The electronic process of establishing confidence in user identities presented to an information system. The process of proving an individual is a claimed identity. Authentication is the first element of the AAA services concept, which includes Authentication, Authorization, and Accounting. Authentication occurs after the initial step of identification (i.e. claiming an identity). Authentication is accomplished by providing one or more authentication factors—Type 1: something you know (e.g. password, PIN, or combination), Type 2: something you have (e.g. smart card, RSA SecureID FOB, or USB drive), and Type 3: something you are (e.g. biometrics—fingerprint, iris scan, retina scan, hand geometry, signature verification, voice recognition, and keystroke dynamics).
Published in Chapter:
Cybersecurity in Europe: Digital Identification, Authentication, and Trust Services
Joni A. Amorim (Universidade Estadual de Campinas (UNICAMP), Brazil), Jose-Macario de Siqueira Rocha (Universitat de València, Spain), and Teresa Magal-Royo (Universitat Politécnica de València (UPV), Spain)
Copyright: © 2021
|Pages: 19
DOI: 10.4018/978-1-7998-6975-7.ch002
Abstract
Information security is increasingly necessary between citizens and public services. In a nearby environment, such as cities, there are digital services and infrastructures that help improve our quality of life. Secure access to services must be regulated and offer trust to the user. Initiatives like the Regulation from European Union, (EU) N° 910/2014 of the European Parliament and the Council intend to favour solutions for problems like interoperability and cybersecurity. In this chapter, two European countries are considered so that implementations of the electronic identification, authentication, and trust services are presented and discussed. The main contribution is a description of relevant European projects, a first step necessary to propel further research on this topic. The chapter also presents the current challenges for the consolidation of the technology used and for the adaptation of the electronic services offered by public administration bodies to citizens.