有哪些方法可以利用 SecurID 和类似技术?

发布于 2024-07-09 03:23:38 字数 284 浏览 9 评论 0原文

来自维基百科: RSA SecurID 是 RSA Security 开发的一种机制,用于对用户访问网络资源。

我刚刚读到有关此设备的信息,我觉得它很有趣。 但是,我不确定软件(网络或非网络)如何(或者是否)可以利用这种身份验证方法。

我将其作为社区 wiki 帖子,因为这不是一个具体问题,而是使用 SecurID 和类似技术解决身份验证问题的一般概述。

From Wikipedia: RSA SecurID is a mechanism developed by RSA Security for performing two-factor authentication for a user to a network resource.

I just read about this device, and it seems interesting to me. However, I'm not sure how (or even if) software (networked or non-networked) can utilize this method of authentication.

I'm making this a community wiki post as this isn't a specific question, but a general overview of addressing authentication with SecurID and similar technologies.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(4

后来的我们 2024-07-16 03:23:38

有一种类似的技术,称为 YubiKey

There's a similar technology called YubiKey.

热情消退 2024-07-16 03:23:38

Verisign 的 OpenID 提供商 支持此类令牌(由 EBay 和 PayPal 以折扣价出售),这当然是最简单的方法开始对 Web 应用程序使用双因素身份验证。

Verisign's OpenID provider supports such tokens (sold at a discount by EBay and PayPal), which is certainly the easiest way to get started using dual-factor authentication for web applications.

差↓一点笑了 2024-07-16 03:23:38

要真正回答最初的问题,有多种方法可以与 SecurID 集成,从“最简单”到“需要更多工作”:

  1. 查看应用程序是否已集成/经过认证。 已通过 RSA 集成和验证的应用程序列表可以在 http://www 中找到.rsasecured.com。 仅列出选择进行验证的应用程序; 应用程序可能可以集成但尚未经过验证。
  2. 利用现有的 RSA 身份验证代理之一(与身份验证管理器服务器通信的代码段)并与操作系统/应用程序服务器/Web 服务器等集成,以便可以将身份验证“卸载”给代理,并且应用程序只需处理核心功能。 RSA 开发的代理可以从 http:// /www.emc.com/security/rsa-securid/rsa-securid-authentication-agents.htm(RSA 是 EMC 的安全部门)。
  3. 如果应用程序/设备可以利用 RADIUS 协议进行外部身份验证(请参阅 http://en.wikipedia.org /wiki/RADIUS),身份验证管理器服务器也是 RADIUS 服务器。
  4. 最后,如果您想将应用程序直接与 RSA 集成,RSA SecurID Agent SDK 允许您将所需的功能嵌入到应用程序本身中,以便应用程序可以直接与身份验证管理器服务器通信、发送身份验证请求、接收答案,利用身份验证服务器等的 HA 功能...这就是 VPN SSL 集中器、防火墙和许多其他设备等集成的方式(请参阅第 1 点中的列表)。

希望这可以帮助

To actually answer the original question, there are several ways to integrate with SecurID, from "simplest" to "requires a bit more work":

  1. See if the application is already integrated/certified. A list of applications that have been integrated and validated by RSA can be found at http://www.rsasecured.com. Only applications that have opted to be validated are listed; it's possible that an application can integrate but has not undergone validation.
  2. Leverage one of the existing RSA Authentication Agents (pieces of code that talk to the Authentication Manager server) and that integrate, for example, with the OS/Application Server/Web server, so that the authentication can be "offloaded" to the agent, and the application only has to take care of the core functionality. The Agents that RSA develops can be downloaded from http://www.emc.com/security/rsa-securid/rsa-securid-authentication-agents.htm (RSA is the Security Division of EMC).
  3. If the application/device can leverage the RADIUS protocol for external authentication (see http://en.wikipedia.org/wiki/RADIUS), the Authentication Manager server is also a RADIUS server.
  4. Lastly, if you want to integrate the application directly with RSA, the RSA SecurID Agent SDK allows you to embed the needed functionality in the application itself, so the app can talk directly to the Authentication Manager server, send authentication requests, receive the answers, leverage the HA functionality of the authentication server etc... This is how devices such as VPN SSL Concentrators, Firewalls, and many many others integrate (see the list in point 1).

Hope this helps

调妓 2024-07-16 03:23:38

我的公司 WiKID Systems 拥有双源双因素身份验证系统。 除了 radius、ldap 等之外,我们还有一个非常简单的 API,称为 wAuth 以及 PHP、Python、Ruby、Java 和 C# 中可用的软件包。 这些“网络客户端”软件包是 LGPL,因此您可以将它们放入开源或商业许可软件中。 您可以此处下载。 做其他人也很简单。

此外,我们还有软件令牌的开源版本,因此您可以根据需要嵌入该版本,并且可以真正了解系统端到端的工作原理。

My company, WiKID Systems, has a dual-source two-factor authentication system. In addition to radius, ldap etc, we have a very simple API called wAuth and packages available in PHP, Python, Ruby, Java and C#. These 'network client' packages are LGPL so you can put them in open source or commercial licensed software. You can download here. It would be pretty simple to do others too.

Also, we have an open source version of the software token, so you can embed that if you like and you can really see how the system works from end-to-end.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文