can be installed on smart phones, turning your device into a token generator

Crossover error rate (CER)

• defines the overall accuracy of a biometric system

• a point where the False Acceptance Rate (FAR) and the False Rejection Rate (FRR) are equal