Smart Cards for Strong Authentication

Using single-factor authentication, such as a password, for information systems access is a significant security risk. A single password can be easily compromised, and storing password data on corporate networks introduces additional vulnerability to attackers who gain network access or insider fraud.

Strong authentication, the report explains, requires the use of two or three factors. Smart cards work with other authentication techniques by storing some combination of password files, public key infrastructure certificates, one-time password seed files or biometric image templates on a single card. Organizations then combine more than one factor to improve the security and privacy of the overall authentication process. For example, authentication might require something you have, the smart card; something you know, a personal identification number or password; and something you are, a unique physical characteristic or biometric identifier.