Source: Preparatory Survey Team
Figure 3-26 How user authentication works after Phase 2
(C) Advantages
Two-factor user authentication will bring the following advantages and strengthen
security.
a. Reducing the risk of unauthorized access because the user can pass the
authentication only when all the three conditions below are fulfilled.
User logs in from a registered Terminal PC.
User possesses USB token physically.
User inputs valid ID and password.
b. Easy to track an offender by comparing record for lending tokens with
authentication logs on RSA server.
(2) Prerequisite
For the specification, CBM will conduct required review and confirmation in timely
manner.
For the rules regarding to introduction of this infrastructure function, CBM will
determine the control process rules and notice it to FIs. Then CBM is requested to
control (register and issue to new users, deregister and collect from deregistered
users, change user profile, etc.) USB tokens. The initial registration and issuing will
be done before go-live, and further control is requested to be done by CBM. In
68