認証方式を“知識による認証”,“所持品による認証”及び“個人の身体的・行動的特徴による認証”の三つに分類したとき,“個人の身体的・行動的特徴による認証”に分類されるものはどれか。
平成28年度 春期 ITパスポート試験 問76
This question's explanation and your answers so far.
問 76
Incorrectア
Authentication using an ID card verifies identity by presenting something the person possesses (a card), so it belongs to “possession-based authentication”. It is not a physical or behavioral characteristic.
Incorrectイ
Mnemonic authentication uses multiple images or easy-to-remember information as cues and has the person select an answer that only they know. It relies on the person’s memory — something they know — so it is classified as “knowledge-based authentication”.
- ウ
正解 The correct answer is ウ. Biometric authentication verifies a person’s identity by reading physical or behavioral characteristics unique to that individual, such as fingerprints, iris, vein patterns, face, voiceprint, or the handwriting of a signature. It fits exactly into the category of “authentication based on an individual’s physical and behavioral characteristics” among the three classifications in the question, so it is the answer.
Incorrectエ
Password authentication verifies identity by entering a string of characters that only the person knows. It is a typical case of “knowledge-based authentication” and has nothing to do with physical or behavioral characteristics.
- The three factors of authentication: knowledge-based authentication (something you know, such as a password, PIN, or mnemonic) / possession-based authentication (something you have, such as an ID card, IC card, or token) / authentication based on physical and behavioral characteristics = biometric authentication (features of the person themselves, such as fingerprints, iris, veins, or face).
- Biometric authentication uses physical characteristics (fingerprints, iris, veins, face) and behavioral characteristics (the handwriting of a signature, voiceprint, etc.). Keep in mind that while it is hard to steal and cannot be lost, changes in one’s physical condition can cause misrecognition.