Chatbot - Wikipedia
Modern chatbots are typically online and use generative artificial intelligence systems that are capable of maintaining a conversation with a user in natural ...
authentication
Data security is one of the major concerns of chatbot technologies. Security threats and system vulnerabilities are weaknesses that are often exploited by malicious users. Storage of user data and past communication, that is highly valuable for training and development of chatbots, can also give rise to security threats.[93] Chatbots operating on third-party networks may be subject to various security issues if owners of the third-party applications have policies regarding user data that differ from those of the chatbot.[93] Security threats can be reduced or prevented by incorporating protective mechanisms. User <anchor>authentication</anchor>, chat End-to-end encryption, and self-destructing messages are some effective solutions to resist potential security threats.[93]
Authentication - Wikipedia
Authentication - Wikipedia[Jump to content](#bodyContent)

Main menu

Main menu

move to sidebarhide

Navigation


- [Main page](/wiki/Main_Page "Visit the main page [z]")
- [Contents](/wiki/Wikipedia:Contents "Guides to browsing Wikipedia")
- [Current events](/wiki/Portal:Current_events "Articles related to current events")
- [Random article](/wiki/Special:Random "Visit a randomly selected article [x]")
- [About Wikipedia](/wiki/Wikipedia:About "Learn about Wikipedia and how it works")
- [Contact us](//en.wikipedia.org/wiki/Wikipedia:Contact_us "How to contact Wikipedia")
- [Donate](https://donate.wikimedia.org/wiki/Special:FundraiserRedirector?utm_source=donate&utm_medium=sidebar&utm_campaign=C13_en.wikipedia.org&uselang=en "Support us by donating to the Wikimedia Foundation")

Contribute


- [Help](/wiki/Help:Contents "Guidance on how to use and edit Wikipedia")
- [Learn to edit](/wiki/Help:Introduction "Learn how to edit Wikipedia")
- [Community portal](/wiki/Wikipedia:Community_portal "The hub for editors")
- [Recent changes](/wiki/Special:RecentChanges "A list of recent changes to Wikipedia [r]")
- [Upload file](/wiki/Wikipedia:File_upload_wizard "Add images or other media for use on Wikipedia")

[![](/static/images/icons/wikipedia.png)![Wikipedia](/static/images/mobile/copyright/wikipedia-wordmark-en.svg)![The Free Encyclopedia](/static/images/mobile/copyright/wikipedia-tagline-en.svg)](/wiki/Main_Page)

[Search](/wiki/Special:Search "Search Wikipedia [f]")

Search

Appearance

- [Create account](/w/index.php?title=Special:CreateAccount&returnto=Authentication "You are encouraged to create an account and log in; however, it is not mandatory")
- [Log in](/w/index.php?title=Special:UserLogin&returnto=Authentication "You're encouraged to log in; however, it's not mandatory. [o]")

Personal tools

- [Create account](/w/index.php?title=Special:CreateAccount&returnto=Authentication "You are encouraged to create an account and log in; however, it is not mandatory")
- [Log in](/w/index.php?title=Special:UserLogin&returnto=Authentication "You're encouraged to log in; however, it's not mandatory. [o]")

Pages for logged out editors [learn more](/wiki/Help:Introduction)

- [Contributions](/wiki/Special:MyContributions "A list of edits made from this IP address [y]")
- [Talk](/wiki/Special:MyTalk "Discussion about edits from this IP address [n]")

## Contents

move to sidebarhide

- (Top)

- [1Methods](#Methods)
- [2Authentication factors](#Authentication_factors)Toggle Authentication factors subsection  - [2.1Single-factor authentication](#Single-factor_authentication)
  - [2.2Multi-factor authentication](#Multi-factor_authentication)
- [3Authentication types](#Authentication_types)Toggle Authentication types subsection  - [3.1Strong authentication](#Strong_authentication)
  - [3.2Continuous authentication](#Continuous_authentication)
  - [3.3Digital authentication](#Digital_authentication)
  - [3.4Product authentication](#Product_authentication)    - [3.4.1Packaging](#Packaging)
- [4Information content](#Information_content)Toggle Information content subsection  - [4.1Literacy and literature authentication](#Literacy_and_literature_authentication)
- [5History and state-of-the-art](#History_and_state-of-the-art)
- [6Authorization](#Authorization)
- [7Access control](#Access_control)
- [8See also](#See_also)
- [9References](#References)
- [10External links](#External_links)

Toggle the table of contents

# Authentication

50 languages

- [العربية](https://ar.wikipedia.org/wiki/%D9%85%D8%B5%D8%A7%D8%AF%D9%82%D8%A9_(%D8%AD%D9%88%D8%B3%D8%A8%D8%A9) "مصادقة (حوسبة) – Arabic")
- [Asturianu](https://ast.wikipedia.org/wiki/Autenticaci%C3%B3n "Autenticación – Asturian")
- [Azərbaycanca](https://az.wikipedia.org/wiki/Autentifikasiya "Autentifikasiya – Azerbaijani")
- [বাংলা](https://bn.wikipedia.org/wiki/%E0%A6%AA%E0%A7%8D%E0%A6%B0%E0%A6%AE%E0%A6%BE%E0%A6%A3%E0%A7%80%E0%A6%95%E0%A6%B0%E0%A6%A3 "প্রমাণীকরণ – Bangla")
- [Български](https://bg.wikipedia.org/wiki/%D0%90%D0%B2%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F "Автентикация – Bulgarian")
- [Català](https://ca.wikipedia.org/wiki/Autenticaci%C3%B3_(inform%C3%A0tica) "Autenticació (informàtica) – Catalan")
- [Čeština](https://cs.wikipedia.org/wiki/Autentizace "Autentizace – Czech")
- [Dansk](https://da.wikipedia.org/wiki/Autenticitet "Autenticitet – Danish")
- [Deutsch](https://de.wikipedia.org/wiki/Authentifizierung "Authentifizierung – German")
- [Eesti](https://et.wikipedia.org/wiki/Autentimine "Autentimine – Estonian")
- [Ελληνικά](https://el.wikipedia.org/wiki/%CE%91%CF%85%CE%B8%CE%B5%CE%BD%CF%84%CE%B9%CE%BA%CE%BF%CF%80%CE%BF%CE%AF%CE%B7%CF%83%CE%B7 "Αυθεντικοποίηση – Greek")
- [Español](https://es.wikipedia.org/wiki/Autenticaci%C3%B3n "Autenticación – Spanish")
- [Euskara](https://eu.wikipedia.org/wiki/Kautotze "Kautotze – Basque")
- [فارسی](https://fa.wikipedia.org/wiki/%D8%A7%D8%B5%D8%A7%D9%84%D8%AA%E2%80%8C%D8%B3%D9%86%D8%AC%DB%8C "اصالت‌سنجی – Persian")
- [Français](https://fr.wikipedia.org/wiki/Authentification "Authentification – French")
- [Galego](https://gl.wikipedia.org/wiki/Autenticaci%C3%B3n "Autenticación – Galician")
- [한국어](https://ko.wikipedia.org/wiki/%EC%9D%B8%EC%A6%9D "인증 – Korean")
- [Հայերեն](https://hy.wikipedia.org/wiki/%D5%8E%D5%A1%D5%BE%D5%A5%D6%80%D5%A1%D6%81%D5%B8%D6%82%D5%B4_(%D5%AB%D5%B6%D6%86%D5%B8%D6%80%D5%B4%D5%A1%D5%BF%D5%AB%D5%AF%D5%A1%D5%B5%D5%AB_%D5%B8%D5%AC%D5%B8%D6%80%D5%BF) "Վավերացում (ինֆորմատիկայի ոլորտ) – Armenian")
- [हिन्दी](https://hi.wikipedia.org/wiki/%E0%A4%85%E0%A4%A7%E0%A4%BF%E0%A4%AA%E0%A5%8D%E0%A4%B0%E0%A4%AE%E0%A4%BE%E0%A4%A3%E0%A4%A8 "अधिप्रमाणन – Hindi")
- [Hrvatski](https://hr.wikipedia.org/wiki/Autentifikacija "Autentifikacija – Croatian")
- [Bahasa Indonesia](https://id.wikipedia.org/wiki/Autentikasi "Autentikasi – Indonesian")
- [Italiano](https://it.wikipedia.org/wiki/Autenticazione "Autenticazione – Italian")
- [עברית](https://he.wikipedia.org/wiki/%D7%90%D7%99%D7%9E%D7%95%D7%AA_%D7%96%D7%94%D7%95%D7%AA "אימות זהות – Hebrew")
- [Kiswahili](https://sw.wikipedia.org/wiki/Uthibitishaji "Uthibitishaji – Swahili")
- [Latviešu](https://lv.wikipedia.org/wiki/Autentific%C4%93%C5%A1ana "Autentificēšana – Latvian")
- [മലയാളം](https://ml.wikipedia.org/wiki/%E0%B4%93%E0%B4%A4%E0%B4%A8%E0%B5%8D%E0%B4%B1%E0%B4%BF%E0%B4%95%E0%B5%8D%E0%B4%95%E0%B5%87%E0%B4%B7%E0%B5%BB "ഓതന്റിക്കേഷൻ – Malayalam")
- [Nederlands](https://nl.wikipedia.org/wiki/Authenticatie "Authenticatie – Dutch")
- [日本語](https://ja.wikipedia.org/wiki/%E8%AA%8D%E8%A8%BC "認証 – Japanese")
- [Norsk bokmål](https://no.wikipedia.org/wiki/Autentisering "Autentisering – Norwegian Bokmål")
- [Oʻzbekcha / ўзбекча](https://uz.wikipedia.org/wiki/Autentifikatsiya "Autentifikatsiya – Uzbek")
- [ਪੰਜਾਬੀ](https://pa.wikipedia.org/wiki/%E0%A8%AA%E0%A9%8D%E0%A8%B0%E0%A8%AE%E0%A8%BE%E0%A8%A3%E0%A8%BF%E0%A8%95%E0%A8%A4%E0%A8%BE "ਪ੍ਰਮਾਣਿਕਤਾ – Punjabi")
- [Polski](https://pl.wikipedia.org/wiki/Uwierzytelnianie "Uwierzytelnianie – Polish")
- [Português](https://pt.wikipedia.org/wiki/Autentica%C3%A7%C3%A3o "Autenticação – Portuguese")
- [Qaraqalpaqsha](https://kaa.wikipedia.org/wiki/Autentifikaciya "Autentifikaciya – Kara-Kalpak")
- [Română](https://ro.wikipedia.org/wiki/Autentificare "Autentificare – Romanian")
- [Русский](https://ru.wikipedia.org/wiki/%D0%90%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F "Аутентификация – Russian")
- [Simple English](https://simple.wikipedia.org/wiki/Authentication "Authentication – Simple English")
- [Slovenčina](https://sk.wikipedia.org/wiki/Autentifik%C3%A1cia "Autentifikácia – Slovak")
- [Slovenščina](https://sl.wikipedia.org/wiki/Overjanje_(ra%C4%8Dunalni%C5%A1tvo) "Overjanje (računalništvo) – Slovenian")
- [کوردی](https://ckb.wikipedia.org/wiki/%D8%B3%DB%95%D9%86%DA%AF%D8%A7%D9%86%D8%AF%D9%86%DB%8C_%DA%95%DB%95%D8%B3%DB%95%D9%86%D8%A7%DB%8C%DB%95%D8%AA%DB%8C "سەنگاندنی ڕەسەنایەتی – Central Kurdish")
- [Српски / srpski](https://sr.wikipedia.org/wiki/Autentikacija "Autentikacija – Serbian")
- [Suomi](https://fi.wikipedia.org/wiki/Todennus "Todennus – Finnish")
- [Svenska](https://sv.wikipedia.org/wiki/Autentisering "Autentisering – Swedish")
- [Türkçe](https://tr.wikipedia.org/wiki/Kimlik_do%C4%9Frulama "Kimlik doğrulama – Turkish")
- [Українська](https://uk.wikipedia.org/wiki/%D0%90%D0%B2%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D1%96%D0%BA%D0%B0%D1%86%D1%96%D1%8F "Автентифікація – Ukrainian")
- [اردو](https://ur.wikipedia.org/wiki/%D8%AA%D9%88%D8%AB%DB%8C%D9%82 "توثیق – Urdu")
- [Tiếng Việt](https://vi.wikipedia.org/wiki/X%C3%A1c_th%E1%BB%B1c "Xác thực – Vietnamese")
- [吴语](https://wuu.wikipedia.org/wiki/%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81 "身份验证 – Wu")
- [粵語](https://zh-yue.wikipedia.org/wiki/%E9%91%91%E5%88%A5 "鑑別 – Cantonese")
- [中文](https://zh.wikipedia.org/wiki/%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81 "身份验证 – Chinese")

[Edit links](https://www.wikidata.org/wiki/Special:EntityPage/Q212108#sitelinks-wikipedia "Edit interlanguage links")

- [Article](/wiki/Authentication "View the content page [c]")
- [Talk](/wiki/Talk:Authentication "Discuss improvements to the content page [t]")

English

- [Read](/wiki/Authentication)
- [Edit](/w/index.php?title=Authentication&action=edit "Edit this page [e]")
- [View history](/w/index.php?title=Authentication&action=history "Past revisions of this page [h]")

Tools

Tools

move to sidebarhide

Actions


- [Read](/wiki/Authentication)
- [Edit](/w/index.php?title=Authentication&action=edit "Edit this page [e]")
- [View history](/w/index.php?title=Authentication&action=history)

General


- [What links here](/wiki/Special:WhatLinksHere/Authentication "List of all English Wikipedia pages containing links to this page [j]")
- [Related changes](/wiki/Special:RecentChangesLinked/Authentication "Recent changes in pages linked from this page [k]")
- [Upload file](/wiki/Wikipedia:File_Upload_Wizard "Upload files [u]")
- [Special pages](/wiki/Special:SpecialPages "A list of all special pages [q]")
- [Permanent link](/w/index.php?title=Authentication&oldid=1238894105 "Permanent link to this revision of this page")
- [Page information](/w/index.php?title=Authentication&action=info "More information about this page")
- [Cite this page](/w/index.php?title=Special:CiteThisPage&page=Authentication&id=1238894105&wpFormIdentifier=titleform "Information on how to cite this page")
- [Get shortened URL](/w/index.php?title=Special:UrlShortener&url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FAuthentication)
- [Download QR code](/w/index.php?title=Special:QrCode&url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FAuthentication)
- [Wikidata item](https://www.wikidata.org/wiki/Special:EntityPage/Q212108 "Structured data on this page hosted by Wikidata [g]")

Print/export


- [Download as PDF](/w/index.php?title=Special:DownloadAsPdf&page=Authentication&action=show-download-screen "Download this page as a PDF file")
- [Printable version](/w/index.php?title=Authentication&printable=yes "Printable version of this page [p]")

In other projects


- [Wikimedia Commons](https://commons.wikimedia.org/wiki/Category:Authentication)

Appearance

move to sidebarhide

From Wikipedia, the free encyclopedia

Act of proving an assertion

Not to be confused with [Authenticity](/wiki/Authenticity_(disambiguation) "Authenticity (disambiguation)") or [Authorization](/wiki/Authorization "Authorization").

[![](//upload.wikimedia.org/wikipedia/commons/thumb/6/69/ATMUser.140209.jpg/220px-ATMUser.140209.jpg)](/wiki/File:ATMUser.140209.jpg) ATM user authenticating himself

**Authentication** (from [Greek](/wiki/Greek_language "Greek language"): αὐθεντικός _authentikos_, "real, genuine", from αὐθέντης _authentes_, "author") is the act of proving an [assertion](/wiki/Logical_assertion "Logical assertion"), such as the [identity](/wiki/Digital_identity "Digital identity") of a computer system user. In contrast with [identification](/wiki/Identity_(philosophy) "Identity (philosophy)"), the act of indicating a person or thing's identity, authentication is the process of verifying that identity.[\[1\]](#cite_note-:1-1) It might involve validating personal [identity documents](/wiki/Identity_document "Identity document"), verifying the authenticity of a [website](/wiki/Website "Website") with a [digital certificate](/wiki/Public_key_certificate "Public key certificate"),[\[2\]](#cite_note-Turner-DigitalAuthentication-Basics-2) determining the age of an artifact by [carbon dating](/wiki/Carbon_dating "Carbon dating"), or ensuring that a product or document is not [counterfeit](/wiki/Counterfeit "Counterfeit").

## Methods

\[ [edit](/w/index.php?title=Authentication&action=edit&section=1 "Edit section: Methods")\]

Main article: [Provenance](/wiki/Provenance "Provenance")

Authentication is relevant to multiple fields. In [art](/wiki/Art "Art"), [antiques](/wiki/Antique "Antique"), and [anthropology](/wiki/Anthropology "Anthropology"), a common problem is verifying that a given artifact was produced by a certain person or in a certain place or period of history. In [computer science](/wiki/Computer_science "Computer science"), verifying a user's identity is often required to allow access to confidential data or systems.[\[3\]](#cite_note-:0-3)

Authentication can be considered to be of three types:

The first type of authentication is accepting proof of identity given by a credible person who has first-hand evidence that the identity is genuine. When authentication is required of art or physical objects, this proof could be a friend, family member, or colleague attesting to the item's provenance, perhaps by having witnessed the item in its creator's possession. With autographed sports memorabilia, this could involve someone attesting that they witnessed the object being signed. A vendor selling branded items implies authenticity, while they may not have evidence that every step in the supply chain was authenticated. Centralized authority-based trust relationships back most secure internet communication through known public certificate authorities; decentralized peer-based trust, also known as a [web of trust](/wiki/Web_of_trust "Web of trust"), is used for personal services such as email or files and trust is established by known individuals signing each other's [cryptographic key](/wiki/Key_(cryptography) "Key (cryptography)") for instance.

The second type of authentication is comparing the attributes of the object itself to what is known about objects of that origin. For example, an art expert might look for similarities in the style of painting, check the location and form of a signature, or compare the object to an old photograph. An [archaeologist](/wiki/Archaeologist "Archaeologist"), on the other hand, might use carbon dating to verify the age of an artifact, do a chemical and [spectroscopic](/wiki/Spectroscopy "Spectroscopy") analysis of the materials used, or compare the style of construction or decoration to other artifacts of similar origin. The physics of sound and light, and comparison with a known physical environment, can be used to examine the authenticity of audio recordings, photographs, or videos. Documents can be verified as being created on ink or paper readily available at the time of the item's implied creation.

Attribute comparison may be vulnerable to forgery. In general, it relies on the facts that creating a forgery indistinguishable from a genuine artifact requires expert knowledge, that mistakes are easily made, and that the amount of effort required to do so is considerably greater than the amount of profit that can be gained from the forgery.

In art and antiques, certificates are of great importance for authenticating an object of interest and value. Certificates can, however, also be forged, and the authentication of these poses a problem. For instance, the son of [Han van Meegeren](/wiki/Han_van_Meegeren "Han van Meegeren"), the well-known art-forger, forged the work of his father and provided a certificate for its provenance as well.

Criminal and civil penalties for [fraud](/wiki/Fraud "Fraud"), [forgery](/wiki/Forgery "Forgery"), and counterfeiting can reduce the incentive for falsification, depending on the risk of getting caught.

Currency and other financial instruments commonly use this second type of authentication method. Bills, coins, and [cheques](/wiki/Cheque "Cheque") incorporate hard-to-duplicate physical features, such as fine printing or engraving, distinctive feel, watermarks, and holographic imagery, which are easy for trained receivers to verify.

The third type of authentication relies on documentation or other external affirmations. In criminal courts, the [rules of evidence](/wiki/Rules_of_evidence "Rules of evidence") often require establishing the [chain of custody](/wiki/Chain_of_custody "Chain of custody") of evidence presented. This can be accomplished through a written evidence log, or by testimony from the police detectives and forensics staff that handled it. Some antiques are accompanied by certificates attesting to their authenticity. Signed sports memorabilia is usually accompanied by a certificate of authenticity. These external records have their own problems of forgery and [perjury](/wiki/Perjury "Perjury") and are also vulnerable to being separated from the artifact and lost.

In computer science, a user can be given access to secure systems based on user credentials that imply authenticity.[\[4\]](#cite_note-4) A network administrator can give a user a password, or provide the user with a key card or other access devices to allow system access. In this case, authenticity is implied but not guaranteed.

[Consumer goods](/wiki/Consumer_goods "Consumer goods") such as pharmaceuticals, perfume, and clothing can use all forms of authentication to prevent counterfeit goods from taking advantage of a popular brand's reputation. As mentioned above, having an item for sale in a reputable store implicitly attests to it being genuine, the first type of authentication. The second type of authentication might involve comparing the quality and craftsmanship of an item, such as an expensive handbag, to genuine articles. The third type of authentication could be the presence of a [trademark](/wiki/Trademark "Trademark") on the item, which is a legally protected marking, or any other identifying feature which aids consumers in the identification of genuine brand-name goods. With software, companies have taken great steps to protect from counterfeiters, including adding holograms, security rings, security threads and color shifting ink.[\[5\]](#cite_note-5)

## Authentication factors

\[ [edit](/w/index.php?title=Authentication&action=edit&section=2 "Edit section: Authentication factors")\]

The ways in which someone may be authenticated fall into three categories, based on what is known as the factors of authentication: something the user knows, something the user has, and something the user is. Each authentication factor covers a range of elements used to authenticate or verify a person's identity before being granted access, approving a transaction request, signing a document or other work product, granting authority to others, and establishing a chain of authority.

Security research has determined that for a positive authentication, elements from at least two, and preferably all three, factors should be verified.[\[6\]](#cite_note-6) The three factors (classes) and some of the elements of each factor are:

1. Knowledge: Something the user knows (e.g., a password, [partial password](/wiki/Partial_password "Partial password"), [passphrase](/wiki/Pass_phrase "Pass phrase"), [personal identification number](/wiki/Personal_identification_number "Personal identification number") (PIN), [challenge–response](/wiki/Challenge%E2%80%93response "Challenge–response") (the user must answer a question or pattern), [security question](/wiki/Security_question "Security question")).
2. Ownership: Something the user has (e.g., wrist band, [ID card](/wiki/ID_card "ID card"), [security token](/wiki/Security_token "Security token"), [implanted device](/wiki/Microchip_implant_(human) "Microchip implant (human)"), cell phone with a built-in [hardware token](/wiki/Hardware_token "Hardware token"), [software token](/wiki/Software_token "Software token"), or cell phone holding a [software token](/wiki/Software_token "Software token")).
3. Inherence: Something the user is or does (e.g., fingerprint, [retinal pattern](/wiki/Retinal_scan "Retinal scan"), [DNA](/wiki/DNA "DNA") sequence (there are assorted definitions of what is sufficient), signature, face, voice, unique bio-electric signals, or other [biometric](/wiki/Biometric "Biometric") identifiers).

### Single-factor authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=3 "Edit section: Single-factor authentication")\]

As the weakest level of authentication, only a single component from one of the three categories of factors is used to authenticate an individual's identity. The use of only one factor does not offer much protection from misuse or malicious intrusion. This type of authentication is not recommended for financial or personally relevant transactions that warrant a higher level of security.[\[2\]](#cite_note-Turner-DigitalAuthentication-Basics-2)

### Multi-factor authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=4 "Edit section: Multi-factor authentication")\]

Main article: [Multi-factor authentication](/wiki/Multi-factor_authentication "Multi-factor authentication")

Multi-factor authentication involves two or more authentication factors (something you know, something you have, or something you are). Two-factor authentication is a special case of multi-factor authentication involving exactly two factors.[\[2\]](#cite_note-Turner-DigitalAuthentication-Basics-2)

For example, using a bank card (something the user has) along with a PIN (something the user knows) provides two-factor authentication. Business networks may require users to provide a password (knowledge factor) and a pseudorandom number from a security token (ownership factor). Access to a very-high-security system might require a [mantrap](/wiki/Mantrap_(access_control) "Mantrap (access control)") screening of height, weight, facial, and fingerprint checks (several inherence factor elements) plus a PIN and a day code (knowledge factor elements), but this is still a two-factor authentication.

## Authentication types

\[ [edit](/w/index.php?title=Authentication&action=edit&section=5 "Edit section: Authentication types")\]

### Strong authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=6 "Edit section: Strong authentication")\]

The United States government's [National Information Assurance Glossary](/wiki/National_Information_Assurance_Glossary "National Information Assurance Glossary") defines [strong authentication](/wiki/Strong_authentication "Strong authentication") as a layered authentication approach relying on two or more authenticators to establish the identity of an originator or receiver of information.[\[7\]](#cite_note-NCSC-StrongAuthentication-7)

The European Central Bank (ECB) has defined strong authentication as "a procedure based on two or more of the three authentication factors". The factors that are used must be mutually independent and at least one factor must be "non-reusable and non-replicable", except in the case of an inherence factor and must also be incapable of being stolen off the Internet. In the European, as well as in the US-American understanding, strong authentication is very similar to multi-factor authentication or 2FA, but exceeding those with more rigorous requirements.[\[2\]](#cite_note-Turner-DigitalAuthentication-Basics-2)[\[8\]](#cite_note-ECB-Recommendations-8)

The [FIDO Alliance](/wiki/FIDO_Alliance "FIDO Alliance") has been striving to establish technical specifications for strong authentication.[\[9\]](#cite_note-9)

### Continuous authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=7 "Edit section: Continuous authentication")\]

Conventional computer systems authenticate users only at the initial log-in session, which can be the cause of a critical security flaw. To resolve this problem, systems need continuous user authentication methods that continuously monitor and authenticate users based on some biometric trait(s). A study used behavioural biometrics based on writing styles as a continuous authentication method.[\[10\]](#cite_note-BROC2017-10)[\[11\]](#cite_note-Patel_49–61-11)

Recent research has shown the possibility of using smartphones sensors and accessories to extract some behavioral attributes such as touch dynamics, [keystroke dynamics](/wiki/Keystroke_dynamics "Keystroke dynamics") and [gait recognition](/wiki/Gait_recognition "Gait recognition").[\[12\]](#cite_note-12) These attributes are known as behavioral biometrics and could be used to verify or identify users implicitly and continuously on smartphones. The authentication systems that have been built based on these behavioral biometric traits are known as active or continuous authentication systems.[\[13\]](#cite_note-MAHFOUZ201728-13)[\[11\]](#cite_note-Patel_49–61-11)

### Digital authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=8 "Edit section: Digital authentication")\]

The term digital authentication, also known as [electronic authentication](/wiki/Electronic_authentication "Electronic authentication") or e-authentication, refers to a group of processes where the confidence for user identities is established and presented via electronic methods to an information system. The digital authentication process creates technical challenges because of the need to authenticate individuals or entities remotely over a network.
The American [National Institute of Standards and Technology](/wiki/National_Institute_of_Standards_and_Technology "National Institute of Standards and Technology") (NIST) has created a generic model for digital authentication that describes the processes that are used to accomplish secure authentication:

1. Enrollment – an individual applies to a credential service provider (CSP) to initiate the enrollment process. After successfully proving the applicant's identity, the CSP allows the applicant to become a subscriber.
2. Authentication – After becoming a subscriber, the user receives an [authenticator](/wiki/Authenticator "Authenticator") e.g., a token and credentials, such as a user name. He or she is then permitted to perform online transactions within an authenticated session with a relying party, where they must provide proof that he or she possesses one or more authenticators.
3. Life-cycle maintenance – the CSP is charged with the task of maintaining the user's credential over the course of its lifetime, while the subscriber is responsible for maintaining his or her authenticator(s).[\[2\]](#cite_note-Turner-DigitalAuthentication-Basics-2)[\[14\]](#cite_note-NIST-Authentication-14)

The authentication of information can pose special problems with electronic communication, such as vulnerability to [man-in-the-middle attacks](/wiki/Man-in-the-middle_attack "Man-in-the-middle attack"), whereby a third party taps into the communication stream, and poses as each of the two other communicating parties, in order to intercept information from each. Extra identity factors can be required to authenticate each party's identity.

### Product authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=9 "Edit section: Product authentication")\]

[![](//upload.wikimedia.org/wikipedia/commons/thumb/d/da/GatewayTracingHologramLabel.jpg/220px-GatewayTracingHologramLabel.jpg)](/wiki/File:GatewayTracingHologramLabel.jpg) A [security hologram](/wiki/Security_hologram "Security hologram") label on an electronics box for authentication

Counterfeit products are often offered to consumers as being authentic. [Counterfeit consumer goods](/wiki/Counterfeit_consumer_goods "Counterfeit consumer goods"), such as electronics, music, apparel, and [counterfeit medications](/wiki/Counterfeit_medications "Counterfeit medications"), have been sold as being legitimate. Efforts to control the [supply chain](/wiki/Supply_chain "Supply chain") and educate consumers help ensure that authentic products are sold and used. Even [security printing](/wiki/Security_printing "Security printing") on packages, labels, and nameplates, however, is subject to counterfeiting.[\[15\]](#cite_note-15)

In their anti-counterfeiting technology guide,[\[16\]](#cite_note-16) the [EUIPO](/wiki/EUIPO "EUIPO") Observatory on Infringements of Intellectual Property Rights categorizes the main anti-counterfeiting technologies on the market currently into five main categories: electronic, marking, chemical and physical, mechanical, and technologies for digital media.[\[17\]](#cite_note-17)

Products or their packaging can include a variable [QR Code](/wiki/QR_Code "QR Code"). A QR Code alone is easy to verify but offers a weak level of authentication as it offers no protection against counterfeits unless scan data is analyzed at the system level to detect anomalies.[\[18\]](#cite_note-18) To increase the security level, the QR Code can be combined with a [digital watermark](/wiki/Digital_watermark "Digital watermark") or [copy detection pattern](/wiki/Copy_detection_pattern "Copy detection pattern") that are robust to copy attempts and can be authenticated with a smartphone.

A [secure key storage device](/wiki/Secure_cryptoprocessor "Secure cryptoprocessor") can be used for authentication in consumer electronics, network authentication, license management, supply chain management, etc. Generally, the device to be authenticated needs some sort of wireless or wired digital connection to either a host system or a network. Nonetheless, the component being authenticated need not be electronic in nature as an authentication chip can be mechanically attached and read through a connector to the host e.g. an authenticated ink tank for use with a printer. For products and services that these secure coprocessors can be applied to, they can offer a solution that can be much more difficult to counterfeit than most other options while at the same time being more easily verified.[\[1\]](#cite_note-:1-1)

#### Packaging

\[ [edit](/w/index.php?title=Authentication&action=edit&section=10 "Edit section: Packaging")\]

Packaging and labeling can be engineered to help reduce the risks of counterfeit consumer goods or the theft and resale of products.[\[19\]](#cite_note-19)[\[20\]](#cite_note-20) Some package constructions are more difficult to copy and some have pilfer indicating seals. Counterfeit goods, unauthorized sales (diversion), material substitution and tampering can all be reduced with these anti-counterfeiting technologies. Packages may include authentication seals and use [security printing](/wiki/Security_printing "Security printing") to help indicate that the package and contents are not counterfeit; these too are subject to counterfeiting. Packages also can include anti-theft devices, such as dye-packs, [RFID](/wiki/Radio-frequency_identification "Radio-frequency identification") tags, or [electronic article surveillance](/wiki/Electronic_article_surveillance "Electronic article surveillance")[\[21\]](#cite_note-21) tags that can be activated or detected by devices at exit points and require specialized tools to deactivate. Anti-counterfeiting technologies that can be used with packaging include:

- [Taggant](/wiki/Taggant "Taggant") fingerprinting – uniquely coded microscopic materials that are verified from a database
- Encrypted micro-particles – unpredictably placed markings (numbers, layers and colors) not visible to the human eye
- [Holograms](/wiki/Hologram "Hologram") – graphics printed on seals, patches, foils or labels and used at the point of sale for visual verification
- Micro-printing – second-line authentication often used on currencies
- Serialized [barcodes](/wiki/Barcode "Barcode")
- UV printing – marks only visible under UV light
- [Track and trace](/wiki/Track_and_trace "Track and trace") systems – use codes to link products to the database tracking system
- Water indicators – become visible when contacted with water
- DNA tracking – genes embedded onto labels that can be traced
- Color-shifting ink or film – visible marks that switch colors or texture when tilted
- [Tamper evident](/wiki/Tamper_evident "Tamper evident") seals and tapes – destructible or graphically verifiable at point of sale
- 2d barcodes – data codes that can be tracked
- RFID chips
- [NFC](/wiki/Near-field_communication "Near-field communication") chips

## Information content

\[ [edit](/w/index.php?title=Authentication&action=edit&section=11 "Edit section: Information content")\]

[Literary forgery](/wiki/Literary_forgery "Literary forgery") can involve imitating the style of a famous author. If an original [manuscript](/wiki/Manuscript "Manuscript"), typewritten text, or recording is available, then the medium itself (or its packaging – anything from a box to [e-mail headers](/wiki/E-mail_headers "E-mail headers")) can help prove or disprove the authenticity of the document. However, text, audio, and video can be copied into new media, possibly leaving only the informational content itself to use in authentication. Various systems have been invented to allow authors to provide a means for readers to reliably authenticate that a given message originated from or was relayed by them. These involve authentication factors like:

- A difficult-to-reproduce physical artifact, such as a [seal](/wiki/Seal_(device) "Seal (device)"), [signature](/wiki/Signature "Signature"), [watermark](/wiki/Watermark "Watermark"), special [stationery](/wiki/Stationery "Stationery"), or fingerprint.
- A [shared secret](/wiki/Shared_secret "Shared secret"), such as a passphrase, in the content of the message.
- An [electronic signature](/wiki/Electronic_signature "Electronic signature"); [public-key infrastructure](/wiki/Public-key_infrastructure "Public-key infrastructure") is often used to cryptographically guarantee that a message has been signed by the holder of a particular private key.

The opposite problem is the detection of [plagiarism](/wiki/Plagiarism "Plagiarism"), where information from a different author is passed off as a person's own work. A common technique for proving plagiarism is the discovery of another copy of the same or very similar text, which has different attribution. In some cases, excessively high quality or a style mismatch may raise suspicion of plagiarism.

### Literacy and literature authentication

\[ [edit](/w/index.php?title=Authentication&action=edit&section=12 "Edit section: Literacy and literature authentication")\]

In literacy, authentication is a readers’ process of questioning the veracity of an aspect of literature and then verifying those questions via research. The fundamental question for authentication of literature is – Does one believe it? Related to that, an authentication project is therefore a reading and writing activity in which students document the relevant research process ([\[22\]](#cite_note-22)). It builds students' critical literacy. The documentation materials for literature go beyond narrative texts and likely include informational texts, primary sources, and multimedia. The process typically involves both internet and hands-on library research. When authenticating historical fiction in particular, readers consider the extent that the major historical events, as well as the culture portrayed (e.g., the language, clothing, food, gender roles), are believable for the period.[\[3\]](#cite_note-:0-3)

## History and state-of-the-art

\[ [edit](/w/index.php?title=Authentication&action=edit&section=13 "Edit section: History and state-of-the-art")\]

[![](//upload.wikimedia.org/wikipedia/commons/thumb/f/fc/KAL-55B_Tactical_Authentication_System_%28Vietnam_War_era%29_-_National_Cryptologic_Museum_-_DSC08013.JPG/220px-KAL-55B_Tactical_Authentication_System_%28Vietnam_War_era%29_-_National_Cryptologic_Museum_-_DSC08013.JPG)](/wiki/File:KAL-55B_Tactical_Authentication_System_(Vietnam_War_era)_-_National_Cryptologic_Museum_-_DSC08013.JPG) NSA KAL-55B Tactical Authentication System used by the U.S. military during the [Vietnam War](/wiki/Vietnam_War "Vietnam War") – [National Cryptologic Museum](/wiki/National_Cryptologic_Museum "National Cryptologic Museum")

Historically, fingerprints have been used as the most authoritative method of authentication, but court cases in the US and elsewhere have raised fundamental doubts about fingerprint reliability.[\[23\]](#cite_note-23) Outside of the legal system as well, fingerprints are easily [spoofable](/wiki/Spoofing_attack "Spoofing attack"), with [British Telecom](/wiki/British_Telecom "British Telecom")'s top computer security official noting that "few" fingerprint readers have not already been tricked by one spoof or another.[\[24\]](#cite_note-24) Hybrid or two-tiered authentication methods offer a compelling\[ _[according to whom?](/wiki/Wikipedia:Manual_of_Style/Words_to_watch#Unsupported_attributions "Wikipedia:Manual of Style/Words to watch")_\] solution, such as private keys encrypted by fingerprint inside of a USB device.

In a computer data context, cryptographic methods have been developed which are not spoofable if the originator's key has not been compromised. That the originator (or anyone other than an [attacker](/wiki/Adversary_(cryptography) "Adversary (cryptography)")) knows (or doesn't know) about a compromise is irrelevant. However, it is not known whether these cryptographically based authentication methods are provably secure, since unanticipated mathematical developments may make them vulnerable to attack in the future. If that were to occur, it may call into question much of the authentication in the past. In particular, a [digitally signed](/wiki/Digital_signature "Digital signature") [contract](/wiki/Legal_instrument "Legal instrument") may be questioned when a new attack on the cryptography underlying the signature is discovered.\[ _[citation needed](/wiki/Wikipedia:Citation_needed "Wikipedia:Citation needed")_\]

## Authorization

\[ [edit](/w/index.php?title=Authentication&action=edit&section=14 "Edit section: Authorization")\]

[![](//upload.wikimedia.org/wikipedia/commons/thumb/4/42/US_Navy_050308-N-2385R-029_Master-at-Arms_Seaman_Carly_Farmer_checks_an_identification_card_%28ID%29_before_allowing_a_driver_to_enter_the_gate_at_U.S._Fleet_Activities_Sasebo%2C_Japan.jpg/220px-thumbnail.jpg)](/wiki/File:US_Navy_050308-N-2385R-029_Master-at-Arms_Seaman_Carly_Farmer_checks_an_identification_card_(ID)_before_allowing_a_driver_to_enter_the_gate_at_U.S._Fleet_Activities_Sasebo,_Japan.jpg) A military police officer checks a driver's identification card before allowing her to enter a military base.

The process of [authorization](/wiki/Authorization "Authorization") is distinct from that of authentication. Whereas authentication is the process of verifying that "you are who you say you are", authorization is the process of verifying that "you are permitted to do what you are trying to do". While authorization often happens immediately after authentication (e.g., when logging into a computer system), this does not mean authorization presupposes authentication: an anonymous agent could be authorized to a limited action set.[\[25\]](#cite_note-25)

## Access control

\[ [edit](/w/index.php?title=Authentication&action=edit&section=15 "Edit section: Access control")\]

One familiar use of authentication and authorization is [access control](/wiki/Access_control "Access control"). A computer system that is supposed to be used only by those authorized must attempt to detect and exclude the unauthorized. Access to it is therefore usually controlled by insisting on an authentication procedure to establish with some degree of confidence the identity of the user, granting privileges established for that identity.

## See also

\[ [edit](/w/index.php?title=Authentication&action=edit&section=16 "Edit section: See also")\]

- [Authentication protocol](/wiki/Authentication_protocol "Authentication protocol")
- [Electronic signature](/wiki/Electronic_signature "Electronic signature")

## References

\[ [edit](/w/index.php?title=Authentication&action=edit&section=17 "Edit section: References")\]

01. ^ [_**a**_](#cite_ref-:1_1-0) [_**b**_](#cite_ref-:1_1-1)["What is Authentication? Definition of Authentication, Authentication Meaning"](https://economictimes.indiatimes.com/definition/authentication). _The Economic Times_. Retrieved 2020-11-15.
02. ^ [_**a**_](#cite_ref-Turner-DigitalAuthentication-Basics_2-0) [_**b**_](#cite_ref-Turner-DigitalAuthentication-Basics_2-1) [_**c**_](#cite_ref-Turner-DigitalAuthentication-Basics_2-2) [_**d**_](#cite_ref-Turner-DigitalAuthentication-Basics_2-3) [_**e**_](#cite_ref-Turner-DigitalAuthentication-Basics_2-4)Turner, Dawn M. ["Digital Authentication: The Basics"](http://www.cryptomathic.com/news-events/blog/digital-authentication-the-basics). Cryptomathic. [Archived](https://web.archive.org/web/20160814214552/http://www.cryptomathic.com/news-events/blog/digital-authentication-the-basics) from the original on 14 August 2016. Retrieved 9 August 2016.
03. ^ [_**a**_](#cite_ref-:0_3-0) [_**b**_](#cite_ref-:0_3-1)McTigue, E.; Thornton, E.; Wiese, P. (2013). ["Authentication Projects for Historical Fiction: Do you believe it?"](http://eric.ed.gov/?id=EJ1012775). _The Reading Teacher_. **66** (6): 495–505. [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1002/trtr.1132](https://doi.org/10.1002%2Ftrtr.1132). [Archived](https://web.archive.org/web/20150707211148/http://eric.ed.gov/?id=EJ1012775) from the original on 2015-07-07.
04. **[^](#cite_ref-4)**Ranjan, Pratik; Om, Hari (2016-05-06). ["An Efficient Remote User Password Authentication Scheme based on Rabin's Cryptosystem"](http://link.springer.com/10.1007/s11277-016-3342-5). _Wireless Personal Communications_. **90** (1): 217–244. [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1007/s11277-016-3342-5](https://doi.org/10.1007%2Fs11277-016-3342-5). [ISSN](/wiki/ISSN_(identifier) "ISSN (identifier)") [0929-6212](https://search.worldcat.org/issn/0929-6212). [S2CID](/wiki/S2CID_(identifier) "S2CID (identifier)") [21912076](https://api.semanticscholar.org/CorpusID:21912076).
05. **[^](#cite_ref-5)**["How to Tell – Software"](http://www.microsoft.com/en-us/howtotell/Software.aspx). _microsoft.com_. [Archived](https://web.archive.org/web/20161220103343/http://www.microsoft.com/en-us/howtotell/Software.aspx) from the original on 20 December 2016. Retrieved 11 December 2016.
06. **[^](#cite_ref-6)**Federal Financial Institutions Examination Council (2008). ["Authentication in an Internet Banking Environment"](https://www.ffiec.gov/pdf/authentication_guidance.pdf)(PDF). [Archived](https://web.archive.org/web/20100505203410/http://www.ffiec.gov/pdf/authentication_guidance.pdf)(PDF) from the original on 2010-05-05. Retrieved 2009-12-31.
07. **[^](#cite_ref-NCSC-StrongAuthentication_7-0)**Committee on National Security Systems. ["National Information Assurance (IA) Glossary"](https://www.ncsc.gov/nittf/docs/CNSSI-4009_National_Information_Assurance.pdf)(PDF). National Counterintelligence and Security Center. [Archived](https://web.archive.org/web/20161121224542/https://www.ncsc.gov/nittf/docs/CNSSI-4009_National_Information_Assurance.pdf)(PDF) from the original on 21 November 2016. Retrieved 9 August 2016.
08. **[^](#cite_ref-ECB-Recommendations_8-0)**European Central Bank. ["Recommendations for the Security of Internet Payments"](https://www.ecb.europa.eu/pub/pdf/other/recommendationssecurityinternetpaymentsoutcomeofpcfinalversionafterpc201301en.pdf)(PDF). European Central Bank. [Archived](https://web.archive.org/web/20161106212218/https://www.ecb.europa.eu/pub/pdf/other/recommendationssecurityinternetpaymentsoutcomeofpcfinalversionafterpc201301en.pdf)(PDF) from the original on 6 November 2016. Retrieved 9 August 2016.
09. **[^](#cite_ref-9)**["FIDO Alliance Passes 150 Post-Password Certified Products"](http://www.infosecurity-magazine.com/news/fido-alliance-passes-150/). InfoSecurity Magazine. 2016-04-05. [Archived](https://web.archive.org/web/20160617090024/http://www.infosecurity-magazine.com/news/fido-alliance-passes-150/) from the original on 2016-06-17. Retrieved 2016-06-13.
10. **[^](#cite_ref-BROC2017_10-0)**Brocardo ML, Traore I, Woungang I, Obaidat MS. " [Authorship verification using deep belief network systems](http://onlinelibrary.wiley.com/doi/10.1002/dac.3259/full) [Archived](https://web.archive.org/web/20170322015517/http://onlinelibrary.wiley.com/doi/10.1002/dac.3259/full) 2017-03-22 at the [Wayback Machine](/wiki/Wayback_Machine "Wayback Machine")". Int J Commun Syst. 2017. [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1002/dac.3259](https://doi.org/10.1002%2Fdac.3259)
11. ^ [_**a**_](#cite_ref-Patel_49–61_11-0) [_**b**_](#cite_ref-Patel_49–61_11-1)Patel, Vishal M.; Chellappa, Rama; Chandra, Deepak; Barbello, Brandon (July 2016). "Continuous User Authentication on Mobile Devices: Recent progress and remaining challenges". _IEEE Signal Processing Magazine_. **33** (4): 49–61. [Bibcode](/wiki/Bibcode_(identifier) "Bibcode (identifier)"): [2016ISPM...33...49P](https://ui.adsabs.harvard.edu/abs/2016ISPM...33...49P). [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1109/msp.2016.2555335](https://doi.org/10.1109%2Fmsp.2016.2555335). [ISSN](/wiki/ISSN_(identifier) "ISSN (identifier)") [1053-5888](https://search.worldcat.org/issn/1053-5888). [S2CID](/wiki/S2CID_(identifier) "S2CID (identifier)") [14179050](https://api.semanticscholar.org/CorpusID:14179050).
12. **[^](#cite_ref-12)**De Marsico, Maria; Fartade, Eduard Gabriel; Mecca, Alessio (2018). "Feature-based Analysis of Gait Signals for Biometric Recognition - Automatic Extraction and Selection of Features from Accelerometer Signals". _Proceedings of the 7th International Conference on Pattern Recognition Applications and Methods_. SCITEPRESS - Science and Technology Publications. pp. 630–637. [doi](/wiki/Doi_(identifier) "Doi (identifier)"):[10.5220/0006719106300637](https://doi.org/10.5220%2F0006719106300637). [ISBN](/wiki/ISBN_(identifier) "ISBN (identifier)") [978-989-758-276-9](/wiki/Special:BookSources/978-989-758-276-9 "Special:BookSources/978-989-758-276-9").
13. **[^](#cite_ref-MAHFOUZ201728_13-0)**Mahfouz, Ahmed; Mahmoud, Tarek M.; Eldin, Ahmed Sharaf (2017). "A survey on behavioral biometric authentication on smartphones". _Journal of Information Security and Applications_. **37**: 28–37. [arXiv](/wiki/ArXiv_(identifier) "ArXiv (identifier)"):[1801.09308](https://arxiv.org/abs/1801.09308). [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1016/j.jisa.2017.10.002](https://doi.org/10.1016%2Fj.jisa.2017.10.002). [S2CID](/wiki/S2CID_(identifier) "S2CID (identifier)") [21265344](https://api.semanticscholar.org/CorpusID:21265344).
14. **[^](#cite_ref-NIST-Authentication_14-0)**["Draft NIST Special Publication 800-63-3: Digital Authentication Guideline"](https://pages.nist.gov/800-63-3/sp800-63-3.html). National Institute of Standards and Technology, USA. [Archived](https://web.archive.org/web/20160913153728/https://pages.nist.gov/800-63-3/sp800-63-3.html) from the original on 13 September 2016. Retrieved 9 August 2016.
15. **[^](#cite_ref-15)**Graham, Marty (2007-02-07). ["Fake Holograms a 3-D Crime Wave"](https://www.wired.com/2007/02/2163064/). _Wired_. [ISSN](/wiki/ISSN_(identifier) "ISSN (identifier)") [1059-1028](https://search.worldcat.org/issn/1059-1028). Retrieved 2020-04-24.
16. **[^](#cite_ref-16)**["EUIPO Anti-Counterfeiting Technology Guide"](https://www.euipo.europa.eu/en/publications/anti-counterfeiting-technology-guide). _European Observatory on Infringements of Intellectual Property Rights_. 2021-02-26. [Archived](https://web.archive.org/web/20210317234513/https://euipo.europa.eu/ohimportal/en/web/observatory/news/-/action/view/8550135) from the original on 2021-03-17.
17. **[^](#cite_ref-17)**Linsner, Bristows LLP-Marc (2 March 2021). ["EUIPO Observatory publishes Anti-counterfeiting Technology Guide \| Lexology"](https://www.lexology.com/library/detail.aspx?g=91842dca-ae41-424a-867c-d8c9c53b68a0). _www.lexology.com_. Retrieved 2021-03-18.
18. **[^](#cite_ref-18)**_Survey of techniques for the fight against counterfeit goods and Intellectual Property Rights (IPR) infringement_. Baldini, Gianmarco., Nai Fovino, Igor., Satta, Riccardo., Tsois, Aris., Checchi, Enrico., European Commission. Joint Research Centre. Luxembourg: Publications Office. 2015. [ISBN](/wiki/ISBN_(identifier) "ISBN (identifier)") [978-92-79-54543-6](/wiki/Special:BookSources/978-92-79-54543-6 "Special:BookSources/978-92-79-54543-6"). [OCLC](/wiki/OCLC_(identifier) "OCLC (identifier)") [948769705](https://search.worldcat.org/oclc/948769705).`{{cite book}}`: CS1 maint: others ( [link](/wiki/Category:CS1_maint:_others "Category:CS1 maint: others"))
19. **[^](#cite_ref-19)**Eliasson, C; Matousek (2007). "Noninvasive Authentication of Pharmaceutical Products through Packaging Using Spatially Offset Raman Spectroscopy". _Analytical Chemistry_. **79** (4): 1696–1701. [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1021/ac062223z](https://doi.org/10.1021%2Fac062223z). [PMID](/wiki/PMID_(identifier) "PMID (identifier)") [17297975](https://pubmed.ncbi.nlm.nih.gov/17297975).
20. **[^](#cite_ref-20)**Li, Ling (March 2013). "Technology designed to combat fakes in the global supply chain". _Business Horizons_. **56** (2): 167–177. [doi](/wiki/Doi_(identifier) "Doi (identifier)"): [10.1016/j.bushor.2012.11.010](https://doi.org/10.1016%2Fj.bushor.2012.11.010).
21. **[^](#cite_ref-21)**[How Anti-shoplifting Devices Work"](http://electronics.howstuffworks.com/anti-shoplifting-device.htm) [Archived](https://web.archive.org/web/20060427081528/http://electronics.howstuffworks.com/anti-shoplifting-device.htm) 2006-04-27 at the [Wayback Machine](/wiki/Wayback_Machine "Wayback Machine"), HowStuffWorks.com
22. **[^](#cite_ref-22)**Norton, D. E. (2004). _The effective teaching of language arts_. New York: Pearson/Merrill/Prentice Hall.
23. **[^](#cite_ref-23)**Moenssens, Andre A.; Meagher, Stephen B. (2014). "13". [_The Fingerprint Sourcebook_](https://www.ojp.gov/pdffiles1/nij/225333.pdf)(PDF). United States: CreateSpace Independent Publishing Platform. [ISBN](/wiki/ISBN_(identifier) "ISBN (identifier)") [9781500674151](/wiki/Special:BookSources/9781500674151 "Special:BookSources/9781500674151"). [Archived](https://web.archive.org/web/20220522184117/https://www.ojp.gov/pdffiles1/nij/225333.pdf)(PDF) from the original on 22 May 2022. Retrieved 3 November 2022.
24. **[^](#cite_ref-24)**[_The Register_, UK; Dan Goodin; 30 March 2008; _Get your German Interior Minister's fingerprint, here_. Compared to other solutions, "It's basically like leaving the password to your computer everywhere you go, without you being able to control it anymore", one of the hackers comments.](https://www.theregister.co.uk/2008/03/30/german_interior_minister_fingerprint_appropriated) [Archived](https://web.archive.org/web/20170810131615/https://www.theregister.co.uk/2008/03/30/german_interior_minister_fingerprint_appropriated) 10 August 2017 at the [Wayback Machine](/wiki/Wayback_Machine "Wayback Machine")
25. **[^](#cite_ref-25)**["Best Practices for Creating a Secure Guest Account"](https://technet.microsoft.com/en-us/library/ff687018.aspx). 31 August 2016. [Archived](https://web.archive.org/web/20171107060852/https://technet.microsoft.com/en-us/library/ff687018.aspx) from the original on 2017-11-07. Retrieved 2017-11-06.

## External links

\[ [edit](/w/index.php?title=Authentication&action=edit&section=18 "Edit section: External links")\]

- [National Institute of Standards and Technology](/wiki/National_Institute_of_Standards_and_Technology "National Institute of Standards and Technology"), [U.S. Department of Commerce](/wiki/U.S._Department_of_Commerce "U.S. Department of Commerce") (August 2013). ["Electronic Authentication Guideline – NIST Special Publication 800-63-2"](http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63-2.pdf)(PDF). [Archived](https://web.archive.org/web/20131003163229/http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63-2.pdf)(PDF) from the original on 2013-10-03.
- ["New NIST Publications Describe Standards for Identity Credentials and Authentication Systems"](https://www.nist.gov/itl/csd/piv_090809.cfm)

- [v](/wiki/Template:Information_security "Template:Information security")
- [t](/wiki/Template_talk:Information_security "Template talk:Information security")
- [e](/wiki/Special:EditPage/Template:Information_security "Special:EditPage/Template:Information security")

[Information security](/wiki/Information_security "Information security")

Related security categories

- [Computer security](/wiki/Computer_security "Computer security")
- [Automotive security](/wiki/Automotive_security "Automotive security")
- [Cybercrime](/wiki/Cybercrime "Cybercrime")
  - [Cybersex trafficking](/wiki/Cybersex_trafficking "Cybersex trafficking")
  - [Computer fraud](/wiki/Computer_fraud "Computer fraud")
- [Cybergeddon](/wiki/Cybergeddon "Cybergeddon")
- [Cyberterrorism](/wiki/Cyberterrorism "Cyberterrorism")
- [Cyberwarfare](/wiki/Cyberwarfare "Cyberwarfare")
- [Electromagnetic warfare](/wiki/Electromagnetic_warfare "Electromagnetic warfare")
- [Information warfare](/wiki/Information_warfare "Information warfare")
- [Internet security](/wiki/Internet_security "Internet security")
- [Mobile security](/wiki/Mobile_security "Mobile security")
- [Network security](/wiki/Network_security "Network security")
- [Copy protection](/wiki/Copy_protection "Copy protection")
- [Digital rights management](/wiki/Digital_rights_management "Digital rights management")

[![vectorial version](//upload.wikimedia.org/wikipedia/commons/thumb/c/c5/CIAJMK1209-en.svg/150px-CIAJMK1209-en.svg.png)](/wiki/File:CIAJMK1209-en.svg "vectorial version") vectorial version

[Threats](/wiki/Threat_(computer) "Threat (computer)")

- [Adware](/wiki/Adware "Adware")
- [Advanced persistent threat](/wiki/Advanced_persistent_threat "Advanced persistent threat")
- [Arbitrary code execution](/wiki/Arbitrary_code_execution "Arbitrary code execution")
- [Backdoors](/wiki/Backdoor_(computing) "Backdoor (computing)")
- Bombs
  - [Fork](/wiki/Fork_bomb "Fork bomb")
  - [Logic](/wiki/Logic_bomb "Logic bomb")
  - [Time](/wiki/Time_bomb_(software) "Time bomb (software)")
  - [Zip](/wiki/Zip_bomb "Zip bomb")
- [Hardware backdoors](/wiki/Hardware_backdoor "Hardware backdoor")
- [Code injection](/wiki/Code_injection "Code injection")
- [Crimeware](/wiki/Crimeware "Crimeware")
- [Cross-site scripting](/wiki/Cross-site_scripting "Cross-site scripting")
- [Cross-site leaks](/wiki/Cross-site_leaks "Cross-site leaks")
- [DOM clobbering](/wiki/DOM_clobbering "DOM clobbering")
- [History sniffing](/wiki/History_sniffing "History sniffing")
- [Cryptojacking](/wiki/Cryptojacking "Cryptojacking")
- [Botnets](/wiki/Botnet "Botnet")
- [Data breach](/wiki/Data_breach "Data breach")
- [Drive-by download](/wiki/Drive-by_download "Drive-by download")
- [Browser Helper Objects](/wiki/Browser_Helper_Object "Browser Helper Object")
- [Viruses](/wiki/Computer_virus "Computer virus")
- [Data scraping](/wiki/Data_scraping "Data scraping")
- [Denial-of-service attack](/wiki/Denial-of-service_attack "Denial-of-service attack")
- [Eavesdropping](/wiki/Eavesdropping "Eavesdropping")
- [Email fraud](/wiki/Email_fraud "Email fraud")
- [Email spoofing](/wiki/Email_spoofing "Email spoofing")
- [Exploits](/wiki/Exploit_(computer_security) "Exploit (computer security)")
- [Fraudulent dialers](/wiki/Dialer#Fraudulent_dialer "Dialer")
- [Hacktivism](/wiki/Hacktivism "Hacktivism")
- [Infostealer](/wiki/Infostealer "Infostealer")
- [Insecure direct object reference](/wiki/Insecure_direct_object_reference "Insecure direct object reference")
- [Keystroke loggers](/wiki/Keystroke_logging "Keystroke logging")
- [Malware](/wiki/Malware "Malware")
- [Payload](/wiki/Payload_(computing) "Payload (computing)")
- [Phishing](/wiki/Phishing "Phishing")
  - [Voice](/wiki/Voice_phishing "Voice phishing")
- [Polymorphic engine](/wiki/Polymorphic_engine "Polymorphic engine")
- [Privilege escalation](/wiki/Privilege_escalation "Privilege escalation")
- [Ransomware](/wiki/Ransomware "Ransomware")
- [Rootkits](/wiki/Rootkit "Rootkit")
- [Scareware](/wiki/Scareware "Scareware")
- [Shellcode](/wiki/Shellcode "Shellcode")
- [Spamming](/wiki/Spamming "Spamming")
- [Social engineering](/wiki/Social_engineering_(security) "Social engineering (security)")
- [Spyware](/wiki/Spyware "Spyware")
- [Software bugs](/wiki/Software_bug "Software bug")
- [Trojan horses](/wiki/Trojan_horse_(computing) "Trojan horse (computing)")
- [Hardware Trojans](/wiki/Hardware_Trojan "Hardware Trojan")
- [Remote access trojans](/wiki/Remote_access_trojan "Remote access trojan")
- [Vulnerability](/wiki/Vulnerability_(computing) "Vulnerability (computing)")
- [Web shells](/wiki/Web_shell "Web shell")
- [Wiper](/wiki/Wiper_(malware) "Wiper (malware)")
- [Worms](/wiki/Computer_worm "Computer worm")
- [SQL injection](/wiki/SQL_injection "SQL injection")
- [Rogue security software](/wiki/Rogue_security_software "Rogue security software")
- [Zombie](/wiki/Zombie_(computing) "Zombie (computing)")

Defenses

- [Application security](/wiki/Application_security "Application security")
  - [Secure coding](/wiki/Secure_coding "Secure coding")
  - Secure by default
  - [Secure by design](/wiki/Secure_by_design "Secure by design")
    - [Misuse case](/wiki/Misuse_case "Misuse case")
- [Computer access control](/wiki/Computer_access_control "Computer access control")
  - Authentication
    - [Multi-factor authentication](/wiki/Multi-factor_authentication "Multi-factor authentication")
  - [Authorization](/wiki/Authorization "Authorization")
- [Computer security software](/wiki/Computer_security_software "Computer security software")
  - [Antivirus software](/wiki/Antivirus_software "Antivirus software")
  - [Security-focused operating system](/wiki/Security-focused_operating_system "Security-focused operating system")
- [Data-centric security](/wiki/Data-centric_security "Data-centric security")
- [Obfuscation (software)](/wiki/Code_obfuscation "Code obfuscation")
- [Data masking](/wiki/Data_masking "Data masking")
- [Encryption](/wiki/Encryption "Encryption")
- [Firewall](/wiki/Firewall_(computing) "Firewall (computing)")
- [Intrusion detection system](/wiki/Intrusion_detection_system "Intrusion detection system")
  - [Host-based intrusion detection system](/wiki/Host-based_intrusion_detection_system "Host-based intrusion detection system") (HIDS)
  - [Anomaly detection](/wiki/Anomaly_detection "Anomaly detection")
- [Information security management](/wiki/Information_security_management "Information security management")
  - [Information risk management](/wiki/Information_risk_management "Information risk management")
  - [Security information and event management](/wiki/Security_information_and_event_management "Security information and event management") (SIEM)
- [Runtime application self-protection](/wiki/Runtime_application_self-protection "Runtime application self-protection")
- [Site isolation](/wiki/Site_isolation "Site isolation")

- [v](/wiki/Template:Authentication "Template:Authentication")
- [t](/wiki/Template_talk:Authentication "Template talk:Authentication")
- [e](/wiki/Special:EditPage/Template:Authentication "Special:EditPage/Template:Authentication")

Authentication

Authentication

APIs

- [BSD Authentication](/wiki/BSD_Authentication "BSD Authentication") (BSD Auth)
- [eAuthentication](/wiki/EAuthentication "EAuthentication") (eAuth)
- [Generic Security Services API](/wiki/Generic_Security_Services_Application_Program_Interface "Generic Security Services Application Program Interface") (GSSAPI)
- [Java Authentication and Authorization Service](/wiki/Java_Authentication_and_Authorization_Service "Java Authentication and Authorization Service") (JAAS)
- [Pluggable Authentication Modules](/wiki/Pluggable_authentication_module "Pluggable authentication module") (PAM)
- [Simple Authentication and Security Layer](/wiki/Simple_Authentication_and_Security_Layer "Simple Authentication and Security Layer") (SASL)
- [Security Support Provider Interface](/wiki/Security_Support_Provider_Interface "Security Support Provider Interface") (SSPI)
- [XCert Universal Database API](/wiki/XUDA "XUDA") (XUDA)

[Authentication\
\
protocols](/wiki/Authentication_protocol "Authentication protocol")

- [ACF2](/wiki/ACF2 "ACF2")
- [Authentication and Key Agreement](/wiki/Authentication_and_Key_Agreement_(protocol) "Authentication and Key Agreement (protocol)") (AKA)
- [CAVE-based authentication](/wiki/CAVE-based_authentication "CAVE-based authentication")
- [Challenge-Handshake Authentication Protocol](/wiki/Challenge-Handshake_Authentication_Protocol "Challenge-Handshake Authentication Protocol") (CHAP)

  - [MS-CHAP](/wiki/MS-CHAP "MS-CHAP")
- [Central Authentication Service](/wiki/Central_Authentication_Service "Central Authentication Service") (CAS)
- [CRAM-MD5](/wiki/CRAM-MD5 "CRAM-MD5")
- [Diameter](/wiki/Diameter_(protocol) "Diameter (protocol)")
- [Extensible Authentication Protocol](/wiki/Extensible_Authentication_Protocol "Extensible Authentication Protocol") (EAP)
- [Host Identity Protocol](/wiki/Host_Identity_Protocol "Host Identity Protocol") (HIP)
- [IndieAuth](/wiki/IndieAuth "IndieAuth")
- [Kerberos](/wiki/Kerberos_(protocol) "Kerberos (protocol)")
- [LAN Manager](/wiki/LAN_Manager "LAN Manager")
- [NT LAN Manager](/wiki/NT_LAN_Manager "NT LAN Manager") (NTLM)
- [OAuth](/wiki/OAuth "OAuth")
- [OpenID](/wiki/OpenID "OpenID")
- [OpenID Connect](/wiki/OpenID_Connect "OpenID Connect") (OIDC)
- [Password-authenticated key agreement](/wiki/Password-authenticated_key_agreement "Password-authenticated key agreement") protocols
- [Password Authentication Protocol](/wiki/Password_Authentication_Protocol "Password Authentication Protocol") (PAP)
- [Protected Extensible Authentication Protocol](/wiki/Protected_Extensible_Authentication_Protocol "Protected Extensible Authentication Protocol") (PEAP)
- [Remote Access Dial In User Service](/wiki/RADIUS "RADIUS") (RADIUS)
- [Resource Access Control Facility](/wiki/Resource_Access_Control_Facility "Resource Access Control Facility") (RACF)
- [Secure Remote Password protocol](/wiki/Secure_Remote_Password_protocol "Secure Remote Password protocol") (SRP)
- [TACACS](/wiki/TACACS "TACACS")
- [Woo–Lam](/wiki/Woo%E2%80%93Lam "Woo–Lam")

- ![](//upload.wikimedia.org/wikipedia/en/thumb/9/96/Symbol_category_class.svg/16px-Symbol_category_class.svg.png)[Category](/wiki/Category:Authentication "Category:Authentication")
- ![](//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/12px-Commons-logo.svg.png)[Commons](https://commons.wikimedia.org/wiki/Category:Authentication "commons:Category:Authentication")

[Authority control databases](/wiki/Help:Authority_control "Help:Authority control"): National [![Edit this at Wikidata](//upload.wikimedia.org/wikipedia/en/thumb/8/8a/OOjs_UI_icon_edit-ltr-progressive.svg/10px-OOjs_UI_icon_edit-ltr-progressive.svg.png)](https://www.wikidata.org/wiki/Q212108#identifiers "Edit this at Wikidata")

- [United States](https://id.loc.gov/authorities/sh85009783)
- [France](https://catalogue.bnf.fr/ark:/12148/cb11976657c)
- [BnF data](https://data.bnf.fr/ark:/12148/cb11976657c)
- [Japan](https://id.ndl.go.jp/auth/ndlna/01209225)
- [Israel](http://olduli.nli.org.il/F/?func=find-b&local_base=NLX10&find_code=UID&request=987007295743005171)

Retrieved from " [https://en.wikipedia.org/w/index.php?title=Authentication&oldid=1238894105](https://en.wikipedia.org/w/index.php?title=Authentication&oldid=1238894105)"

[Categories](/wiki/Help:Category "Help:Category"):

- [Authentication](/wiki/Category:Authentication "Category:Authentication")
- [Access control](/wiki/Category:Access_control "Category:Access control")
- [Applications of cryptography](/wiki/Category:Applications_of_cryptography "Category:Applications of cryptography")
- [Computer access control](/wiki/Category:Computer_access_control "Category:Computer access control")
- [Notary](/wiki/Category:Notary "Category:Notary")
- [Packaging](/wiki/Category:Packaging "Category:Packaging")

Hidden categories:

- [Webarchive template wayback links](/wiki/Category:Webarchive_template_wayback_links "Category:Webarchive template wayback links")
- [CS1 maint: others](/wiki/Category:CS1_maint:_others "Category:CS1 maint: others")
- [Articles with short description](/wiki/Category:Articles_with_short_description "Category:Articles with short description")
- [Short description is different from Wikidata](/wiki/Category:Short_description_is_different_from_Wikidata "Category:Short description is different from Wikidata")
- [Articles containing Greek-language text](/wiki/Category:Articles_containing_Greek-language_text "Category:Articles containing Greek-language text")
- [All articles with specifically marked weasel-worded phrases](/wiki/Category:All_articles_with_specifically_marked_weasel-worded_phrases "Category:All articles with specifically marked weasel-worded phrases")
- [Articles with specifically marked weasel-worded phrases from December 2016](/wiki/Category:Articles_with_specifically_marked_weasel-worded_phrases_from_December_2016 "Category:Articles with specifically marked weasel-worded phrases from December 2016")
- [All articles with unsourced statements](/wiki/Category:All_articles_with_unsourced_statements "Category:All articles with unsourced statements")
- [Articles with unsourced statements from December 2016](/wiki/Category:Articles_with_unsourced_statements_from_December_2016 "Category:Articles with unsourced statements from December 2016")

- This page was last edited on 6 August 2024, at 07:18 (UTC).
- Text is available under the [Creative Commons Attribution-ShareAlike License 4.0](//en.wikipedia.org/wiki/Wikipedia:Text_of_the_Creative_Commons_Attribution-ShareAlike_4.0_International_License);
additional terms may apply. By using this site, you agree to the [Terms of Use](//foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Terms_of_Use) and [Privacy Policy](//foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy). Wikipedia® is a registered trademark of the [Wikimedia Foundation, Inc.](//wikimediafoundation.org/), a non-profit organization.

- [Privacy policy](https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy)
- [About Wikipedia](/wiki/Wikipedia:About)
- [Disclaimers](/wiki/Wikipedia:General_disclaimer)
- [Contact Wikipedia](//en.wikipedia.org/wiki/Wikipedia:Contact_us)
- [Code of Conduct](https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Universal_Code_of_Conduct)
- [Developers](https://developer.wikimedia.org)
- [Statistics](https://stats.wikimedia.org/#/en.wikipedia.org)
- [Cookie statement](https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Cookie_statement)
- [Mobile view](//en.m.wikipedia.org/w/index.php?title=Authentication&mobileaction=toggle_view_mobile)

- [![Wikimedia Foundation](/static/images/footer/wikimedia-button.svg)](https://wikimediafoundation.org/)
- [![Powered by MediaWiki](/w/resources/assets/poweredby_mediawiki.svg)](https://www.mediawiki.org/)