|
|
Legal regulation of the strong customer authentication
Řehůlka, Karel ; Sejkora, Tomáš (advisor) ; Kotáb, Petr (referee)
Legal regulation of the strong customer authentication Abstract The subject of this rigorous thesis is the legal regulation of strong customer authentication. Its aim is to create an overview of the existing legal regulation of strong user authentication, to point out the shortcomings of this regulation, to propose related solutions and to evaluate the impact and effectiveness of its adoption. In the introductory part, the author first describes the existing legal regulation of payment transactions, the types of payment systems under which electronic payments are settled and analyses the individual payment services under the Czech payment transactions act and the persons authorized to provide them. The author concludes this section with a brief historical development of the regulation and an overview of the effective legislation in this area both in the Czech Republic and the European Union. In the next part, the author discusses the concept of strong customer authentication, the development of its legal regulation, its comparison at the EU and Czech level and then analyses its individual elements from the categories of knowledge, possession and inherence and the requirement for their mutual independence. This is followed by an analysis of the specific situations in which people authorized to provide...
|
|
|
One Time Passwords
Škarda, Filip ; Pavlíček, Luboš (advisor) ; Palovský, Radomír (referee)
This Bachelor thesis describes the one-time passwords and their various implementation possibilities. The one-time passwords are passwords, which are valid only for one login or transaction. In contrast to regular passwords, one-time passwords are immune against reply attacks, which means that if a possible attacker eavedroppes the used password, he cannot exploit it, because it is not valid anymore. The theoretical section of the thesis explains the reasons for using one-time passwords and demonstrates some particular OTP systems. The practical section shows two different examples of using open-source OTP systems. The first one describes the use of OTPasswd for authentication to a server over SSH, the other one uses MultiOTP PHP class for authentication to a web application.
|
guest ::
