Využití autentikačních mechanismů jednotného přihlášení s podporou biometrie

Abstract

This thesis describes the design and implementation of a system solution with Single Sign-On in network topology. The thesis consists of two parts: a theoretical and practical. The theoretical part deals with the possibilities of multi-factor authentication , its application and benefits. Consequently, is illustrated the principle of SSO systems and described in detail the Kerberos protocol. In the field of biometrics fingerprint features are explained, access devices and their optimal implementation. The practical part describes the introduction for Upek eikon reader to a Linux system and then analysis the system components PAM. The proposed topology is described in detail to install and configure Kerberos as strong authentication system including prerequisites, Apache2 server software and all while putting in the work with Single Sign-On mechanism. The functionality of the system Kerberos is then combined with verification by fingerprint. Then for security reasons is implemented support with SSL communication layer. Finally, there was perform of testing biometric implementation.