HP ProtectTools: Authentication technologies and suitability to task

ManualsBrandsHP ManualsTabletHP Compaq tc4200 Tablet PC

HP ProtectTools:

Authentication technologies and suitability to task

Introduction......................................................................................................................................... 2

Authentication technologies in HP ProtectTools ........................................................................................ 2

Password authentication ....................................................................................................................... 3

TPM embedded security chip authentication............................................................................................ 4

Smart card authentication ..................................................................................................................... 4

USB token authentication ...................................................................................................................... 5

Biometric fingerprint authentication ........................................................................................................ 6

Virtual token authentication................................................................................................................... 7

Feature Comparison and suitability to task.............................................................................................. 7

Suitability to Task................................................................................................................................. 8

Conclusion.......................................................................................................................................... 9

For more information............................................................................................................................ 9

Summary of content (9 pages)

PAGE 1
HP ProtectTools: Authentication technologies and suitability to task Introduction......................................................................................................................................... 2 Authentication technologies in HP ProtectTools ........................................................................................ 2 Password authentication .......................................................................................................................
PAGE 2
Introduction The concept of information security is based on ensuring that only authorized users have access to information. The process of verifying a user’s identity is simply referred to as user authentication. User authentication is based on three traits that can be uniquely tied to an individual. These are: 1. Knowledge - What the person knows (e.g. password) 2. Possession - What the person has (e.g. USB token, smartcard) 3. Physical characteristic - Who the person is (e.g.
PAGE 3
Credential Manager for HP ProtectTools currently supports the following authentication technologies: Credential Description Password Requires the user to create a unique passphrase and use it for identification. Trusted Platform Module (TPM) A cryptographic security chip embedded in a client PC or other computing device that is able to protect credentials and cryptographic functions.
PAGE 4
If implemented correctly, passwords provide good baseline security. However, in order to protect sensitive data, stronger authentication is required.
PAGE 5
by becoming permanently disabled after 5 incorrect PIN entries. This is a standard feature, and it ensures that even with access to both the smart card and the system, the PIN cannot be guessed. Unlike passwords, loss of smart cards can be detected and steps can be taken to prevent access to the system and the network. Smart cards provide for mobility (stronger, portable user authentication on devices). This allows users to authenticate on multiple systems.
PAGE 6
Many USB tokens have a cryptographic chip/engine which can perform data encryption. These USB tokens can therefore naturally integrate with PKI deployments in a corporation and provide functionality such as email signing and data encryption. Note: In addition to PKI support, HP ProtectTools also provides the means to more securely store user authentication credentials like passwords and therefore does not require additional PKI infrastructure elements.
PAGE 7
Virtual token authentication Virtual tokens provide stronger authentication than passwords and are similar in operation to smart cards and USB tokens. Virtual tokens however are not cryptographic devices. The token is generated on the system and can be stored in a user specified location. Credential Manager for HP ProtectTools allows the creation of Virtual tokens on any storage device connected to the system. These include but are not limited to: 1. SD cards 2. Diskettes 3. Hard drive 4. Registry 5.
PAGE 8
Suitability to Task Each authentication device provides a tradeoff between ease of use, administrative complexity and level of security. The following graph visually represents where these devices fit in the administrative complexity versus level of security spectrum.
PAGE 9
Conclusion All authentication technologies provide a level of protection against unauthorized access. The determining tradeoffs are level of security, cost, and usability. In making a decision on which authentication technology to deploy, all three factors should be taken into consideration. It is important that the selected technology provide the level of protection appropriate for an environment. It is also important that the selected technology be usable and not result in user dissatisfaction.