Week 10: secure communication and authentication protocols

Lecture notes:
Authentication slides
Biometrics & CAPTCHA slides
Smart Cards

Recitation notes:

Supplemental notes:

Some light reading on the PBS web site: http://www.pbs.org/wgbh/nova/decoding/. Lots of references, including a shockwave simulation of an Enigma machine.

Brief article on CAPTCHA
Battling the Bots, by Lee Bruno, Scientific American, November 2003. A somewhat longer article on CAPTCHA.

Buzzwords:
authentication, two-factor authentication, multi-factor authentication, reusable passwords, one-time passwords, Skey authentication, challenge/response authentication, SecurID, SKID2/SKID3 authentication, nonce, public key authentication, Diffie-Hellman exponential key exchange, Kerberos, sealed envelopes/tickets,

ISO authentication framework, X.509 certificates (digital certificates), certification authority (CA), certificate chaining, SSL, biometrics, statistical pattern recognition, Receiver Operator Curve (ROC), false accepts, false rejects, robustness, distinctiveness, pattern matching, smart cards.