000			03758nam a2200253 4500
001			391727
010			_a030952654X
090			_a391727
100			_a20130507d2003 y0pory50 ba
101			_aeng
200			_aWho goes there? _bRecurso eletrónico _eauthentication through the lens of privacy _fed. Stephen T. Kent, ed. Lynette I. Millett _gCommittee on Authentication Technologies and Their Privacy Implications. National Academy of Sciences
210			_aWashington, DC _cNational Academies Press _d2003
215			_a1 CD-ROM _d12 cm
300			_aFicheiro de 3,93 MB em formato PDF (232 p.). Disponível também através de: https://www.nap.edu/catalog.php?record_id=10656. Acedido a 07 de maio de 2013.
330			_aExecutive summary. 1 Introduction and overview. Definitions and terminology. Authentication in daily life. Current tensions. Four overarching privacy concerns. What this report does and does not do. 2 Authentication in the abstract. What is authentication and why is it done? Three parties to authentication. Authenticating to authorize. Authenticating to hold accountable. What do we authenticate? Identifiers. Attributes. Statements. How do we authenticate? Authenticating physical identity. Authenticating psychological identity. Authenticating possession of an artifact. The relationship between authentication and identification. 3 privacy challenges in authentication systems. Privacy impact of the decision to authenticate. Access control and information systems. The legal foundations of privacy. Constitutional roots of privacy. The common law roots of privacy law. Statutory privacy protections. Information privacy and fair information practices. Privacy of communications. Concluding remarks. 4 Security and usability. Threat models. Threats. Dealing with threats. Authentication and people—user-centered design. Lessons from user-centered design. Lessons from cognitive and social psychology. Factors behind the technology choice. Systems and secondary use. Concluding remarks. 5 Authentication technologies. Technological flavors of authentication. Basic types of authentication mechanisms. Something you know. Something you have. Something you are. Multifactor authentication. Centralized versus decentralized authentication systems. Security considerations for individual authentication technologies. Cost considerations for individual authentication technologies. Concluding remarks. 6 Authentication, privacy, and the roles of government. Regulator of private sector and public agency behaviors and processes. Government-wide law and policy. Agency- or program-specific law and policies. Regulation of private sector information management activity. Policy activity in the early 2000s. Summary. Government as issuer of identity documents. The tangled web of government-issued identity documents. Threats to foundational documents. Government as relying party for authentication services. Access certificates for electronic services. The internal revenue service—electronic tax filing. The social security administration and pebes. Nationwide identity systems. Concluding remarks. 7 A toolkit for privacy in the context of authentication. Privacy-impact toolkit. Attribute choice. Identifier selection. Identity selection. The authentication phase. Concluding remarks. Appendixes. A Biographies of committee members and staff. B Briefers to the study committee. C Some key concepts. What is CSTB?
606			_aSISTEMA DE SEGURANÇA _91130
606			_aPROTECÇÃO E SEGURANÇA DE DADOS _9330069
606			_aTECNOLOGIA _9234237
606			_aBIOMETRIA _9327034
710			_aKENT _bStephen T. _9357088
955			_xOferta