Multi-factor Authentication in Key Management Systems
Rick Lopes de Souza, Lau Cheuk Lung, Ricardo Felipe Custódio · 2013
Telematic environments such as e-health and e-court systems work with highly sensitive data. To ensure the necessary security and flexibility, a strong authentication mechanism is essential. However, to fit the real needs, the systems must be flexible enough to provide optimized processes without compromising safety. The focus in this work is to develop a secure and flexible multi-factor authentication to telematic environments with key management. To provide security in the use of remote cryptographic functions, we propose an authentication service embedded in a key management system as a trusted third party. The main characteristics of the proposed model are: flexibility, interoperability, safety and mobility. We expose the model architecture, detail the implementation and analyze the security based on the most common authentication attacks.