Chapter 6 study guide Flashcards
Authentication and digital services
1
Q
One-way Server Authentication
A
- The server sends its authentication credentials to the client, such as with a digital certificate
2
Q
One-way Client Authentication
A
- The client provides authentication to the server
3
Q
Two-way Authentication
A
- Both Client and Server identify themselves to each other
4
Q
Methods of Authentication
A
- Network (IP)/physical address (MAC)
- Username and Password
- Authentication Certificate
- Token/Smart cards
- Pre-shared keys
- Biometrics
- OpenID
5
Q
Authentication method: Authentication Certificate
A
- Digital certificate which can be verified by a reputable source
6
Q
Authentication method: Tokens/Smart cards
A
- A physical card (something you possess) that you insert into you computer. This is usually used with a password (something you know)
- Two-factor Authentication
7
Q
Authentication method: Pre-shared key
A
- A pre-defined pre-shared key
8
Q
4 methods of Authentication
A
- Something you are (Biometrics)
- Something you know (Passwords)
- Something you have (Tokens)
- Somewhere you are (Geography based)
9
Q
X.509v3 Certificates
A
- These are exchanged at the start of a conversation to authenticate each device.
- A type of digital certificate
10
Q
PKCS#5
A
- Password based encyption standard
11
Q
PKCS#7
A
- Standard used to sign and/or encrypt messages for PKI
12
Q
PKCS#10
A
- Certification request standard.
- When an entity needs a public key certificate, it constructs a certification request and sends it to the certification authority (CA), which transforms the request into an X.509 public key certificate.
13
Q
PKCS#12
A
- Personal Information Exchange Syntax Standard
14
Q
Stages of Key and Certification Management
A
- Initialization
- Issued
- Cancellation
15
Q
Key/Certificate Management stage: Initialization
A
- Registration
- Key pair generation
16
Q
Key/Certificate Management stage: Issued
A
- Certificate validation
- Key recovery and Key update
17
Q
Key/Certificate Management stage: Cancellation
A
- Certificate expiration
- Certificate revocation
18
Q
Two states for revocation
A
- Revoked - Cannot be reverse and occurs when the private key has been breached
- Hold - Occurs when private key is thought to have been breached
19
Q
Online Certificate Status Protocol (OSCP)
A
- Check the validity of a certificate
20
Q
Pretty Good Privacy (PGP)
A
- Adds Private key of the sender for authentication
- Produces MD5 Hash
21
Q
Kerberos
A
- Ticket granting service that allows authentication via tickets
22
Q
PKI certificate flow
A
- Obtain Key pair
- Send Certificate Request to the Certificate Authority (CA)
- CA uses your information to generate a Certficate.
- Install the certificate on your browser or webserver
