Che cosa intende Frank Abagnale per "Livello 4 di sicurezza" nel suo discorso su Google?

Question

Che cosa intende Frank Abagnale per "Livello 4 di sicurezza" nel suo discorso su Google?

#1 da (1 voti)

3

Durante il suo talk a Google , Frank Abagnale ha menzionato quanto segue:

...we will be doing away with passwords in the next 24 months. Passwords will leave the world, there will be no more passwords. There is a new technology called Trusona...it is a company in Scottsdale, Arizona that created a technology for the CIA which we have used now for the last few years....it was the ability for an agent to send data back from the field, such as Afghanistan, on their iPhone and that Langley would know 100% that it is the agent on the other end; to 100% identify the person on the other end of the device. That's a level 4 security, so they basically said "What if we brought this to level 2 security and we did away with passwords..."

Che cos'è la sicurezza di livello 4 in questo contesto?

terminology

posta Steve V. 18.10.2018 - 20:33

fonte

1 risposta

Leggi altre domande sui tag terminology

È rischioso installare un sistema antifurto? Nome certificato non valido in go, microsoft.com

score 1 · Accepted Answer

Probabilmente è il livello di sicurezza che l'autenticazione è corretta: link

A Level of Assurance, as defined by the by ISO/IEC 29115 Standard, describes the degree of confidence in the processes leading up to and including an authentication. It provides assurance that the entity claiming a particular identity, is the entity to which that identity was assigned.

At Level of Assurance 2 (LoA2), there is some confidence in the asserted identity of the entity. LoA2 is used when moderate risk is associated with erroneous authentication. Successful authentication will be dependent upon the entity proving, through a secure authentication protocol, that the entity has control of an agreed credential.

At Level of Assurance 4 (LoA4), there is very high confidence in an asserted identity of the entity. This LoA is used when a high risk is associated with erroneous authentication. LoA4 provides the highest level of entity authentication assurance defined by this standard. LoA4 is similar to LoA3, but it adds the requirements of in-person identity proofing.