Authentication Factors
taxonomy
Classification Objective
The objective of this classification is to inventory, characterize and compare authentication factors.
TODO
- Compile a quick version 1 of the list
- Complete it with a literature review
- List the key properties to characterize items
...
Authentication Factors
Knowledge factor
Possession factor
Inherence factor
Location factor
Time factor
Other key dimensions
In-band versus out-of-band authentication
Front-end versus back-end authentication / direct versus delegated authentication
Authentication Methods
Class | Sub-class | Comments | Sources | |||
|---|---|---|---|---|---|---|
Biometric Authentication | ||||||
Brainwaves | ||||||
Facial Recognition | ||||||
Geo-localization (absolute or relative to computer system) | ||||||
Fingerprint Scan | ||||||
Gait Biometrics | ||||||
Hand Gestures | ||||||
Heartbeats | ||||||
Iris Scanner | ||||||
Keystroke Dynamics / Touchstroke Biometrics | ||||||
Knuckleprint Biometrics | ||||||
Multi-Modal Biometrics | ||||||
Palmprint Biometrics | ||||||
Voice Identification | ||||||
Certificate-based Authentication | ||||||
Hardware Token One-Time Passcode | ||||||
Email OTP | ||||||
Physical Token OTP | ||||||
Software / App OTP | ||||||
SMS OTP | ||||||
TAN Lists | ||||||
Voice OTP | ||||||
Password | ||||||
Graphical Password | ||||||
Personal Identification Number (PIN) | ||||||
Text Password | ||||||
Passphrase | ||||||
Security Question | ||||||
Single Sign-On (SSO) | SMS One-Time Passcode | Software App One-Time Passcode | ||||
Token-based Authentication | Session authentication |
Standards
- Compile a list of authentication standards, even obsolete ones, then map these to the authentication methods
- Password Authentication Protocol (PAP)
Challenge Handshake Authentication Protocol (CHAP)
Extensible Authentication Protocol (EAP)
GrIDsure
IP Security (IPSec)
Kerberos
Microsoft CHAP (MS-CHAP)
Microsoft NTLM
OAuth
OpenID Connect
Password Authentication Protocol (PAP)
RADIUS
SAML
Shiva PAP (SPAP)
U2F
WebAuthN