問66
頻出度★★★
個人の身体的, 行動的特徴を用いた認証であり, 認証のために個人が情報を記憶したり, 物を所持したりする必要はないが, 認証用の特別な装置が必要なものはどれか。
平成28年度 秋期 ITパスポート試験 問66
This question's explanation and your answers so far.
解説
問 66
Incorrectア
Public individual authentication is a scheme that verifies identity online for government procedures using an electronic certificate stored on an IC card such as the My Number card; it relies on something the person possesses (the card). This contradicts the question's condition of authenticating by physical traits without possessing any object, so it is wrong.
Incorrectイ
Sender domain authentication (SPF, DKIM, DMARC, and the like) is a technology that prevents spoofed email by verifying whether an email's sending domain is legitimate; what it authenticates is not a person but the source of the mail. It has nothing to do with an individual's physical or behavioral characteristics, so it is wrong.
- ウ
正解 The correct answer is Choice ウ, biometric authentication. Biometric authentication verifies a person's identity using physical traits unique to the individual—such as fingerprints, vein patterns, the iris, the face, or voiceprints—or behavioral traits such as signature pen pressure and keystroke rhythm. This exactly matches the question's phrase about authentication using physical and behavioral characteristics. It needs no memorized information like a password and no possessed object like an IC card or token, yet it does require a special device for authentication—a dedicated sensor for reading the traits (a fingerprint reader, vein scanner, iris camera, and so on)—so it satisfies every condition in the question. Among the three factors of authentication, it corresponds to something you are (biometric information).
Incorrectエ
License authentication (activation) is a scheme that uses a product key or license information to confirm whether software was legitimately purchased and licensed; what it authenticates is the right to use the software. It does not use an individual's biometric traits, so it is wrong.
ここがポイント
- Biometric authentication = verifying identity by physical traits such as fingerprint, vein, iris, face, or voiceprint, or behavioral traits such as signature and keystroke rhythm. It needs neither memorization nor possession, but it does need a dedicated device to read the traits.
- The three factors of authentication are something you know (a password, etc.), something you have (an IC card, token, etc.), and something you are (biometric information). Biometrics falls under the third.
用語