Two-factor authentication (two-factor authentication)

What is two-factor authentication?

From the theory of cryptography, there are three main elements for identity authentication: first, the identity authentication content that needs to be memorized by the user, such as password or × × number, etc.; second, the user has authentication hardware, such as USB Key, smart card (hereinafter referred to as IC card), magnetic card, etc.; third, the user has the only characteristics, such as fingerprint, pupil, sound, and so on. Individually, when each element exists independently, it has its own vulnerability. The combination of the two elements to achieve dual-factor authentication can effectively improve the security of system access control, that is, two-factor authentication.

Two-factor authentication is a suitable access control policy for enterprises. it makes personal identification more objective in the process of access control and effectively prevents identity fraud from the outside and more covert network violations from within. Most enterprises have an employee IC card that identifies their identity, which can be used to achieve two-factor authentication. From the point of view of increasing the cost of enterprise informatization too much, the following scheme uses employee card IC card + user password for secure access control.