TKK | Tietoverkkolaboratorio | Opetus
[intro]
[cryptography]
[schemes]
[protocols]
[implementations]
[authors]
 

How WWW authentication is implemented in reality

Example 1: some net banks

One of the most important consumers of network authentication services are bank services. Nowadays a large number of banks are offering the possibility to operate one's account through the Internet. The Finnish Leonia bank uses the SSL protocol for encrypting the information exchange and authenticating the bank. The session key length is 128 bits. Client side authentication is not used. The user is authenticated through the use of a four-digit password and customer number. In addition, lists of security codes are repeatedly mailed to the user. This is a kind of out-band way of authentication.

Merita bank also uses the SSL protocol in their net service. The session key is 40 bits which is easily broken but not within one session's time. Additional security codes are also used.

Example 2:a library search service

The Linda database offers a possibility to search books and other publications in Finnish university libraries. An userid and password are sent to the user by letter. Actually the userid is also a password in the sense that it is not easy for others to guess. At log-on the user types these codes into HTML forms. The authentication method is basic authentication.

Example 3: the Finnish electronic citizen card

Will this take the Finnish information society to a new era where it is never necessary to leave one's home for errands? What is it?


Tietoverkkolaboratorio on nyt osa Tietoliikenne- ja tietoverkkotekniikan laitosta. Tällä sivulla oleva tieto voi olla vanhentunutta.

Kurssien ajantasainen tieto on MyCourses-palvelussa.

Tämä sivu on tehty oppilaiden harjoitustyönä. Tietoverkkolaboratorio ei vastaa sivun oikeellisuudesta, ajantasaisuudesta tai ylläpidosta. Vakavissa tapauksissa yhteyshenkilöinä toimivat ja Webmaster.
Sivua on viimeksi päivitetty 15.11.1999 16:44.
URI: http://www.netlab.tkk.fi/opetus/s38118/s99/htyo/1/imple.shtml
[ TKK > Sähkö- ja tietoliikennetekniikan osasto > Tietoverkkolaboratorio > Opetus ]