Re: Biometric authentication for intranet websites?
From: Lik Mai Sak (cuddlybear101@yahoo.com)Date: 06/02/02
- Next message: lyal collins: "Re: Need help in Australian employees monitoring Law"
- Previous message: Marcus L. Reid: "Blowfish encryption program"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Lik Mai Sak <cuddlybear101@yahoo.com> Date: Sun, 02 Jun 2002 19:15:42 +1000
Scott Bussinger wrote:
> I'm new to this field and wanted to ask for some advice on software/hardware
> solutions for biometric controlled access to intranet websites.
>
> Here's my situation: I have a controlled environment where I can control (to
> a moderate degree) the software running on a client PC. I can also stipulate
> small amounts of hardware be required on each PC (say under $200). I need to
> control access to a web application from those PC's. One access option would
> be username/password entry, but I'd like to offer an alternate method based
> on biometric authentication to speed use of the system. In our case, a
> single logon at the beginning of a session is not sufficient and
> authentication will need to take place before many significant events during
> a session, thus making username/password authentication a royal pain.
>
> I'm in the investigation stage at this point and I'm hoping someone can
> point me to some products that implement this sort of web authorization.
>
> I'm assuming that the biometric authorization returns some sort of digital
> client certificate in the web request -- is this correct? Or how do these
> biometric devices work in this environment?
>
> Thanks!
I would put the restricted site behind a seperate proxy which requires you to
log in each time you access the site, rather then using the global logon across
the domain.
You can tie the secure site logon into the biometrics to ensure that the person
using the user/pass is the correct humanware entity.
-- E.What better way to demoralise, When your own children are your spies... J. Belladonna
- Next message: lyal collins: "Re: Need help in Australian employees monitoring Law"
- Previous message: Marcus L. Reid: "Blowfish encryption program"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|