Fact-checked by Grok 2 weeks ago

Authentication

Authentication is the act or process of proving that something (such as an identity, a document, a work of art, or a financial transaction) is genuine, valid, or true.^[1] It applies across diverse fields, including cultural and historical contexts like art and antiques verification or anthropological artifact authentication, literature attribution, and commerce such as product and packaging verification. In the context of information security and computing, authentication is the process of verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in an information system.^[2] It serves as a foundational mechanism to ensure that only authorized entities can interact with sensitive data or systems, thereby supporting key security principles such as confidentiality and access control. Authentication mechanisms are integral to broader identity and access management (IAM) frameworks, helping organizations mitigate risks like unauthorized access, data breaches, and identity theft.^[3] The importance of robust authentication cannot be overstated, particularly in cybersecurity, where weak implementations have been implicated in numerous high-profile cyber incidents, underscoring its role in maintaining the CIA triad—confidentiality, integrity, and availability—of information assets.^[4] By confirming identities before granting permissions, authentication prevents impersonation attacks and enforces the principle of least privilege, where users receive only the access necessary for their roles. Modern standards, such as those outlined by the National Institute of Standards and Technology (NIST), emphasize evolving authentication practices to counter advancing threats, including phishing and credential stuffing.^[3] In computing, common authentication methods are categorized into three primary factors: something you know (e.g., passwords or PINs), something you have (e.g., smart cards or tokens), and something you are (e.g., biometrics like fingerprints or facial recognition).^[5] Single-factor authentication relies on one of these elements, but it is increasingly vulnerable to compromise, leading to the widespread adoption of multi-factor authentication (MFA), which requires at least two distinct factors for verification.^[5] Advanced techniques, such as passwordless authentication using public key cryptography or hardware-based authenticators like Trusted Platform Modules (TPMs), further enhance security by reducing reliance on easily phishable secrets.^[6]

General Concepts

Definition and Principles

Authentication is the process of confirming the truth of an attribute of a datum or entity, such as its identity, origin, or genuineness. This foundational concept applies across disciplines, from verifying the authenticity of historical documents to establishing user identity in digital systems. In essence, authentication seeks to provide assurance that a claim about an object, person, or information is valid, often through evidence or mechanisms that demonstrate reliability.^[7]^[8] Key principles underlying authentication include verifiability, non-repudiation, and integrity. Verifiability refers to the ability to prove or disprove claims regarding identity or origin using repeatable and reliable methods, ensuring that authentication outcomes can be independently confirmed. Non-repudiation prevents parties from denying their involvement in an action or transaction, typically achieved through mechanisms that bind actions to specific entities. Integrity ensures that the datum or entity remains unaltered from its verified state, protecting against tampering or corruption during the authentication process. These principles collectively establish trust by mitigating risks of forgery, denial, or modification.^[9] Authentication is distinct from related concepts like authorization, which focuses on determining what actions or access rights an entity possesses after identity verification. While authentication answers "who you are" or "what it is," authorization addresses "what you can do," often building upon successful authentication to enforce permissions. This separation is critical in systems requiring layered security, such as access control models.^[2]^[10] Universal principles of authentication manifest in diverse examples. In physical contexts, the chain of custody provides a documented trail tracking the handling of evidence from collection to presentation, thereby verifying its origin and unaltered state to support authenticity claims. In digital contexts, cryptographic hashes enable integrity checks by generating a fixed-size digest of data; any alteration results in a different hash, allowing verifiability without revealing the original content. These approaches illustrate how core principles adapt to maintain trust across domains.^[11]

Historical Evolution

The practice of authentication traces its roots to ancient Mesopotamia during the Late Neolithic period (c. 7600–6000 BCE), where cylinder seals emerged as a primary method for verifying documents and artifacts. These small stone cylinders, engraved with unique designs and often inscribed with cuneiform text, were rolled across wet clay to create impressions that served as personal signatures, ensuring the authenticity of ownership, transactions, or administrative records. Such seals functioned as portable identifiers, akin to modern stamps, and were integral to early bureaucratic systems in Sumerian city-states like Uruk, where they authenticated clay tablets recording economic activities.^[12] During the medieval period in Europe, authentication advanced through innovations in material marking and organized craftsmanship. By the 13th century, papermakers in Italy introduced watermarks—translucent designs embedded in paper sheets during production—to indicate origin and quality, aiding in the verification of documents amid the spread of paper from the Islamic world. Concurrently, craft guilds across Europe mandated hallmarks and maker's marks on goods such as metalsmithing and textiles, allowing consumers and authorities to authenticate the provenance and standards of products through standardized symbols enforced by guild oversight. These physical markers reflected a growing emphasis on collective regulation to combat counterfeiting in expanding trade networks.^[13]^[14] The 19th and 20th centuries marked a pivotal shift toward scientific and cryptographic methods for authentication. In 1901, Scotland Yard established the world's first fingerprint bureau, adopting the Henry system to systematically classify and match fingerprints for criminal identification, revolutionizing forensic verification by providing a unique, immutable biometric trait. During World War II, the German Enigma machine exemplified early mechanical cryptography, using rotor-based encryption and pre-shared keys to secure communications in military contexts. These developments bridged physical evidence with technological encoding, laying groundwork for modern identity confirmation.^[15]^[16] In the post-2000 era, authentication transitioned decisively to digital frameworks, with Public Key Infrastructure (PKI) standards solidifying in the 1990s through protocols like X.509 for certificate management, enabling secure electronic transactions via asymmetric encryption. By the 2010s, blockchain technology extended these capabilities, introducing decentralized ledgers for tamper-proof verification, as seen in early applications like Bitcoin's proof-of-work consensus for transaction authentication starting in 2009. This evolution reflects broader cross-disciplinary trends from tangible seals and marks to intangible digital and AI-driven methods, including 2020s integrations of neural networks for precise artifact dating in archaeology, where deep learning models analyze stylistic and material patterns to authenticate historical provenance with greater accuracy than traditional techniques.^[17]^[18]^[19]

Authentication in Cultural and Historical Contexts

In Art and Antiques

Authentication in the context of art and antiques involves verifying the genuineness of objects through a combination of historical documentation, scientific testing, and expert evaluation to confirm their origin, authorship, and condition. Provenance, the documented chain of ownership from creation to the present, serves as a foundational element, often including certificates of authenticity, exhibition records, auction catalogs, and archival materials from galleries or collectors.^[20] For instance, institutions like auction houses maintain detailed ledgers that trace an artwork's history, helping to establish legitimacy and value while mitigating risks of illicit trade.^[21] Incomplete or fabricated provenance can undermine an object's credibility, prompting deeper scrutiny. Scientific methods provide objective evidence by analyzing materials and techniques. Radiocarbon dating, applicable to organic components like wood panels or canvas bindings, measures the decay of carbon-14 isotopes to estimate age, offering precision of ±20-40 years for samples up to 1,000 years old.^[22] X-ray fluorescence (XRF) spectroscopy identifies elemental compositions in pigments and grounds without damaging the piece, revealing anachronistic materials such as modern synthetic colors in purported ancient works.^[23] Ultraviolet (UV) imaging detects restorations or overpainting by highlighting fluorescence differences between original and added layers, aiding in the assessment of alterations.^[24] These techniques complement each other, with XRF providing chemical profiles and UV exposing surface interventions. Expert authentication relies on connoisseurs—specialists with deep knowledge of an artist's style, techniques, and historical context—who evaluate works through visual and tactile examination. Institutions such as the Getty Research Institute play a pivotal role, offering resources like the Provenance Index database, which aggregates millions of records on ownership transfers to support verification efforts.^[25] These experts often collaborate with scientists, cross-referencing stylistic attributes against known oeuvres to confirm attributions. Challenges persist due to sophisticated forgeries that evade initial checks, exemplified by Han van Meegeren's 1940s fakes of Johannes Vermeer's paintings, which used aged materials and techniques to deceive experts and sell for millions, including one to Nazi official Hermann Göring.^[26] The global art forgery market is estimated at $4-6 billion annually in the 2020s, representing a significant portion of the $65 billion overall art trade and eroding trust in transactions.^[27] Emerging AI tools, such as neural network models for style analysis, address these issues by training on artistic patterns like brushstrokes to detect anomalies, with some 2023 convolutional neural network approaches achieving over 90% accuracy in distinguishing genuine works from forgeries.^[28]

In Anthropology

In anthropology, authentication of cultural artifacts and ethnographic materials involves verifying their cultural origin and integrity through a combination of contextual and scientific methods, ensuring they accurately represent past societies without modern contamination or fabrication. Contextual authentication relies on cross-referencing artifacts with oral histories, ethnographic records, and archaeological site excavations to establish provenance and cultural affiliation. For instance, oral traditions have been used to determine the cultural origins of human remains and associated objects, as seen in over 300 cases where museums and federal agencies applied indigenous oral narratives to affirm affiliations under legal frameworks.^[29] Ethnographic records, including field notes from early anthropologists, complement these by documenting material culture in living contexts, while site excavations provide stratigraphic evidence linking artifacts to specific cultural layers. This multi-faceted approach, as explored in studies of indigenous oral traditions and archaeology, helps reconstruct historical narratives that material evidence alone cannot fully illuminate.^[30] Scientific techniques play a central role in authenticating artifacts by analyzing their physical properties. Thermoluminescence (TL) dating is particularly effective for ceramics, measuring the time elapsed since the last firing event by quantifying trapped electrons released upon reheating; it offers accuracy within ±5-10% for samples up to 50,000 years old, depending on environmental radiation levels.^[31] Isotopic analysis, meanwhile, sources materials by examining stable isotope ratios in elements like strontium, oxygen, or lead, revealing geological origins and trade networks; for example, variations in strontium isotopes in ceramics or metals can trace raw materials to specific quarries or regions with high precision.^[32] These methods, applied non-destructively where possible, validate artifacts against known cultural chronologies and detect post-depositional alterations. A notable case study involves the authentication of Easter Island (Rapa Nui) moai statues through geochemical matching in the 2010s. Researchers analyzed basalt samples from the Rano Raraku quarry and unfinished moai using trace element geochemistry and radiometric dating, confirming that fine-grained basaltic resources were quarried and used prehistorically between approximately 1200 and 1650 CE, with distinct chemical signatures linking statues to specific island sources and ruling out later fabrications.^[33] This work not only authenticated the statues' origins but also informed understandings of Rapa Nui resource management and societal collapse. Ethical considerations are integral to anthropological authentication, particularly amid repatriation debates and the legacy of colonial-era fakes. The Native American Graves Protection and Repatriation Act (NAGPRA) of 1990 mandates the return of Native American human remains, funerary objects, sacred items, and cultural patrimony to affiliated tribes, often requiring authentication via cultural affiliation evidence like oral histories or scientific analysis to resolve disputes over ownership and study rights.^[34] Colonial-era fakes, produced during European expansions to satisfy demand for "exotic" artifacts, complicate this by mimicking indigenous styles with modern materials; authentication efforts now emphasize avoiding such deceptions through rigorous provenance checks, as these forgeries perpetuate racial myths and undermine indigenous heritage claims.^[35] Recent advances in genomic authentication have enhanced validation of human remains, addressing gaps in traditional methods. Ancient DNA (aDNA) techniques, refined by 2022, extract and sequence genetic material from skeletal remains to confirm migrations and affiliations; for example, aDNA analysis of South American remains revealed ancient migration routes from Northeast Brazil to Panama, aligning with archaeological evidence and validating oral histories of population movements.^[36] Similarly, 2022 genomic studies of North American remains corroborated indigenous claims of long-term occupancy, such as the Blackfeet Nation's 18,000-year presence in Montana, by matching ancient genomes to modern descendants and detecting admixture events.^[37] These methods require strict authentication protocols, including contamination controls, to ensure reliability in anthropological research.^[38]

In Literature

In literature, authentication primarily involves verifying the authorship of works and ensuring the integrity of texts through historical, linguistic, and material analysis. Authorship attribution often relies on stylometric methods, which examine quantitative patterns such as word frequency, sentence length, and function word usage to distinguish an author's style from others. For instance, stylometric analysis has been applied to disputed plays in the Shakespeare canon, such as Henry VI, Part 1, where computational models attribute sections to Shakespeare based on stylistic markers consistent with his undisputed works, supporting traditional historical records of collaborative authorship in the Elizabethan era. Historical records, including contemporary accounts, contracts, and publication imprints, further corroborate attributions by providing contextual evidence of an author's involvement, as seen in the Stationers' Register entries for Shakespeare's plays.^[39]^[40] Textual authentication focuses on confirming the accuracy and unaltered transmission of literary works by collating multiple manuscript variants and conducting paleographic examinations. Collation involves comparing copies of a text to identify variants, additions, or omissions, a practice central to textual criticism; for example, the Dead Sea Scrolls, discovered in 1947 near Qumran, have been collated to reveal textual variants in biblical books like Isaiah, demonstrating a high degree of fidelity to later Hebrew manuscripts while highlighting scribal corrections and proto-Masoretic stability. Paleographic examination analyzes handwriting features, such as script forms, letter shapes, and ink composition, to date and authenticate manuscripts; this method has verified the age and origin of medieval literary codices, like those containing Chaucer's works, by matching scripts to known historical periods. These techniques ensure that editions reflect the intended textual integrity, drawing on principles of documentary reliability.^[41]^[42]^[43] A pivotal historical event in literary authentication was the Ossian controversy of the 1760s, where Scottish poet James Macpherson published Fragments of Ancient Poetry (1760) and subsequent epics Fingal (1761) and Temora (1763), claiming they were translations of ancient Gaelic manuscripts attributed to the third-century bard Ossian. Critics, including Samuel Johnson, challenged the authenticity, demanding the original Gaelic sources that Macpherson never fully produced, leading to accusations of forgery based on embellished oral traditions and modern inventions; the debate, fueled by nationalist sentiments, ultimately exposed Macpherson's work as largely fabricated, influencing standards for verifying oral-to-written literary transmissions.^[44] In the modern era, authentication faces challenges from digital forgeries and plagiarism, where altered texts or unattributed copies undermine literary integrity. Plagiarism detection tools like Turnitin, developed in 1998 at the University of California, Berkeley, use algorithms to compare submitted works against vast databases of published and student texts, identifying overlaps in phrasing and structure to flag potential unauthorized reproductions in academic literature. Digital forgeries, such as manipulated e-books or AI-generated imitations of classic works, require authentication akin to historical methods but adapted for electronic formats, emphasizing metadata verification and chain-of-custody tracking. Emerging technologies like blockchain address these issues by providing immutable provenance records for digital manuscripts, enabling libraries to track ownership and alterations; for example, blockchain frameworks in library management ensure verifiable histories for rare texts, enhancing trust in digitized collections.^[45]^[46]

Authentication in Commerce

Product Verification

Product verification in commerce involves techniques to authenticate the intrinsic properties of goods, ensuring they are genuine and free from counterfeiting, which undermines brand integrity and consumer safety. These methods focus on embedding identifiable markers within the product itself or tracking its provenance through supply chains, distinct from external packaging elements. By verifying serial numbers, electronic tags, or material compositions, businesses can confirm authenticity at points of sale or distribution, reducing the proliferation of fakes in global markets.^[47] Common techniques include serial numbering, which assigns unique identifiers to individual items for traceability from manufacturing to end-user. Radio-frequency identification (RFID) tags, developed commercially in the 1980s, embed microchips into products to store and transmit data wirelessly, enabling rapid scanning and verification without line-of-sight. Chemical markers, such as taggants or DNA-based additives integrated into materials, provide covert authentication detectable only through specialized equipment, offering resistance to replication. These approaches collectively form layered defenses against forgery, with serial and RFID methods emphasizing traceability and chemical markers focusing on material-level proof.^[48]^[47] In the luxury goods sector, Louis Vuitton has implemented RFID microchip implants in products since March 2021, replacing traditional date codes with scannable chips that store authentication data accessible via mobile apps. This allows instant verification of item history and origin, enhancing resale market confidence. In pharmaceuticals, the European Union's Falsified Medicines Directive (2011/62/EU), enacted in 2011, mandates track-and-trace systems using serialization—unique identifiers on each unit—to prevent falsified drugs from entering supply chains, with compliance enforced across member states by 2019. These examples illustrate how industry-specific adaptations of verification techniques safeguard high-value or critical goods.^[49]^[50] Counterfeiting imposes significant economic burdens, with global trade in fake goods estimated at up to $509 billion annually as of 2016, representing about 3.3% of world trade;^[51] the latest OECD assessment (May 2025), based on 2021 data, estimates $467 billion (2.3% of global imports), indicating a slight decline in share despite absolute growth, with projections suggesting the value could exceed $1 trillion by 2023.^[52]^[53] To counter this, blockchain technology has emerged for immutable supply chain verification, as seen in IBM Food Trust, launched in 2018, which enables participants like retailers and suppliers to track product journeys transparently and detect alterations in real-time. Pilots in food and consumer goods demonstrate reduced fraud risks through decentralized ledgers, though adoption remains limited by interoperability challenges.^[54] E-commerce platforms exacerbate counterfeiting challenges, with fakes comprising a substantial portion of online sales in the 2020s, prompting initiatives like Alibaba's IP protection programs that leverage AI for proactive detection and seller verification. These efforts include automated scanning of listings and collaboration with brands to remove infringing items, yet persistent issues arise from cross-border shipments and algorithmic evasion tactics.^[55] Advancements in AI-driven verification apps address these gaps, particularly for luxury items; for instance, Entrupy's platform uses microscopic imaging and machine learning to authenticate handbags with 99.1% accuracy, as validated in deployments up to 2023, and expanded to streetwear and apparel by October 2025 with 99.86% accuracy.^[56]^[57] Such tools empower consumers and resellers with portable, non-invasive checks, filling voids in traditional expert authentication.

Packaging and Security Features

Packaging and security features in product authentication encompass physical elements integrated into packaging to deter tampering, enable visual or digital verification, and ensure product integrity throughout the supply chain. Holographic labels, first conceptualized through the invention of holography in 1947 by Dennis Gabor, became widely adopted for security purposes in the 1980s, providing three-dimensional images that are difficult to replicate without specialized equipment.^[58]^[59] Tamper-evident seals, which visibly indicate unauthorized access, gained prominence following the 1982 Tylenol tampering incident, leading to FDA guidelines that revolutionized pharmaceutical and consumer goods packaging.^[60] Additionally, QR codes linked to centralized databases allow consumers to scan and verify product authenticity in real-time, enhancing traceability and reducing counterfeiting risks.^[61] These features find extensive application across industries, particularly in food and electronics. In the food sector, USDA organic seals on packaging authenticate certified organic products, enforcing standards that prohibit unauthorized use of the trademark and ensuring consumer trust in labeling claims.^[62] For electronics, companies like Apple employ serialized boxes since the 2010s, where unique identifiers printed on the exterior enable warranty validation and authenticity checks via manufacturer databases, with emerging integration of NFC chips for contactless verification. Advanced technical details further bolster these safeguards. Optically variable ink, which shifts colors based on viewing angle due to thin-film interference, is applied to labels and seals for overt authentication that is simple to inspect yet challenging to forge.^[63] Embedded DNA markers, synthetic sequences unique to a brand or batch, provide covert forensic tracking; these microscopic taggants can be applied via inks or coatings to packaging and detected using PCR amplification for high-confidence verification in investigations.^[64] A notable case study is the pharmaceutical industry's adoption of RFID-enabled blister packs under the U.S. Drug Supply Chain Security Act (DSCSA) of 2013, which mandates serialization to combat counterfeit drugs. RFID tags embedded in or on blister packaging allow real-time tracking from manufacturer to dispenser, as demonstrated by Fresenius Kabi's implementation of GS1-compliant tags for injectable medications, reducing diversion risks and enhancing supply chain visibility.^[65]^[66] Emerging trends address sustainability alongside security, with biodegradable holograms gaining traction in 2025, supported by regulations like the EU's Packaging and Packaging Waste Regulation (PPWR, entered into force February 2024), which promotes eco-friendly anti-counterfeiting features with phased compliance to 2040. These eco-friendly alternatives, often based on paper substrates with metallic or pearlized effects, maintain anti-counterfeiting efficacy while reducing environmental impact, aligning with regulatory pushes for green packaging in sectors like pharmaceuticals and consumer goods.^[67]^[68]

Authentication in Computing

Authentication Factors

Authentication factors in computing are categorized into three primary types, often referred to as "something you know," "something you have," and "something you are," which form the foundational elements for verifying user identity.^[3] The knowledge factor, or "something you know," typically involves information only the legitimate user should possess, such as passwords or personal identification numbers (PINs).^[3] The possession factor, or "something you have," relies on physical or digital objects under the user's control, like hardware tokens or smart cards.^[3] The inherence factor, or "something you are," uses inherent personal characteristics, including physiological biometrics like fingerprints or behavioral biometrics that capture unique user patterns.^[3] The inherence factor encompasses behavioral biometrics, such as keystroke dynamics, which analyze an individual's typing patterns—including dwell time (duration a key is held) and flight time (interval between keys)—to establish a unique behavioral profile for authentication. This approach measures rhythmic and stylistic elements of typing, offering a non-intrusive method to verify identity continuously or during login without requiring additional hardware beyond a keyboard. The possession factor has evolved from simple physical keys to more secure digital implementations, particularly with the advent of smart cards in the 1990s. The EMV standards, first specified in 1996 by Europay, Mastercard, and Visa, introduced chip-based smart cards that store encrypted data and perform dynamic authentication during transactions, significantly reducing fraud compared to magnetic stripe cards.^[69] The knowledge factor carries significant risks, including susceptibility to brute-force attacks, phishing, and reuse across accounts, which can undermine security if the information is compromised. Password strength is often quantified using entropy, a measure of uncertainty in bits, calculated for random passwords as H = \log_2(N^L), where N is the size of the character set (e.g., 95 for printable ASCII characters) and L is the password length.^[3] For example, an 8-character password from a 95-character set yields approximately 52.6 bits of entropy (H = \log_2(95^8) \approx 52.6), providing resistance against exhaustive guessing but requiring longer lengths (e.g., 12+ characters) for robust protection against modern computational power.^[3] These factors integrate to provide layered security, where combining two or more distinct types—such as a password (knowledge) with a smart card (possession)—creates multi-factor authentication that requires an attacker to compromise multiple independent elements, exponentially increasing the difficulty of unauthorized access.^[3]

Single-Factor Authentication

Single-factor authentication (SFA) is a security process that verifies a user's identity using only one category of authentication factor, typically something the user knows, such as a password or PIN. This approach contrasts with more layered methods by depending solely on that single piece of evidence, making it the most basic form of access control in digital systems. SFA has been foundational to user verification since the early days of computing, prioritizing quick entry over robust defense. Common methods of SFA include password-only logins, where users enter a secret string of characters to gain access to accounts or services, and basic token access, such as presenting a simple hardware key like a smart card without additional checks. These techniques are straightforward because they require minimal user effort and system complexity, often integrated directly into login interfaces. For instance, many web applications still default to password-based SFA for user sign-ins. One key advantage of SFA is its ease of use, as users need only recall or possess one item, reducing friction in everyday interactions like checking email or accessing a bank account. Additionally, SFA offers low implementation costs, since it avoids the need for extra hardware, software, or verification steps, making it accessible for small organizations or legacy systems. As of 2023, over one-third of users continued to rely on SFA for authentication, reflecting its persistent simplicity despite growing security concerns.^[70] However, SFA's reliance on a single factor exposes it to significant vulnerabilities, particularly phishing attacks where malicious actors impersonate trusted entities to steal credentials. Google reported blocking approximately 100 million phishing emails daily in recent years, underscoring the scale of these threats that target SFA's weak point. Brute-force attacks also pose risks, as weak passwords—such as those using only lowercase letters—can be cracked in mere seconds using modern computing power. These exploits highlight how SFA fails to mitigate credential compromise effectively. Real-world examples of SFA include traditional email logins, where a username and password suffice for access to services like Gmail or Outlook, and PIN-based ATM withdrawals, first introduced in 1967 with the world's inaugural automated teller machine in London, which used a four-digit code for cash dispensing. Such systems enabled convenient, self-service banking but relied entirely on the secrecy of the PIN. The prevalence of SFA has declined amid high-profile data breaches that exploited its limitations, driving a shift toward stronger protections. The 2017 Equifax incident, for example, compromised sensitive data—including Social Security numbers—for 147 million individuals due to unpatched vulnerabilities, amplifying calls for abandoning single-factor reliance in favor of multi-layered security.^[71]

Multi-Factor Authentication

Multi-factor authentication (MFA) enhances security by requiring users to provide two or more distinct verification factors to confirm their identity, significantly reducing the risk compared to single-factor methods. These factors typically include something the user knows (e.g., a password), something they have (e.g., a mobile device), or something they are (e.g., a biometric trait), ensuring that compromise of one factor alone is insufficient for access.^[72] Implementation of MFA often involves sequential verification, where users complete one authentication step before proceeding to the next, such as entering a password followed by an SMS code or app-generated one-time passcode. In some cases, simultaneous verification occurs, particularly with integrated hardware like smart cards that combine possession and knowledge in a single interaction, though sequential models predominate in software-based systems for broader compatibility.^[73] Standards such as the National Institute of Standards and Technology (NIST) Special Publication 800-63B, as updated in Revision 4 (2025), recommend MFA for Authenticator Assurance Level 2 (AAL2) and above in high-security environments, specifying requirements for authenticators like multi-factor hardware tokens or one-time password devices to mitigate risks from weaker single-factor options.^[74] Common types include two-factor authentication (2FA), which mandates exactly two factors for all users, and adaptive MFA, which dynamically adjusts requirements based on contextual signals such as device trust, location, or behavior to balance security and usability. For instance, adaptive systems may skip secondary factors for logins from a trusted device while enforcing them for unusual access patterns.^[75] The benefits of MFA are substantial, with a 2023 Microsoft study analyzing real-world attack data finding that it reduces the risk of account compromise by 99.2% overall and 98.56% even when credentials are leaked. In practice, banking applications exemplify this; HSBC implemented MFA in its mobile app combining biometrics like voice recognition and touch ID with other factors starting in 2016, enhancing protection for millions of users.^[76]^[77] Despite these advantages, MFA faces challenges including user friction, where additional steps can disrupt workflows and lead to fatigue or resistance, prompting some organizations to explore frictionless alternatives like invisible authentication. Additionally, SIM-swapping attacks, which exploit mobile carrier vulnerabilities to hijack SMS-based codes, have risen sharply in the 2020s, with the FBI investigating 1,075 incidents in 2023 alone resulting in nearly $50 million in losses.^[78]^[79]

Authentication Types

Authentication types in computing are broadly classified by strength, continuity, or medium to address diverse security needs and threat landscapes. Strength-based classification, as outlined in NIST guidelines, categorizes authentication into assurance levels such as AAL1 (low, suitable for basic access), AAL2 (moderate, requiring multi-factor), and AAL3 (high, emphasizing phishing-resistant methods like hardware tokens).^[80] Continuity-based types distinguish between discrete authentication, which verifies identity at a single point (e.g., login), and continuous authentication, which monitors ongoing behavior to detect anomalies throughout a session.^[81] Medium-based classification separates physical authentication, relying on tangible elements like biometric scanners or hardware tokens, from digital authentication, which uses software-based credentials such as passwords or digital certificates.^[82] The evolution of authentication types shifted from predominantly static methods, like fixed passwords vulnerable to replay attacks, to dynamic approaches in the post-2000s era amid rising cyber threats such as phishing and credential stuffing.^[83] This transition accelerated with the adoption of adaptive systems that adjust verification based on context, such as location or device risk, to counter sophisticated attacks that static methods could no longer mitigate effectively.^[84] Performance of authentication types is evaluated using key metrics like false acceptance rate (FAR), the probability of incorrectly granting access to unauthorized users, and false rejection rate (FRR), the probability of denying legitimate users; an ideal balance often targets around 0.1% FAR to ensure both security and usability without excessive denials.^[85] These metrics guide the selection of types, prioritizing low FAR for high-stakes environments while minimizing FRR to maintain user convenience.^[86] Applications of authentication types span various contexts, from securing user logins in web applications via password or biometric methods to device certification in enterprise networks using digital certificates for mutual verification between devices and servers.^[87] Emerging hybrid types, such as zero-trust authentication—which assumes no inherent trust and requires continuous verification regardless of network location—gained widespread adoption following the 2020 SolarWinds supply chain breach, which exposed vulnerabilities in perimeter-based security models.^[88] These types build upon authentication factors like knowledge or possession as foundational elements but emphasize integrated, context-aware verification. NIST SP 800-63 Revision 4 (2025) further refines these classifications with updated AAL requirements and enhanced focus on phishing-resistant authenticators.^[80]^[89]

Strong Authentication

Strong authentication encompasses methods and protocols engineered to provide high levels of assurance against identity compromise in adversarial environments, prioritizing resistance to common attack vectors such as phishing, credential stuffing, and man-in-the-middle intercepts. These approaches go beyond basic verification by integrating multiple layers of security, often leveraging cryptographic primitives and hardware protections to ensure that even if one factor is breached, the overall system remains secure. The FIDO Alliance, established in July 2012, has been instrumental in standardizing such techniques to promote interoperability and widespread adoption of robust authentication frameworks that reduce reliance on vulnerable passwords.^[90] Key techniques in strong authentication include the use of hardware security modules (HSMs), which are specialized, tamper-resistant devices designed to securely generate, store, and manage cryptographic keys for authentication processes, thereby protecting against physical and logical attacks. Another foundational method is certificate-based authentication, relying on public key infrastructure (PKI) standards like X.509, initially published by the ITU-T in 1988, which defines the structure for digital certificates to verify entity identities and enable secure key exchanges.^[91]^[92] In practice, these techniques underpin enterprise virtual private networks (VPNs) that mandate combined biometrics—such as fingerprint or facial recognition—and hardware tokens for user verification, ensuring encrypted remote access to sensitive networks. Similarly, in payment processing, compliance with the Payment Card Industry Data Security Standard (PCI DSS) enforces strong authentication, including multi-factor elements, for all access to cardholder data environments to prevent unauthorized transactions.^[93]^[94] The security model for strong authentication assumes a hostile setting where attackers may control network paths or attempt key interception, necessitating protocols like the Diffie-Hellman key exchange—introduced in the seminal 1976 paper "New Directions in Cryptography"—to establish shared secrets without prior trust. To enhance protection, ephemeral Diffie-Hellman variants generate temporary keys per session, providing perfect forward secrecy that safeguards past communications even if long-term keys are later compromised.^[95]^[96] As a superset, strong authentication incorporates multi-factor authentication while extending to hardware-enforced and certificate-driven verifications for elevated assurance. Its implementation yields substantial benefits, with phishing-resistant strong methods preventing up to 99.2% of account compromise attacks, thereby significantly curtailing account takeovers in high-stakes scenarios.^[97]

Continuous Authentication

Continuous authentication involves the real-time, ongoing verification of a user's identity throughout an active session, rather than relying solely on initial login credentials. This approach leverages passive monitoring to detect deviations from established user patterns, ensuring sustained security in dynamic environments such as mobile devices or enterprise networks. Unlike discrete authentication events, it operates implicitly in the background, adapting to contextual changes to prevent unauthorized access.^[98] Key mechanisms in continuous authentication include behavioral analysis and environmental sensing. Behavioral analysis examines user-specific patterns, such as gait recognition derived from accelerometer and gyroscope data in wearables, which identifies individuals through unique walking styles without requiring active input. For instance, systems using inertial measurement units (IMUs) in smartwatches extract geometric features like stride length and acceleration variance to authenticate users continuously. Environmental sensors complement this by monitoring contextual factors, including device location via GPS and IP address geofencing, which restricts access if the user deviates from predefined geographic boundaries or network profiles. These location-based checks, often integrated into mobile architectures, verify proximity to trusted zones in real time. Behavioral biometrics, such as gait, build on established authentication factors by providing implicit, session-long validation. Implementation typically relies on machine learning models for anomaly detection, which profile normal user behavior and flag deviations with high precision. For example, convolutional transformer models processing sensor data from smartphones have demonstrated robust performance in distinguishing legitimate users from imposters. A 2023 study on touch dynamics using neural networks reported authentication accuracies exceeding 95% in controlled scenarios, highlighting the efficacy of supervised learning for behavioral profiling. In resource-constrained environments, lightweight algorithms like isolation forests further enable real-time processing by isolating outliers in feature spaces derived from motion and interaction data. These models train on historical user data to establish baselines, updating dynamically to accommodate natural variations. Prominent examples include workplace systems like Microsoft Entra ID (formerly Azure AD), which introduced continuous access evaluation in 2021 to monitor and revoke sessions based on risk signals such as IP changes or anomalous activities. This feature enforces near-real-time policy updates, revoking tokens for incompatible clients upon detecting threats. Advantages of continuous authentication encompass enhanced detection of session hijacking, where attackers exploit valid credentials post-login, by continuously validating identity and context to mitigate risks like token theft. However, challenges arise from privacy concerns, as pervasive monitoring of behavioral and location data must comply with regulations like the EU's GDPR, which mandates explicit consent and data minimization to protect user information.^[99] Post-2020 advancements have focused on edge computing to achieve low-latency continuous authentication, particularly in IoT and mobile ecosystems. By processing sensor data locally at the network edge, these systems reduce transmission delays to milliseconds, enabling seamless verification without cloud dependency. For instance, 5G-integrated edge architectures support zero-trust models with real-time multi-factor checks, improving responsiveness in high-mobility scenarios. Such innovations address earlier limitations in centralized processing, enhancing scalability for resource-limited devices while maintaining security.^[100]

Digital Authentication

Digital authentication refers to the processes and mechanisms used to verify the identity of users, devices, or entities within purely digital environments, relying on cryptographic protocols and standards to ensure secure verification without physical tokens. It forms the backbone of secure online interactions, enabling trust in systems like web applications and distributed networks by confirming that a party possesses the necessary credentials or keys. Unlike broader authentication paradigms, digital authentication emphasizes protocol-driven proofs using mathematical foundations to prevent unauthorized access.^[101] The cryptographic basis of digital authentication often centers on asymmetric cryptography, exemplified by the RSA algorithm developed by Rivest, Shamir, and Adleman in 1977. In RSA, a public-private key pair is generated by selecting two large prime numbers p and q, computing the modulus n = p \times q, and deriving the public key exponent e and private key exponent d such that (e \times d) \mod \phi(n) = 1, where \phi(n) = (p-1)(q-1) is Euler's totient function. Digital signatures in RSA involve signing a message hash with the private key to produce a verifiable output, which can be checked against the public key to confirm authenticity and integrity, as the computational difficulty of factoring n back into p and q ensures security. This mechanism underpins many digital authentication schemes by allowing non-repudiation without revealing the signer's private key.^[102] Key protocols for digital authentication include Security Assertion Markup Language (SAML) 2.0, standardized by OASIS in 2005, which facilitates single sign-on (SSO) by enabling the exchange of authentication and authorization data between an identity provider and a service provider using XML-based assertions. SAML supports federated identity management, allowing users to authenticate once and access multiple applications securely across domains. Complementing this, OAuth 2.0, defined in RFC 6749 and published in 2012, provides an authorization framework for delegating access to APIs without sharing credentials, using access tokens to grant limited permissions on behalf of a resource owner. These protocols have become foundational for web-based authentication, with OAuth widely used in modern API ecosystems.^[103]^[101] In web services, digital authentication frequently employs JSON Web Tokens (JWTs), standardized in RFC 7519 in 2015, which encode claims in a compact, signed format for secure transmission between parties. JWTs serve as bearer tokens in protocols like OAuth, carrying user identity and permissions while being verifiable via digital signatures. In blockchain applications, such as Ethereum, digital authentication occurs through wallet signatures using the Elliptic Curve Digital Signature Algorithm (ECDSA) on the secp256k1 curve; a private key signs transactions or messages, and the corresponding public key-derived address verifies ownership without exposing the key, enabling secure decentralized interactions.^[104] Despite these advances, digital authentication faces significant challenges from quantum computing threats, particularly Shor's algorithm, proposed by Peter Shor in 1994, which can efficiently factor large integers and solve discrete logarithms on a quantum computer, potentially breaking RSA and similar systems by deriving private keys from public ones. This vulnerability has prompted the National Institute of Standards and Technology (NIST) to finalize post-quantum cryptography standards in August 2024, including FIPS 203 (ML-KEM for key encapsulation), FIPS 204 (ML-DSA for digital signatures), and FIPS 205 (SLH-DSA for stateless hash-based signatures), designed to resist quantum attacks while maintaining compatibility with existing infrastructure.^[105]^[106] Emerging trends in digital authentication emphasize passwordless methods, such as WebAuthn, a W3C recommendation published in March 2019, which standardizes public key cryptography for authentication using authenticators like hardware tokens or biometrics, integrated into browsers for seamless, phishing-resistant logins. By 2025, passkey adoption—built on WebAuthn—has seen significant growth, with 53% of surveyed consumers enabling passkeys on at least one account and 74% expressing awareness, alongside a 30% increase in conversion rates for services implementing them over traditional passwords.^[107]

References

[1]
authentication - Glossary - NIST Computer Security Resource Center
authentication · Verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in an information system. · The ...Identity authenticationIdentification and AuthenticationStrong authenticationMulti-factor authenticationElectronic Authentication (E ...
[2]
NIST Special Publication 800-63B
This document provides recommendations on types of authentication processes, including choices of authenticators, that may be used at various Authenticator ...
[3]
What's The CIA Triad? Confidentiality, Integrity, & Availability ...
Nov 18, 2024 · Use access controls, such as user authentication and authorization, to limit who can access sensitive data and what they can do with it. Use ...
[4]
multi-factor authentication - Glossary | CSRC
Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password), something you have (e.g ...
[5]
NIST authentication basics and Microsoft Entra ID
Oct 23, 2023 · Term, Definition. Assertion, A statement from a verifier to a relying party that contains information about the subscriber.
[6]
What is Authentication? Definition and uses - Auth0
Authentication is a term that refers to the process of proving that some fact or some document is genuine.
[7]
AUTHENTICATION definition | Cambridge English Dictionary
the process of proving that something is real, true, or what people say it is: A technique for identifying the age of wood can be used for authentication of ...<|control11|><|separator|>
[8]
Authenticity vs. Non-Repudiation - UpGuard
Jan 5, 2025 · Authenticity and non-repudiation are two core concepts in information security regarding the legitimacy and integrity of data transmission.
[9]
authorization - Glossary | CSRC
authorization · The right or a permission that is granted to a system entity to access a system resource. · Access privileges granted to a user, program, or ...
[10]
Chain of Custody - StatPearls - NCBI Bookshelf - NIH
The chain of custody is the most critical process of evidence documentation. It is necessary to assure the court of law that the evidence is authentic, ie, ...Definition/Introduction · Issues of Concern · Clinical Significance
[11]
Cylinder Seals in Ancient Mesopotamia - World History Encyclopedia
Dec 2, 2015 · To authenticate a document, the seal was rolled onto wet or moist clay which was the same as signing one's name. Seals were also worn as amulets ...
[12]
Understanding Paper: Structures, Watermarks, and a Conservator's ...
May 7, 2021 · The oldest known watermarks date to 13th-century Europe and were considered marks of origin, though sometimes they indicated quality levels.
[13]
https://harvardartmuseums.org/article/understanding-paper-structures-watermarks-and-a-conservator-s-passion
[14]
History of Fingerprints - Onin.com
The Fingerprint Branch at New Scotland Yard (Metropolitan Police) was created in July 1901. It used the Henry System of Fingerprint Classification. In June ...
[15]
Unlocking the Code: Lessons in Cryptography from the Enigma ...
Jun 15, 2023 · The Enigma machine also highlights the importance of key establishment and authentication in secure communications.
[16]
What is PKI? A Public Key Infrastructure Definitive Guide - Keyfactor
PKI security first emerged in the 1990s to help govern encryption keys through the issuance and management of digital certificates. · Common examples of PKI ...
[17]
A Look Back at the Decade of Blockchain : 2010-2020
Jan 29, 2020 · The blockchain that came to limelight with the introduction of and transacting through bitcoins has come a long way since 2009 onwards.Missing: history authentication
[18]
Mapping the Knowledge Structure of Image Recognition in Cultural ...
Our analysis reveals that the integration of artificial intelligence, particularly deep learning, has significantly enhanced digital documentation, artifact ...
[19]
Introduction to Provenance Research - Collecting and Provenance
Feb 18, 2025 · 1) Authentication and Attribution: Provenance helps establish the authenticity of an artwork and verify its attribution to a specific artist. It ...
[20]
Painting Provenance: 5 Reliable Ways to Verify Ownership History
Aug 2, 2025 · Leverage institutional expertise: Many museums, auction houses and libraries may be able to assist with provenance research or authentication.
[21]
The Chemistry Behind Radiocarbon Dating and its Applications in ...
Mar 16, 2023 · Within 1,000 years, the calculated date may be +/- 20-40 years off. Over 3,000, the calculated date may have a +/- 100-300 year error. When ...
[22]
Art Authentication Services | Scientific & AI Analysis - ArtDiscovery
X-ray fluorescence (XRF) lets us identify the elemental composition of pigments and materials. Traditional point analysis gives us data from a single spot — ...
[23]
Painting authentication - Trinity Art Research
Conservation research using imaging methods (X-ray, IR Reflectography and UV Fluorescence) ... Radiocarbon Dating, Carbon 14; XRF – X-ray Fluorescence ...Missing: scientific | Show results with:scientific
[24]
Tracing Art - Getty Museum
The GPI provides open access to millions of richly curated records that document historic transfers of art ownership.
[25]
Han van Meegeren's Fake Vermeers
From 1941 to 1943, the year in which he divorced his second wife, Van Meegeren continued to produce Vermeer forgeries. In 1943, he sold the Christ and the ...
[26]
https://www.essentialvermeer.com/misc/van_meegeren.html
[27]
Art Authentication: A Comparative Analysis of Convolutional Neural ...
Dec 29, 2024 · The study conducted by Bartos, utilized ResNet to distinguish real and fake images by analyzing high-level features and structural patterns ...
[28]
Oral Tradition and the Kennewick Man | Yale Law Journal
Nov 3, 2016 · There have been more than 300 instances where museums and federal agencies have relied on oral traditions to determine the cultural affiliation ...
[29]
The Oxford Handbook of Indigenous Oral Traditions and Archaeology
Sep 19, 2024 · This edited volume explores oral traditions and material-based histories and the knowledge they contain as derived from and defined by the ...
[30]
Thermoluminescence dating - MFA Cameo
Jun 8, 2022 · The accuracy of the technique is about 10%. The rate of energy accumulation depends on the amount of background radiation to which the object ...
[31]
Investigating Archaeological Artifacts Using Isotopic Techniques
Oct 10, 2024 · Isotopic techniques investigate origins, movements, and interactions of ancient materials, using isotopes like carbon, nitrogen, strontium, ...
[32]
(PDF) Simpson 2018 Behind Easter Island's moai statues
What geochemical analysis was performed on the basalt samples?add. Geochemical testing revealed distinct trace element compositions, allowing researchers to ...Missing: authentication | Show results with:authentication
[33]
Native American Graves Protection and Repatriation Act of 1990
Feb 10, 2025 · NAGPRA addresses the repatriation and disposition of Native American human remains, funerary objects, sacred objects, and objects of cultural patrimony.
[34]
The Key to Authentic Pre-Columbian Fakes: The Racial Myth of the ...
Dec 7, 2023 · This article shows the relationship between these forgeries' production, circulation, and consumption and the ways Latin American indigenous peoples have been ...
[35]
Genomic evidence for ancient human migration routes along South ...
Nov 2, 2022 · We find a distinct relationship between ancient genomes from Northeast Brazil, Lagoa Santa, Uruguay and Panama, representing evidence for ancient migration ...
[36]
Top 10 discoveries about ancient people from DNA in 2022
Dec 19, 2022 · In February, Mark Lipson and coworkers reported DNA recovery from the remains of six humans from archaeological sites in Malawi, Tanzania, and ...
[37]
The necessity for authentication of ancient DNA from archaeological ...
Jun 23, 2025 · This article revisits the importance of adhering to standardised aDNA protocols and established criteria for aDNA authentication. Through the ...Missing: anthropology | Show results with:anthropology
[38]
[PDF] arXiv:1610.05670v2 [cs.CL] 3 Aug 2017
Aug 3, 2017 · As a validation of the method, in Section 5 we perform a stylometric analysis of the complete undisputed works of our six primary playwrights, ...
[39]
[PDF] Statistical Stylometrics and the Marlowe-Shakespeare Authorship ...
The question addressed here is an understudied question in the field of stylometry. To what extent does an author's style drift or shift over time, and can such ...
[40]
Textual Transmission in the Dead Sea Scrolls: Scribes, Corrections ...
Oct 9, 2025 · A deep analysis of Qumran scribal habits, corrections, and layers showing stable proto-Masoretic transmission in the Dead Sea Scrolls.<|separator|>
[41]
https://uasvbible.org/2025/10/09/textual-transmission-in-the-dead-sea-scrolls-scribes-corrections-and-layers/
[42]
What is palaeography? - The British Academy
Jul 16, 2020 · Palaeography ('old writing') is the study of pre-modern manuscripts: hand-written books, rolls, scrolls and single-sheet documents.
[43]
1 - The Ossian controversy and the racial beginnings of Britain
The immense popularity of the Fragments encouraged Macpherson to produce translations of Ossian's epics, Fingal (1761) and Temora (1763). Widely suspected to be ...<|separator|>
[44]
Turnitin celebrates 25 years in global academic integrity
Jun 12, 2023 · The company got its start back in 1998 at the University of California, Berkeley. Four students, Dr. John Barrie, Emmanuel Briand, Melissa ...
[45]
Authentication of Digital Objects: Lessons from a Historian's Research
The issues stemming from authenticating digital objects are quite similar, and in some cases identical, to those relating to holographs or printed books.
[46]
Product Authentication Approaches: Physical Features, Tracing ...
An easier method is to add unique features to easily validate item. Such features include holograms, watermarks, security threads, chemical and DNA markers ...Missing: techniques | Show results with:techniques
[47]
A Review of RFID Product Authentication Techniques - ResearchGate
In this paper we focus on investigating how RFID can be used in product authentication in supply chain applications and a review of existing approaches is ...Missing: sources | Show results with:sources
[48]
Everything You Need To Know About Louis Vuitton Microchips - Luxity
Since March 2021 Louis Vuitton replaced their date codes for with Radio Frequency Identification (RFID) microchips. Read more.
[49]
Falsified Medicines Directive - Public Health - European Commission
Falsified medicines are often disguised as authentic medicines but may contain ingredients of bad or toxic quality, or in the wrong dosage.Legal framework – The... · Implementation of the Falsified... · Safety featuresMissing: track- | Show results with:track-
[50]
Trends in Trade in Counterfeit and Pirated Goods - OECD
... international trade in counterfeit and pirated products could amount to as much as USD 509 billion. This represents up to 3.3 % of world trade. This amount ...Missing: $500 | Show results with:$500
[51]
Ready To Rumble: IBM Launches Food Trust Blockchain ... - Forbes
Oct 8, 2018 · After 18 months of testing, IBM's blockchain-based food traceability platform is now live for global use by retailers, wholesalers and suppliers ...<|separator|>
[52]
Intellectual property and e-commerce: Alibaba's perspective - WIPO
Alibaba is harnessing various advanced technologies to tackle online counterfeiting and piracy. To identify counterfeit goods it uses fake product ...Missing: 2020s | Show results with:2020s
[53]
Luxury Authentication - Entrupy
Entrupy AI authenticates over 20 of the top luxury brands with nearly 100% accuracy. If our tech ever gets it wrong, we'll give your money back—no questions ...
[54]
Short history of holography - - holographic equipment
Modern holography dates from 1947, when Dennis Gabor, a scientist researching the ways to improve the resolution of the electron microscope, developed what ...
[55]
How Do Security Hologram Stickers Work? - Maverick Label Blog
Jun 12, 2024 · History and Evolution. The use of holography for security purposes dates back to the early 1980s. Initially developed for securing banknotes ...
[56]
Tamper-Resistant Packaging Began in 1982 with 7 Still Unsolved ...
Dec 16, 2019 · Tamper-Resistant Packaging Began in 1982 with 7 Still Unsolved Murders. The 1982 Tylenol poisonings in Chicago brought about a radical change in ...
[57]
Secure QR codes for anti-counterfeiting, with examples - Scantrust
Only secure QR codes can enable near-instant verification of a counterfeit product or document. The other types of QR codes above are inherently insecure.How counterfeiters typically... · Static and dynamic QR code...
[58]
USDA Certified Organic: Understanding the Basics
The USDA organic seal is a registered trademark, which allows USDA to enforce criminal penalties against uncertified operations falsely using the seal to ...Missing: authentication | Show results with:authentication
[59]
Ultimate Guide to Optically Variable Pigments, Also Known as OVPs
Oct 22, 2024 · Optically variable pigments can be used in any industry that requires specific authentication protocols that the public can easily identify ...
[60]
Preventing Counterfeit Packaging with DNA. Yes, DNA | 2016-02-01
Feb 1, 2016 · DNA marking technology provides a powerful means to authenticate originality and verify provenance of a huge array of items, including packaging.
[61]
Drug Supply Chain Security Act (DSCSA) - FDA
Oct 16, 2025 · The Drug Supply Chain Security Act (DSCSA) outlines steps to achieve an interoperable and electronic way to identify and trace certain prescription drugs.
[62]
Fresenius Kabi Goes Above and Beyond DSCSA Requirements
Aug 12, 2021 · Fresenius Kabi became the first pharmaceutical manufacturer to embed medication identification data into an RFID tag, relying on GS1 Standards.
[63]
Eco-friendly paper holograms on the rise
May 19, 2025 · Paper holograms made with eco-friendly materials are emerging as game-changers across the pharmaceuticals, nutraceuticals, food and beverage ...
[64]
About Smart Cards : Applications : EMV - Secure Technology Alliance
The EMV specification, first available in 1996 and managed by EMVCo, defines the global interoperable standard for smart bank cards.Missing: history possession factor
[65]
2025 Multi-Factor Authentication (MFA) Statistics & Trends to Know
Jan 3, 2025 · The use of multi-factor authentication (MFA) is on the rise. As of January 2023, almost two-thirds of users are employing MFA for authentication.
[66]
Equifax to pay up to $700m to settle data breach - BBC
Jul 22, 2019 · Equifax to pay up to $700m to settle data breach · at least 147 million names and dates of birth · about 145.5 million Social Security numbers · a ...
[67]
Multi-Factor Authentication (MFA) Solutions - Okta
Step up your game with Adaptive MFA. Protect your organization with intelligent, phishing-resistant authentication that your workforce will love.
[68]
MFA vs. 2FA vs. 2SV - Multi-factor authentication - IS Decisions
MFA requires two or more factors. 2FA uses two distinct factors, while 2SV uses two sequential steps. 2FA and 2SV are types of MFA.
[69]
https://www.securetechalliance.org/smart-cards-applications-emv/
[70]
Adaptive Multi-Factor Authentication (MFA)
Adaptive Multi-Factor Authentication is a method for using contextual information and business rules to determine which authentication factors to apply to a ...
[71]
How effective is multifactor authentication at deterring cyberattacks?
May 1, 2023 · Our findings reveal that MFA implementation offers outstanding protection, with over 99.99% of MFA-enabled accounts remaining secure during the ...
[72]
HSBC rolls out voice and touch ID security for bank customers
Feb 19, 2016 · HSBC is rolling out voice recognition and touch ID services for 15 million customers by the summer in a big step towards biometric banking in the UK.Missing: multi- factor
[73]
Multi-Factor Authentication: Advantages and Challenges | Safepoint IT
Oct 9, 2024 · User Friction. The swap from a quick and easy password to a two-step sign-in process can seem like a headache. Some users view 2FA as ...
[74]
A deep dive into the growing threat of SIM swap fraud
Aug 18, 2025 · In 2023, the FBI investigated 1,075 SIM swap attacks, with losses approaching $50 million. In 2024, IDCARE reported a 240% surge in SIM swap ...
[75]
[PDF] Digital Identity Guidelines: Authentication and Lifecycle Management
Jul 24, 2025 · Verifiers operated by government agencies at AAL2 SHALL be validated to meet the requirements of FIPS 140 Level 1. Page 19. NIST SP 800-63B.
[76]
Overview of Conditional Access Authentication Strengths
Oct 24, 2025 · For example, an authentication strength can require users to use only phishing-resistant authentication methods to access a sensitive resource.Scenarios For Authentication... · Built-In And Custom... · Built-In Authentication...
[77]
What are the different types of authentication? - LogicMonitor
Aug 2, 2025 · Certificate-based authentication uses digital certificates to verify the identity of users, devices, or machines. A certificate is a digital ...
[78]
A Short History of Authentication - Cybersecurity ASEE
Jun 7, 2022 · The history of authentication begins with passwords in the 1960s, with the first computers being available to the broad public.Missing: shift | Show results with:shift<|separator|>
[79]
The Evolution of Authentication - Identity Management Institute®
Oct 24, 2018 · The slow evolution of authentication does not generally follow pace with the fast changing technology and cybersecurity threat landscape.
[80]
The Secret to Better Face Recognition Accuracy: Thresholds - Kairos
Sep 27, 2018 · False Accept Rate (FAR): Frequency that the system makes False Accepts. ... Example: FAR of 0.1% system will make 1 false accept for every 1000 ...
[81]
False Acceptance Rate (FAR) and False Recognition Rate (FRR)
The false acceptance rate, or FAR, is the measure of the likelihood that the biometric security system will incorrectly accept an access attempt by an ...
[82]
Secure Logins with Certificate-Based Authentication
Jul 15, 2025 · Device certificate authentication allows organizations to verify the identity of laptops, phones, servers, and even containers—automatically, ...
[83]
The SolarWinds Hack: Why We Need Zero Trust More Than Ever
The cybercriminals began sending the malware in March of 2020 and weren't discovered until December 2020. This means you would have needed network, DNS, account ...
[84]
FIDO Alliance 2019 Progress Report: FIDO Authentication for ...
Dec 4, 2019 · The FIDO (Fast IDentity Online) Alliance, www.fidoalliance.org, was formed in July 2012 to address the lack of interoperability among strong ...
[85]
What is a Hardware Security Module (HSM) & its Services? - Entrust
Hardware security modules (HSMs) are hardened, tamper-resistant hardware devices that secure cryptographic processes by generating, protecting, and managing ...
[86]
Fourth ITU-T X.509 Day
First published in 1988, the result of collabaration between ITU and ISO/IEC, ITU-T X.509 has evolved through nine editions (the latest approved in October ...
[87]
[PDF] Strong Authentication for Secure Remote (VPN) Access - Thales
SafeNet Trusted Access easily lets you apply the multi-factor authentication methods deployed for VPNs to cloud and web- based applications. By federating your ...
[88]
[PDF] Multi-Factor Authentication - PCI Security Standards Council
PCI DSS requires that all factors in multi-factor authentication be verified prior to the authentication mechanism granting the requested access. Moreover, no ...
[89]
[PDF] New Directions in Cryptography - Stanford Electrical Engineering
Diffie and M. E. Hellman, “Multiuser cryptographic techniques,” presented at National Computer Conference, New York, June 7-10,. 1976. [6] D. Knuth, The Art of ...
[90]
What is Perfect Forward Secrecy? Definition & FAQs | VMware
In Transport Layer Security (TLS) 1.3, the ephemeral Diffie–Hellman key exchange supports perfect forward secrecy. OpenSSL provides forward secrecy with ...
[91]
Eight Benefits of Multi-Factor Authentication (MFA) | Ping Identity
Mar 24, 2025 · According to Microsoft, MFA can prevent 99.2 percent of attacks on your accounts1. ... Preventing unauthorized access to online learning platforms ...
[92]
Continuous Authentication in Resource-Constrained Devices via ...
Continuous authentication allows devices to keep checking that the active user is still the rightful owner instead of relying on a single login.
[93]
Continuous access evaluation in Microsoft Entra
Jul 22, 2025 · Learn how continuous access evaluation in Microsoft Entra enhances security by responding to user state changes in near real time.
[94]
[PDF] 5G Edge computing and zero trust architecture: A secure synergy
Jan 30, 2025 · In continuous verification, two or more entities are authenticated and authorized in real time using concepts such as multi-factor ...
[95]
RFC 6749 - The OAuth 2.0 Authorization Framework
The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner.Bearer Token Usage · RFC 9700 · Oauth · RFC 5849
[96]
[PDF] A Method for Obtaining Digital Signatures and Public-Key ...
R.L. Rivest, A. Shamir, and L. Adleman. ∗. Abstract. An encryption method is presented with the novel property that publicly re- vealing an encryption key ...
[97]
Security Assertion Markup Language (SAML) v2.0 - OASIS Open
The complete SAML v2.0 OASIS Standard set (PDF format) and schema files are available in this zip file. The approved specification set consists of:.
[98]
RFC 7519 - JSON Web Token (JWT) - IETF Datatracker
JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties.
[99]
[quant-ph/9508027] Polynomial-Time Algorithms for Prime ... - arXiv
Aug 30, 1995 · Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer. Authors:Peter W. Shor (AT&T Research).
[100]
NIST Releases First 3 Finalized Post-Quantum Encryption Standards
Aug 13, 2024 · NIST has finalized its principal set of encryption algorithms designed to withstand cyberattacks from a quantum computer.
[101]
Passkeys: Passwordless Authentication - FIDO Alliance
In a recent independent survey commissioned by the FIDO Alliance, 53% of people reported enabling passkeys on at least one of their accounts, with 22% enabling ...Passkey Implementation · Passkey Directory · Alliance Overview · Resource LibraryMissing: statistics | Show results with:statistics