Kuzivikanwa uye authentication: dzinokosha pfungwa

Kuzivikanwa uye authentication ndivo hwaro ano-software uye Hardware kuchengeteka, sezvo mamwe mabasa Anonyanyowanika arongera SERVICING zvidzidzo izvi. Izvi Dzidziso anomiririra kuti wokutanga kudzivirira mutsa, kuona chibatiso mashoko nzvimbo sangano.

Chii?

Kuzivikanwa uye authentication vaine mabasa. Wokutanga inopa nyaya (rokushandisa kana muitiro kuti anoita achimiririra) mukana kuudza zita ravo. Zvichishandisa authentication ndiro divi wechipiri chose chokuti nyaya zvechokwadi ndiye uyo waanoti kuva. Kazhinji, kureva kuzivikanwa uye authentication inotsiviwa okuti "Post zita" uye "authentication".

Ivo pachavo vari rakakamurwa mhando dzakawanda. Next, tinofunga kuti kuzivikanwa uye authentication uye zvavari.

authentication

Pfungwa iyi inopa nokuti mifananidzo miviri: imwe-nzira yeGmail.END_STRONG unofanira kutanga kuratidza kuti Server kuti tsvagurudza, uye bilateral, ndiko kuti, kana munhu yakawiriranwa yekusimbisa kuitiswa. Muenzaniso sei kuitisa mureza kuziva uye authentication vanoita - ndiko kuti danda kupinda imwe gadziriro. Saka, marudzi akasiyana kunogona kushandiswa mune zvinhu zvakasiyana-siyana.

Mune networked ezvinhu, apo kuziviswa uye authentication vanoita akaita pamusoro munharaunda yakakura vakaparadzirwa kumapati, ongorora basa iri kusiyaniswa huru zviviri:

• kuti anoita somunhu authenticator;
• sei rakarongwa nokuda kupanana date authentication uye kuzivikanwa uye sei kuidzivirira.

Kuti asimbise kwayo nderechokwadi, nyaya anofanira kupiwa mumwe zvinotevera masangano:

• vamwe mashoko izvo anoziva (pachake nhamba, mumwe pasiwedhi, chaiwo cryptographic kiyi, etc ...);
• chinhu zvaanazvo (pachake kadhi kana zvimwe mudziyo ane yakafanana chinangwa);
• chinhu, inova chinhu chacho (fingapurindi, inzwi kana zvimwe biometric kuziva uye authentication vanoita).

maitiro zvinhu

Pachena rezvebonde kwezvakatipoteredza, mapato handina yaunovimba nzira, uye zvinonzi zvavo, mashoko pachishandiswa nyaya pakupedzisira zvingachinja kuva vakasiyana mashoko awanika uye kushandiswa authentication. Zvaida kuchengeteka vanoshingaira uye pusa nomumbure sniffer, kureva, kudzivirira padzimwe, kuvhura kana playback dzakasiyana mashoko. Password chinja nzira iri pachena hakusi dzinogutsa, uye akarurama haagoni zuva, uye encrypted mavara echivande, nekuti havana inopiwa, playback dziviriro. Ndokusaka nhasi rinoshandiswa zvikuru kunzwisisa authentication protocols.

Hwakavimbika kuzivikanwa zvakaoma kwete chete nokuda zvakasiyana siyana samambure kutyisidzira, asi zvakasiyana-siyana zvimwe zvikonzero. Wokutanga chero authentication sangano anogona akapambwa, kana kunyepera kana Scouting. makakatanwa pakati rakavimbika gadziriro kushandiswa kuri chipo, rumwe rutivi, uye mutariri gadziriro kana User zvivako - rumwe. Saka, nokuda kwezvikonzero kuchengeteka inodiwa vamwe kakawanda kumbira inodzidzisa kuzodzosera okusuma ayo authentication mashoko (sezvo pachinzvimbo ave kugara nedzimwe vanhu), uye kwete chete unoitisa mamwe dambudziko, asi yekudyidzana zvinowedzera mukana kuti mumwe munhu anogona kuedza kuzivisisa zvinhu zvomunhu ruzivo chiyamuro. Mukuwedzera, rakavimbika kudzivirira kunoreva kuchikosha zvazvinoita kukosha kwayo.

Modern kuzivikanwa uye authentication nehurongwa anotsigira pfungwa chiratidzo-mberi chete kusvika pomumbure, izvo zvikurukuru caters zvinodiwa maererano mushandisi-ushamwari. Kana mureza yemakambani rezvebonde ane zvakawanda mabasa, kupa mukana yakazvimirira wokufambisa ipapo vakawanda yaitonga pachake mashoko anova zvakare mutoro. Panguva iyoyo ichiripo zvisingaiti kutaura kuti kushandisa chiratidzo-mberi chete kuti pomumbure romuzvarirwo, sezvo chikuru mhinduro hadzisati kuumbwa.

Saka, vakawanda vari kuedza kuwana nekuyanana pakati affordability, kurerukirwa uye rakavimbika mari, izvo chinopa kuzivikanwa / authentication. User mvumo iyi nyaya rinoitwa maererano neimwe mitemo.

Special kutarisirwa inofanira kubhadharwa kuti chokwadi kuti basa inoshandiswa zvinogona kusarudzwa sezvo chinangwa kurwisa Kuwanikwa. Kana hurongwa configuration anoitwa nenzira kuti pashure wandei vakundikana kuedza kupinda mukana yave rakanyatsozarirwa, ipapo anokwanisa kumisa kushanda zviri pamutemo vanoshandisa kubudikidza keystrokes shomanana.

pasiwedhi authentication

The chikuru mukana ino ndechokuti nyore chaizvo uye zvinozivikanwa. Mavara echivande kare anoshandiswa anodawo gadziriro uye mamwe mabasa, uye pamwe kwakafanira inopiwa kuchengeteka, riri zvikuru zvinogamuchirika kuti masangano akawanda. Ukuwo, neboka nevakawanda akagadzirwa maitiro akadaro gadziriro ndiyo dukusa huchashandiswa kuzivikanwa / authentication anogona chinozoiswa. Mvumo iyi nyaya kunova nyore, nekuti mavara echivande kunge catchy, asi hazvina kuoma zvokufungidzira wemishonga nyore, kunyanya kana munhu anoziva zvaunofarira imwe user.

Dzimwe nguva zvinoitika kuti mavara echivande ari musimboti, kwete kuchengeta zvakavanzika, sezvo vari runako mureza tsika raanotaura chaiyo mapepa, uye kwete nguva dzose shure hurongwa iri yakaiswa, kushandura navo.

Pamunopinda password unogona kuona, mune zvimwe zviitiko, vanhu kunyange kushandisa Manyiminya zviridzwa kushandiswa.

Users, chikuru vanotongwa kuzivikanwa uye authentication, mavara echivande kazhinji vaudze vamwe kune avo pane dzimwe nguva zvachinja muridzi. In Nemuromo, mumamiriro ezvinhu akadaro zvaizova zvakarurama kushandisa chaiyo kukwanisa chidhiraivho, asi tsika haisi kushandiswa. Kana pasiwedhi kuziva vanhu vaviri, zvinonzi anowedzera kwazvo mikana kuti kuguma kwayo uye kudzidza zvakawanda.

How kuchigadzira?

Pane zvishandiso akawanda akadai kuzivikanwa uye authentication zvinogona kudzivirirwa. Rokuti Uropi anogona inishuwarenzi sezvinotevera:

• The nokuiswa siyana michina zvausingakwanisi. Kakawanda kuisa mitemo pamusoro pasiwedhi urefu uye zviri zvimwe vatambi.
• Office pasiwedhi yapfuura, kureva vanofanira kutsiviwa nguva nenguva.
• Limited kuwana zvinokosha Password faira.
• Kukamurwa uwandu vakundikana vakaedza dziripo kana iwe danda mukati. Nokuda kwaizvozvi nemhomho kunofanira kuitwa chete zviito kuita nokuzivikanwa uye authentication uyewo kufambira nzira haagoni kushandiswa.
• Rokutanga nokudzidziswa vanoshandisa.
• Kushandisa unyanzvi hwakasiyana-software pasiwedhi jenareta kuti anogona kusika anofambidzana zvakadai zviri zvakakwana kunonakidza uye chisingakanganwiki.

All zviyero izvi zvinogona kushandiswa Chero zvazvingava, kunyange kana pamwe mavara echivande achashandisawo dzimwe nzira authentication.

Imwe-nguva mavara echivande

The pamusoro embodiments vari reusable, uye Wakavhura anofambidzana vavashungurudza anokwanisa kuita zvimwe akavhiyiwa pamusoro rokushandisa nokuda. Ndokusaka senzira akasimba nemishonga mukana kungotarisa samambure sniffer, shandisa rimwe-nguva mavara echivande iyo kuzivikanwa uye authentication kwava kuchengeteka zvikuru, kunyange zvazvo asina sezvo nyore.

Panguva iyoyo, imwe yenzvimbo dzine mukurumbira Software imwe-nguva pasiwedhi jenareta ndiyo hurongwa inonzi S / ANOKOSHA, aburitswa Bellcore. The pfungwa ino ndechokuti pane kushanda F, rinozikamwa zvose inodzidzisa uye authentication Server. Zvinotevera ndizvo zvakavanzika inokosha K, rinozivikanwa chete chairo user.

At kwokutanga Kutarisirwa User, basa iri rinoshandiswa kiyi kanoverengeka, ipapo mugumisiro anoponeswa pamusoro Server. Zvadaro, mukuru authentication nzira iri sezvinotevera:

1. On the mushandisi hurongwa kubva Server rinouya nhamba iri 1 isingasviki kangani kushandisa mashandiro kusvikira kiyi.
2. User basa inoshandiswa muchivande makiyi kangani kuti yakatogadzirwa pakutanga pfungwa, dzakatsigira mugumisiro anotumwa nomukombiyuta pomumbure zvakananga authentication Server.
3. The Server anoshandisa basa iri kune vakawana kukosha, uye ipapo mugumisiro rinofananidzwa ne kare zvakachengetwa ukoshi. Kana zvabuda kunowirirana, ipapo rokushandisa ani yakasimbiswa, uye Server rinochengeta kukosha itsva, uye ipapo zvinoderedza pakaunda mumwe.

In tsika, iyo Implementation ruzivo urwu ane zvishoma zvimwe zvakaoma kunzwisisa, asi panguva iyoyo hazvina basa. Sezvo basa iri kusingarapiki, kunyange kana pasiwedhi kuvhura kana kuwana mvumo kuwana kuti authentication Server haripi mukana kuwana kiyi private uye chero nzira kufembera sei zvichakanganisa chaizvo seungano neinotevera-nguva password.

In Russia sezvo rakabatana basa, pakaitwa hurumende portal - "Unique hurongwa kuzivikanwa / authentication" ( "ESIA").

Chimwe kusvika kune simba authentication hurongwa iri ndechokuti pasiwedhi idzva yakawanikwa panguva pfupi zvikamu, rinova zvakauya kushandisa unyanzvi zvirongwa kana siyana ngwara makadhi. Panyaya iyi, iyo authentication Server anofanira kubvuma runoenzanirana pasiwedhi urwu algorithm uye vamwe parameters chokuita nacho, uye kuwedzera, vanofanira kuva varipo sezvo wachi yaunonyanya kushandisa server kuti nemhosva.

Kerberos

Kerberos authentication Server kokutanga akazviratidza nepakati 90s wekupedzisira remakore, asi kubva ipapo akanga atopiwa chaizvo dzinokosha kuchinja. Panguva iyoyo, mumwe nomumwe zvinoriumba wegadziriro varipo kunenge kwose ano uchishandisa hurongwa.

Chinangwa chikuru mubasa iri kugadzirisa dambudziko zvinotevera: pane asiri rakachengeteka mambure nodes zvayo kuramba chimiro siyana zvidzidzo vanoshandisa, uye server yeGmail.END_STRONG Software enyika. Mumwe sangano akadaro aripo mumwe muchivande kiyi, uye kuti nyaya mukana wokuratidza zvavo nderechokwadi nenyaya yacho S, pasina zvaakanga akango- ko kushumira izvozvo, zvichaita vanofanira kwete chete kuzodana pachake, asi kuratidza kuti anoziva zvimwe muchivande kiyi. Panguva iyoyo With hapana nzira kungotuma nenzira dzenyu dzakavanzika anokosha S sezvo rokutanga Somuenzaniso pomumbure yakazaruka, uye kuwedzera, S haazivi, uye, pfungwa, vasamuziva. Pakadaro, shandisa zvishoma rakananga Michina kuratidzwa ruzivo ruzivo.

Electronic kuzivikanwa / authentication Via Kerberos maitiro anopa kushandiswa kwayo sechinhu aivimbwa bato wechitatu, ine mashoko pamusoro zvakavanzika kiyi Serviced nzvimbo uye vanovabatsira pakuita pairwise authentication kana zvakakodzera.

Saka yeGmail.END_STRONG kutumirwa nenzira mubvunzo kuti rine zvakafanira ruzivo nezvazvo, uyewo akakumbira basa. Shure kwaizvozvo, Kerberos anopa naye tikiti kuti encrypted ane kiyi chakavanzika Server, uyewo kopi mamwe mashoko kubva, ndiro chakavanzika kiyi nemhosva ine mhando. Kana kuti yakasimbiswa kuti yeGmail.END_STRONG akanga deciphered mashoko aida, kureva, akakwanisa kuratidza kuti private kiyi anozivikanwa naye chaizvo. Izvi zvinoratidza kuti munhu anoda kubetserwa ndiye munhu iro ndizvo.

Special kutarisirwa vanofanira pano kutorwa kuitira kuti kupararira kwechakavanzika makiyi hadzina kuitwa pamusoro pomumbure, uye vari kushandiswa chete encryption.

authentication kushandisa biometrics

Biometrics kunosanganisira ibatanidzo zvoga kuziva / authentication vanhu kwakavakirwa zvavo zvounhu kana vasiri maitiro. nzira Zvokunyama yokuzikanwa uye authentication anopa the retina Ongororo uye ziso cornea, zveminwe, chiso uye ruoko geometry, uyewo mamwe mashoko pachako. The maitiro zvinosanganisirawo manyorero basa pamwe kiibhodhi uye simba pamusoro siginicha. Aibatanidza nzira ndiwo kuongorora dzakasiyana zvechadenga inzwi romunhu, uyewo kuziva matauriro ake.

Kwakadaro kuzivikanwa / authentication uye encryption nehurongwa anoshandiswa nevakawanda munyika dzakawanda pasi pose, asi nguva refu, vari chaizvo kudhura uye kunzwisisa kushandiswa. Munguva pfupi yapfuura, kudiwa biometric zvigadzirwa yawedzera yekudyidzana nokuda kukura e-zvokutengeserana, nekuti, kubva pfungwa nemaonero inodzidzisa, zviri nyore zvikuru kupa pacharo, pane kurangarira mashoko. Saizvozvowo, kudiwa kunoita romugove, saka musika akatanga kuonekwa vashoma shoma-akatemerwa mutengo zvigadzirwa, izvo kazhinji nezvezvandaifanira fingapurindi kuzivikanwa.

In ruzhinji nyaya, biometrics iri ikashandiswa pamwe nedzimwe authenticators akadai ngwara makadhi. Kazhinji biometric authentication chete wokutanga kudzivirira uye anoita senzira dzekugonesa kuti smartcard, kusanganisira siyana cryptographic zvakavanzika. Kana kushandisa michina iyi, iyo biometric template inochengeterwa pamusoro kadhi chete.

Basa mumunda biometrics iri zvakakwana kumusoro. Relevant huripo rakapiwa, uyewo chaizvo basa riri kuitwa kuti fananidza zvinhu zvakasiyana-siyana kwezvinhu. Nhasi tinogona kuona zvakawanda okushambadza nyaya kuti biometric ruzivo vari inopiwa nzira yakanaka yokupa yakawedzera kuchengeteka uye panguva imwecheteyo kutengwa zvavo.

ESIA

maitiro yokuzikanwa uye authentication ( "ESIA") riri basa rinokosha chakagadzirirwa nechokwadi Implementation dzakasiyana-siyana mabasa chokuita ongororo yacho nderechokwadi vamhan'ari uye nhengo interagency pamwe iri chiitiko chero matunhu neminisiparati kana voruzhinji mabasa mune zvemagetsi chimiro.

Kuti tiwane kuwana "chete portal weHurumende zvivako", uyewo mamwe mashoko gadziriro kwezvivako kuti zviripo e-hurumende, unofanira kutanga kunyoresa nhoroondo uye somugumisiro, tora AEDs.

nhanho

Portal rakabatana hurongwa kuzivikanwa uye authentication rinopa zvitatu zvinokosha kwevari nhoroondo vanhu:

• Zvakawanda. Kuti vaverengwe ayo anongoti zvinosanganisira wako okutanga nookupedzisira zita, uyewo vamwe kunyanya nzira yokukurukurirana muchimiro email kero kana serura. Ichi chikuru sandara, izvo munhu anopa tinopinda chete zvishoma mazita akasiyana siyana ehurumende mabasa, uyewo nezvaanogona ose aripo mashoko enyika.
• Standard. Kuti vawane pakutanga zvakafanira kuti ape nyaya Yokudzidza, uye ipapo uyewo anopa mamwe mashoko, kusanganisira mashoko kubva pasipoti nhamba uye inishuwarenzi nomumwe nhoroondo. ruzivo iyi yaibva achiongorora kuburikidza mashoko ezvinhu ari mudyandigere Fund, uyewo Federal Kutama Service, uye, kana bvunzo chichabudirira, nhoroondo iri kutendeukira mwero pamwero, izvozvo anovhura anoishandisa kuti rakawedzerwa pamazita wehurumende mabasa.
• Yakasimbiswa. Kuti tiwane izvi Hazvizivikanwi nhoroondo, rakabatana maitiro yokuzikanwa uye authentication zvinoda vanoshandisa mwero nhoroondo, uyewo uchapupu nokuzivikanwa, iro rinoitwa kuburikidza kushanyirwa ane mvumo dhipatimendi kana kuwana ane activation remitemo Via munhu vakanyorwa tsamba. Kuri kuti wacho yekusimbisa kubudirira, nhoroondo uchaenda kuvandudza, uye kuti anoishandisa vachawana kuwana mazita aida paruzhinji mabasa zvakakwana.

Pasinei nokuti nzira ingaita akaoma zvokuti kuona zvizere mazita zvaida mashoko anogona kuva zvakananga pamusoro mukuru Website, saka zvinokwanisika kupedza kunyoresa kwemazuva mashomanana.