Authentication and strong authentication for Web Application
•Descargar como PPT, PDF•
3 recomendaciones•842 vistas
WebCast: Authentication and Strong Authentication in Web Applications WebCast
![Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Destacado
Destacado (11)
Similar a Authentication and strong authentication for Web Application
Similar a Authentication and strong authentication for Web Application (20)
Más de Sylvain Maret
Más de Sylvain Maret (20)
Último
Último (20)
Authentication and strong authentication for Web Application
- 1. Sylvain Maret / Digital Security Expert @ MARET Consulting BrightTALK - October 7th 2010 Authentication and Strong Authentication in Web Application
- 4. Protection of digital identities: a topical issue…
- 5. threats on the authentication
- 8. Definition of strong authentication Strong Authentication on Wikipedia
- 9. «Digital identity is the cornerstone of trust» More information on the subject
- 10. Strong Authentication A new paradigm !
- 11. Which strong authentication technology? (Legacy Token …..)
- 13. * * Biometry type Fingerprinting OTP PKI (HW) Biometry Strong authentication Encryption Digital signature Non repudiation Strong link with the user
- 15. Authentication Server must be agnostic
- 16. New Standards & Open Source
- 18. Integration with web application
- 19. Web applications: basic authentication model
- 20. Web application: strong authentication model
- 21. “ Shielding" approach: perimetric authentication
- 24. SSL PKI: how does it work? Web Server Alice Validation Authority Valid Invalid Unknown OCSP request SSL / TLS Mutual Authentication
- 25. Federated identities: a changing paradigm on authentication
- 26. Federation of identity approach a change of paradigm: using IDP for Authentication and Strong Authentication Web App X Web App Y Identity Provider
- 28. Using SAML for Authentication and Strong Authentication (Assertion Consumer Service)
- 30. SAML – How does it work? Identity Provider e.g. clavid.ch User Hans Muster Enabled Service e.g. Google Apps for Business 1 2 2 6 3 4 4
- 31. Example with HTTP POST Binding
- 32. SAML AuthN & ACS integration in Web Application
- 35. OpenID - How does it work? 1 3 5 Enabled Service 6 4, 4a User Hans Muster Caption 1. User enters OpenID 2. Discovery 3. Authentication 4. Approval 4a. Change Attributes 5. Send Attributes 6. Validation 2 Identity URL https://hans.muster.clavid.com Identity Provider e.g. clavid.com hans.muster.clavid.com
- 36. Architecture IPD Authentication Server
- 37. Unique Interface Agnostic / Easy SAML
- 42. "Le conseil et l'expertise pour le choix et la mise en oeuvre des technologies innovantes dans la sécurité des systèmes d'information et de l'identité numérique"