For critical infrastructure facilities, mitigation techniques for insider threats are primarily non-technical in nature and rely heavily on policies/procedures. Traditional access control measures (access cards, biometrics, PIN numbers, etc.) are built on a philosophy of trust that enables those with appropriate permissions to access facilities without additional monitoring or restrictions.
Many authentication systems, such as those used in online banking and other web applications, operate on the basis of a virtual ID (e.g., session cookie), that is created after an initial authentication, typically via user name and a password. The security application essentially transforms a computing device into both a device that is associated with the user, and a location of the user. The session cookie itself becomes the item that is tied to the network source address of the computer, which becomes akin to a location. As GPS devices and smart phones continue to become smaller, less expensive and more powerful, the session cookies may also serve a dual purpose to identify the user location. Additionally, after initial access is granted, the authentication system may prompt the user to periodically re-enter access identification, particularly when changing applications, thereby disrupting the user.
Thus, there is a need for an authentication system with reduced disruption to the user that provides a high assurance of strong authentication.
Intended advantages of the disclosed systems and/or methods satisfy one or more of these needs or provide other advantageous features. Other features and advantages will be made apparent from the present specification. The teachings disclosed extend to those embodiments that fall within the scope of the claims, regardless of whether they accomplish one or more of the aforementioned needs.