用户认证模式目录
A Catalog of User Authentication Patterns
浏览论文内容
中文总结 AI 辅助
本文针对现有安全模式目录中用户认证具体模式缺失的问题，提出含14种模式的认证模式目录，并按认证因子与实际角色分类，以助力安全软件系统设计开发。
中文摘要 AI 辅助
安全模式旨在支持安全软件系统的设计与开发，但尽管已有成熟的安全模式目录，其实际应用仍有限。尤其在用户认证（简称认证）这类常见安全控制的具体模式方面，现有目录存在缺失。本文以认证为例，旨在为填补这一空白作出初步贡献，提出了包含14种用户认证模式的新型认证模式目录。为支持该目录的实际应用，它依据知名的认证因子概念及每种模式在实践中承担的常规角色对模式进行分类。通过以认证模式的形式对常见认证技术进行编目，本文旨在为支持软件工程师和架构师设计与开发安全软件系统作出重要贡献。
英文摘要
Security patterns are intended to support the design and development of secure software systems. However, although established catalogs of security patterns exist, their practical application remains limited. In particular, despite these catalogs, concrete patterns for common security controls such as user authentication (authentication for short) are lacking. This paper aims to make an initial contribution toward closing this gap, as exemplified by authentication. It presents a novel authentication pattern catalog, comprising 14 user authentication patterns. To support the catalog's practical application, it classifies patterns by the well-known concept of authentication factors and by the usual role each pattern fulfills in practice. By cataloging common authentication techniques through authentication patterns, we aim to make an important contribution to supporting software engineers and architects in designing and developing secure software systems.
