| Popis: |
V diplomski nalogi je opisana priprava sistema za dvodejavniško avtentikacijo na Register.si, s čimer bomo zagotovili višjo stopnjo varovanja informacij. Sistem je sestavljen iz strežnika FreeRADIUS, ki skrbi za avtentikacijo uporabnikov v povezavi z orodjem MultiOTP, ter spletne storitve AuthenticationApi, ki sprejema zahteve za avtentikacijo uporabnika. Predstavili bomo pomen dvodejavniške avtentikacije ter opisali različne avtentikacijske algoritme in protokole ter varnostne naprave. Znotraj dvodejavniške avtentikacije prvi dejavnik predstavljata uporabniško ime in geslo, kot drugi dejavnik pa smo izbrali generator enkratnih gesel, ki je glede na vnaprej določene kriterije najprimernejši. The purpose of this thesis is to describe the setup of a two-factor authentication system at Register.si, which will ensure a greater protection of information. The system consists of a FreeRADIUS server that takes care of user authentication in connection to the MultiOTP tool, as well as of AuthenticationApi web services that accept user authentication requirements. The thesis will present an importance of two-factor authentication, as well as offer descriptions of various authentication algorithms and protocols, and security devices. Concerning two-factor authentication, the username and the password cover the first factor, while a one-time password token generator was chosen as the second factor, as the most appropriate one for a predetermined criteria. |
