Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Authentication Factors

taxonomy

Classification Objective

The objective of this classification is to inventory, characterize and compare authentication factors.

TODO

  •  Compile a quick version 1 of the list
  •  Complete it with a literature review
  •  List the key properties to characterize items

Classification

Something I Am

Item

Alternative Forms

Definition

Strengths

Weaknesses

Sources

Something I Know

Password

Something I Have

SMS One-Time Passcode

Not tied to device crypto keys, thus easier to recover from device loss

  • Requires network connectivity

  • Insecure (SMS interception: over the air, SS7, SIM swap)

Jover, 2020

Software App One-Time Passcode

Hardware Token One-Time Passcode