CHAPTER 9

image

Ownership Factors

As you saw in Chapter 5, authentication is a fundamental aspect of security that involves verifying credentials supplied by a user to establish an identity for the user in an application. A credential can be a knowledge factor that the user knows, an ownership factor that the user owns, or an inherence factor that the user is. I covered knowledge factors in Chapter 8. In this chapter, I focus on ownership factors.

An ownership factor is an element that a user owns or possesses, such as a key, certificate, or token. Unlike a knowledge factor, which can be passed on to others easily, intentionally or otherwise, it is ...

Get Pro ASP.NET Web API Security: Securing ASP.NET Web API now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.