next up previous
Next: Computer Authentication Up: User-Authentication Previous: Improvements

Other Methods

The password method verifies a user's identity by checking on a piece of information only that user is supposed to know. A generalization of this idea is to have each user provide a long list of questions and answers, which are stored in the computer in an encrypted form. These questions should be chosen so that the user does not have to write their answers down. Examples (for Monty Python fans):
What is your quest?
What is your favourite colour?
How fast does a sea gull fly?

At login, the system asks one of these questions at random and checks to see if the answer is correct.

A completely different approach is to check is the user has some item, say a plastic card with a magnetic strip on it. The card is inserted into the terminal, which then checks to see whose card it is. This method can be combined with the password idea, as illustrated by automatic cash dispensing machines.

Another approach is to measure physical characteristics such as

Yet another approach is signature analysis.


Prasun Dewan
Mon Nov 4 12:08:34 EST 1996