1. Authentication & the Web
What is Authentication
Current means of web authentication
Future Plans
Issues and Challenges
May 10, 2001
An Overview of the Princeton University Web

2. An Overview of the Princeton University Web
Authentication
You are who you say you are
Something you know (password)
Something you have (ID card)
James Bond (007)
Authentication is not “authorization”
May 10, 2001
An Overview of the Princeton University Web

3. Web Authentication Today
Your University NetID and Password
So many passwords from which to choose
Application-specific ID/Password
e.g. DataMall, PeopleSoft
Typically maintained by some individual
May 10, 2001
An Overview of the Princeton University Web

4. An Overview of the Princeton University Web
Current Problems
Too many passwords
Not all web pages that ask for your password are “secured” (SSL)
So, passwords are transmitted in the clear
May 10, 2001
An Overview of the Princeton University Web

5. An Overview of the Princeton University Web
Future Plans
Single/Initial Sign On
Several different technologies under investigation
I login “once”
Digital Certificates
Akin to a key on your key chain
No password over the network
May 10, 2001
An Overview of the Princeton University Web

6. An Overview of the Princeton University Web
Issues and Challenges
New, more secure authentication technologies for the web will require change
Development and implementation work
Work to learn a new way of doing things
Successful change requires technical planning, community input and strong communications
May 10, 2001
An Overview of the Princeton University Web