Source: Preparatory Survey Team Figure 3-26 How user authentication works after Phase 2 (C) Advantages Two-factor user authentication will bring the following advantages and strengthen security. a. Reducing the risk of unauthorized access because the user can pass the authentication only when all the three conditions below are fulfilled.  User logs in from a registered Terminal PC.  User possesses USB token physically.  User inputs valid ID and password. b. Easy to track an offender by comparing record for lending tokens with authentication logs on RSA server. (2) Prerequisite For the specification, CBM will conduct required review and confirmation in timely manner. For the rules regarding to introduction of this infrastructure function, CBM will determine the control process rules and notice it to FIs. Then CBM is requested to control (register and issue to new users, deregister and collect from deregistered users, change user profile, etc.) USB tokens. The initial registration and issuing will be done before go-live, and further control is requested to be done by CBM. In 68

Select target paragraph3