9.3 Capabilities of Authentication Methods

Authentication method is an approach validate the identity of users and prevent unauthorized users from accessing sensitive information.

The following table lists various authentication methods of Advanced Authentication with their capabilities:

Authentication Method

Strengths

Password

Passwords are widely used and familiar to users. They can be complex and unique, it is secure when combined with other device-based authentication factors.

OTP-based authentication:

  • Email OTP

  • SMS OTP

  • Voice OTP

  • OTP is valid for a short duration and single-use.

  • OTP is generated based on algorithms and it is not a static value. Therefore, there is no need to remember the PIN or password.

Time-based OTP (TOTP)

  • The trusted device generates the OTP and the server validates the token.

  • Devices that generate and accept TOTP codes can be used offline without an internet connection.

  • Hardware tokens generate unique OTPs and are not tied to a specific device. They are resistant to attacks targeting software-based OTP generators and provide an additional physical layer of security.

Hash-based OTP (HOTP)

  • The counter is synchronized between the server and the client.

  • Soft token

Facial Recognition

  • Verifies identity using biometric

  • Most secure

  • Difficult to replicate

  • Convenient to use

Fingerprint

  • Verifies identity using biometric

  • Most secure

  • Difficult to replicate

  • Convenient to use

PKI

  • Digital certificate-based authentication.

  • Protects confidential data and provides unique identities to the users and system.

Smartphone (Push Notification)

It involves sending a verification request to the registered device. Users can confirm or deny the authentication attempt, providing an additional layer of involvement and control.

Windows Hello

  • Passwordless, however, it is biometric-based (Fingerprint & Face).Convenient to use.Provides anti-spoofing feature.

  • Supports TPM-based authentication.