Ubiquitous Authentication and Authorization Mechanism for Enterprise Resources Acquisition

As a result of the massive growth and ubiquity of wireless networks, smart phones have become both a popular and indispensable part of modern life. Many services are offered via smart phone, such as entrance guard systems and mobile wallets. Traditional authentication mechanisms use usernames and passwords to verify user identity, however, in order to ensure sufficiently high security, passwords must be changed regularly. Although some mobile phones have near field communication (NFC) technology, which does away with the need for username and password authentication, NFC only recognizes NFC cards, and does not recognize people. Thus information security is still an issue in such systems. This study combines NFC and biometric identity verification technology to achieve authentication in these situations. In addition, the proposed model combines role-based access control to authorize suitable permissions to users. The proposed model achieves ubiquitous and comprehensive authentication and authorization management for enterprise resources.