問60
頻出度★★★
認証技術を，所有物による認証，身体的特徴による認証及び知識による認証の三つに分類したとき，分類と実現例①～③の適切な組合せはどれか。 ① ICカードを用いた認証 ② ID，パスワードによる認証 ③ 指紋による認証
平成26年度 秋期 ITパスポート試験 問60
This question's explanation and your answers so far.
解説
問 60
Incorrectア
Treating (1) as possession is correct, but it assigns (2) ID and password to physical characteristics and (3) fingerprint to knowledge, so (2) and (3) are swapped. A password is something memorized, that is, knowledge, and a fingerprint is the body itself, that is, a physical characteristic, so this is wrong.
- イ
正解 The three factors of authentication are divided into possession (What you have), knowledge (What you know), and physical or biometric characteristics (What you are). (1) An IC card is a physical object that the user carries and presents to prove their identity, so it is authentication by possession. (2) An ID and password are information that only the user remembers and enters, so this is authentication by knowledge. (3) A fingerprint reads a unique feature of the user’s own body, so it is authentication by physical (biometric) characteristics. Therefore (1) = possession, (2) = knowledge, (3) = physical characteristics, and the row in the table matching this combination is イ.
Incorrectウ
Treating (3) fingerprint as a physical characteristic is correct, but it assigns (1) IC card to knowledge and (2) ID and password to possession, so (1) and (2) are reversed. An IC card is an object you hold, not memorized information, and a password is not a physical object you carry.
Incorrectエ
All three assignments are wrong. It treats (1) IC card as knowledge, (2) ID and password as physical characteristics, and (3) fingerprint as possession, so none of the correct pairings — possession (IC card), knowledge (password), physical characteristics (fingerprint) — holds.
ここがポイント
- The three authentication factors: authentication by possession (IC cards, tokens, smartphones, and other objects the person holds) / authentication by knowledge (passwords, PINs, secret questions, and other information the person knows) / authentication by physical characteristics (fingerprint, vein, iris, face, and other biometrics).
- Combining two or more different factors to strengthen authentication is called multi-factor authentication (two-factor authentication). An IC card plus a PIN is a combination of possession and knowledge, and is more secure than authentication with a password alone.
用語