… because it’s all about security, and not just for you.
You take your security seriously, and so you have a password for just about everything.
You’ve read Evoliris’ file on Cybersecurity and know it inside out. You know all there is to know about viruses and Trojan Horses and worms and whatnot, and you’ll never open that suspicious attachment of that e-mail that you received of that ‘friend in need’.
Don’t miss it; it’s Evoliris’ dossier about Cybersecurity. Get the lowdown on what the fuss is all about, how it impacts the Brussels Regional Capital economy, what initiatives we need to raise awareness, educate people, and respond to current threats, what new job profiles emerge, and how to avail of new training programs.
(PS: click on the image to download the file)
Along comes authentication
You have these apps that you use on your smartphone, but you kinda grow tired of entering your passwords all the time, so you tell your device to remember them. But you have this nagging feeling that this is not the right way to do things.
“Authentication”; you’ve heard about it, but you don’t really know what it means. Well, fear not; Evoliris comes to the rescue.
The word comes from Greek: αὐθεντικός (authentikos; real, genuine), and αὐθέντης (authentes; "author") and it stands for an extra layer of security. After all, passwords are so 2017! Authentication is the act that allows you to confirm the truth that a piece of data is, indeed, what it claims to be. It is not the same as identification; which is the fact of attributing a certain property to the concept ‘identity’. Authentication is the process that allows to claim that yes, the purported identity is what it claims to be. In the above example, for instance, an extra layer of security can be added by facial recognition or your fingerprints!
Several methods can be used to allow for authentication
A digital certificate is a piece of software from a recognized institution that says that, yes, the website you’re on, is, indeed what it claims to be. At Evoliris, we use a digital certificate from a renowned company (GoDaddy) to ensure that all your data exchanges with ADES (our online enrolment platform) proceed without any leakage. You can actually view the certificate and see until when it’s valid. Around that period, we get a reminder of GoDaddy that will force us to use very specific resources that are proper to Evoliris, and that enforce security on that oh so important platform.
Figure 1: Evoliris' GoDaddy authentication (ADES)
Forging communication can happen on three levels:
- By the initiating party; you receive an e-mail from your bank stating that your account is at risk,
- By the receiving party,
- During the actual communication, the information is not encrypted (most public networks) and everybody can track and trace what you do (exchange of credit card information, accessing your bank account!)