knowledge-based authentication
isikuteadmusega autentimine, KBA
olemus
autentimine isikuga seotud identifitseeriva teabega:
- staatiline KBA: teave on varem kokku lepitud,
kasutatakse näiteks parooli unustamisel
- dünaamiline KBA: teave tuletatakse
agregeeritud teabest, eelneva kokkuleppeta
=
an authentication method that uses verification of user's identity by requesting personal information
ülevaateid
https://en.wikipedia.org/wiki/Knowledge-based_authentication
http://lexisnexis.com/risk/downloads/idm/role-of-knowledge-based-authentication-in-identity-proofing.pdf
https://thesai.org/Downloads/Volume11No2/Paper_91-Knowledge_based_Authentication_Techniques.pdf
http://mbelk.info/files/conferences/PCI2016.pdf
https://core.ac.uk/download/pdf/81989525.pdf
turvalisus
https://www.identitymanagementinstitute.org/knowledge-based-authentication-weaknesses/
https://shuftipro.com/blog/4-reasons-why-you-should-forget-about-knowledge-based-authentication
https://www.jumio.com/kba-alternatives/