Authentication methods in cybersecurity

Authentication Methods: Directory Services, Federation, Attestation, SMS, Push Notification, Authentication Apps, TOTP, HOTP, Phone Call, Static Codes, Smart Cards, Biometric Factors

• Directory services keep all usernames, passwords, and devices in a single database that is constantly replicated and used for authentication requests.
• Federation allows third parties like partners, suppliers, and customers to access network services using a single set of credentials and establish a trust relationship.
• Attestation proves the hardware is yours and provides an operational report to a verification server, including a unique hardware component like IMEI.
• SMS and push notification can be used as login factors, but security issues exist, and some push apps send information in the clear.
• Authentication apps like TOTP and HOTP generate pseudo-random tokens and use a secret key with time-based or HMAC-based algorithms.
• Phone calls can provide tokens, but they have similar disadvantages to SMS, including interception and forwarding.
• Static codes like PIN or password are authentication factors that don't change and require memorization.
• Smart cards are integrated circuit cards used for access control that require physical possession and can use digital certificates and multiple factors like PIN or fingerprint.
• Biometric factors like fingerprint, retinal, iris, voice, facial recognition, gait analysis, and vascular scanners use unique physical characteristics for authentication.
• Biometric acceptance rates include false acceptance rate (FAR), false rejection rate (FRR), and crossover error rate (CER), which defines the overall accuracy of a biometric system.
• FAR is the likelihood that an unauthorized user will be accepted, FRR is the likelihood that an authorized user will be rejected, and CER adjusts sensitivity to equalize both values.
• Biometric factors are becoming more common, but they still have limitations and require careful consideration of privacy and security concerns.