Skip to main content

Volition, Practicability & Confidentiality for Digital Identity


Indispensable for Identity Assurance are

1.  Volition of the User
2.  Practicability of the Means
3.  Confidentiality of the Credentials

1.  Identity authentication with no confirmation of the user’s volition would lead to a world where criminals and tyrants dominate citizens.
https://youtu.be/UJDBZpX1a0U  (30 seconds)

https://www.valuewalk.com/2017/08/nist-password/

2.  Mathematical strength of a security means makes sense so long as the means is practicable for us Homo sapiens.
https://www.youtube.com/watch?v=Q8kGNeIS2Lc   (100 seconds)

https://www.slideshare.net/HitoshiKokumai/password-fatigue-and-expanded-password-system

3.  The credentials for identity authentication must be ‘secret’, not
‘unique’
https://pentestmag.com/make-sure-not-mix-identification-authentication/

Any one of them missing, it would not qualify as a valid identity authentication means. Claiming otherwise would end up with spreading a false sense of safety.

Comments

Post a Comment

Popular posts from this blog

Probabilistic Is Human Body, Not Pattern-Matching Algorithm

The probabilistic nature of biometrics comes from the unpredictably variable body features of living animals rather than imperfect algorithms of pattern matching; perfection of pattern matching algorithm would not affect the probabilistic nature of biometrics. Biometrics that measures the probabilistic body features does not escape False Rejection/False Non-Match/False Negative that inevitably comes with False Acceptance/False Match/False Positive.   Since it cannot escape FR/FNM/FN, biometrics cannot escape the dependence on a fallback measure, a default password/pincode in most cases, which brings the security to the level lower than a password/pincode-only authentication. And yet, so many people who need higher security are spending so much money for bringing security down. Click the link for more - https://www.linkedin.com/pulse/negative-security-effect-biometrics-deployed-hitoshi-kokumai/
Post a Comment
Read more

Expanded Password System to Complement FIDO2

2 is larger than 1 but is not necessarily stronger than 1, as two children could be overwhelmed by a grown-up. For a two-factor authentication to be really reliable, each factor should be reasonably secure and usable enough. On the other hand, ‘password-less’ authentication, however attractive it might sound, would only benefit bad guys as examined in the link page - https://www.linkedin.com/pulse/removal-passwords-its-security-effect-hitoshi-kokumai/ People who offer a token as 'a factor' of two factor authentication schemes could all be viewed as our potential down-stream partners. Among them are the people who offer FIDO2-compatible solutions. Put together, we could come up with the two-factor authentications that are much more reliable than otherwise.
Post a Comment
Read more

Robust 2-Channel Authentication

2 is larger than 1, but not necessarily stronger than 1. https://www.theregister.com/2020/07/20/twitter_security_update_hackers_broke_2fa/ By bringing in the concept of Expanded Password System, we are able to protect important accounts more reliably than conventional 2-factor/step authentications as outlined here – “Advanced Persistent Threats in Digital Identity” https://www.linkedin.com/pulse/advanced-persistent-threats-digital-identity-hitoshi-kokumai/ This is not a hypothesis. It has been quietly but effectively deployed since 2014 for a security-centric corporate network by 1,200 employees.   Needless to say, asymmetric cryptography could be additionally incorporated for yet higher security where needed.
Post a Comment
Read more