Knowledge-based authentication: Difference between revisions

Revision as of 18:41, 1 May 2015

Revision as of 18:44, 1 May 2015

Line 1:

'''Knowledge-based authentication''', commonly referred to as KBA, is a method of authentication which seeks to prove the identity of someone accessing a service, such as a financial institution or website. As the name suggests, KBA requires the knowledge of personalprivate information of the individual to grantprove accessthat tothe person providing the protectedidentity information is the owner of the materialidentity. There are two types of KBA: "static KBA", which is based on a pre-agreed set of "shared secrets"; and "dynamic KBA", which is based on questions generated from a wider base of personal information.

== Static KBA (Shared Secrets) ==