|
Summary:
|
In recent, many application services, especially financial services, require more reliable or combined authentication method like multifactor authentication because of increasing of ID theft. For example, one time password authentication and other new authentication methods became to be used instead of traditional password based authentication.
The combination of authentication methods provided multiple IdSPs is able to enhance the assurance of authentication. Recommendation ITU-T X.1154 provides the general framework of combined authentication on multiple identity service providers (IdSPs) environment for service provider. In this Recommendation, three types of combined authentication methods are considered; multi-factor authentication, multi-methods authentication and multiple authentication.
The framework in this Recommendation describes models, basic operations and security requirements against each model components and each messages between model components to keep the total assurance of authentication in case of the combination of multiple IdSPs. In addition, the framework also describes models, basic operations and security requirements to support the authentication service that manages combination of multiple IdSPs.
|
