E-authentication: Using Cryptography, Biometrics and Knowledge Based Authentication and Tokens

Donna Dodson, National Institute of Standards and Technology (NIST)
April 21, 2008

Abstract

The ability to determine the identity of an individual allows information systems to support security functions including authentication, access control, and auditing. The rigor used to establish and confirm the identity of an individual provides the foundation an information system can have for assuring that an individual is who he claims to be. The quality of all decisions based on an established identity is limited by the credentials used in the identity's authentication. This talk will explore the technical foundations that are used to support e-authentication. It will address the strength of different technologies (including cryptography, biometrics and knowledge based authentication) that can be used as credentials in authentication schemes. The talk will conclude with considerations for building a general authentication framework.

Bio

Donna Dodson is the Deputy Cyber Security Advisor/Deputy Division Chief of the Computer Security Division at the National Institute of Standards and Technology. She is currently working in the areas of authentication and cryptography. She is a co-author of FIPS 201, Personal Verification of Federal Employees and Contractors and NIST SP 800-63, Electronic Authentication Guideline. Donna has also managed programs including the Advanced Encryption Standard, key management, PKI, and security testing.

• Presentation Slides [PPT]