98
ථ၌༶ၑᐄ༶ື
99
Chapter 3
೯
࢝ٙͪจྡdஷ੬ɰ̙˸
ࡈ
й̋ίପۜʕdШѢᗭʘஈί೯࢝ɓ
ࡈ
ஷ͜ɦΌࠦ
ٙԉЍ၍ଣண
ࠇ
f
ɓ
ࡈ
ᔊఊٙԷɿఱ݊˕౪ʈЪ
ݴ
Ԩऒʿ˸ɨԉЍٙlz࢙၍ଣӻ୕jᏨൖ٫elz
࢙Զ٫
/
ᇜ፨elz࢙၍ଣ٫eࣨ
٫ࡘ
eӻ୕၍ଣ٫f
࿁ήdɰϞɓ
ࡈ
ӻ୕݊
ܔ
ͭίӚϞԉЍٙᛆࠢ၍ଣɪdԷνၣࠫᏐ͜ό̻ٙ
̨සܼ̍ӻ୕೮ɝe္છeᏐ͜όeࠠอ઼ਗУኜeᝈ
ߏ
ᏦഃᛆࠢfϤ
ӻ୕Ԩʔც
ࠅ
ОԉЍٙબᛆ၍ଣdϾ݊˸ᛆࠢͪจྡԸஹഐӻ୕Դ͜٫f
࣬ኽ
LDAP
Ҧஔd
IAM
ପ̙ۜ˸ৣΥஈଣӻ୕ΥɪٙცӋdԨԶ୕Υٙe
ഐูٙ༟ৃᎷπਕfίவ၇ً
ر
ɨd
ܔ
ͭɓ
ࡈ
Άุत֛ٙԒʱ၍ଣၤ
ࠅ
ӻd
ც
ࠅ
ආБҦஔΥfᒱ್Ң
ࡁ
ɰ̙˸ϽඎΆุ
IT
ٙ
ࡈ
йც
ࠅ
dШථ၌ਕʿՉ܁
၈
ٙ৷
ܓ
ᅺʷٙᝈᓃԸdԟԬԐΣΥٙӻ୕ᏐഐΥᗆйуਕ
IDaaS
fೌ
ሞνОdԒʱᗆй၍ଣуਕ
IdM-aaS
̙˸ԶӷϞථһεٙ፯f
ᇁၾኯᗇ
הࠑۃ
Ցٙࣨːͪจྡ
ݖ
core schema
ɰ̙ᎷπᇁၾԴ͜٫ٙԒʱ᜕ᗇ
༟ࣘf
ᒱ್Ꮇπᇁ࿁˸ɨ̌ঐԸႭ݊̀
ࠅ
ٙdШኯᗇᎷπ
ۆ
Ӕ֛մᗙӻ୕ٙც
Ӌfν
؈
Άุમ͜ཥɿඉᖦၾཥɿඉ̋dఱც
ࠅ
Դ͜Ցʮක
ږ
ᝌਿᓾ
ܔ
ண
Public Key Infrastructure
d
PKI
f
ڢ
࿁၈ό̋စၑٙӷᝌɰϓ
މ
LDAP
Դ͜٫ٙ
ɓʱf
Ң
ࡁ
̥ც
ࠅ
ഐΥᇁᎷπၾණʕόٙԒʱ၍ଣdఱ̙˸ୌΥථ၌ਕٙԒʱᗆй
ၾπ՟၍ଣٙცӋf
τΌዚՓ
ᎇഹʮකπ՟ٙዚึᄣ̋dतй࿁ʮ͜ථ၌ਕϾԊdһც
ࠅ
τΌٙ༟ࣘ
ڭ
ᚐዚ
ՓfΪϤԒʱᗆйၾπ՟၍ଣ࿁ථ၌ਕԸႭdఱᜊһ̋ࠠ
ࠅ
f
Ԓʱ᜕ᗇ
Authentication
j௰ᔊఊᐝٙจ
ܠ
у݊dᏨ
ݟ
͜˒Τ၈݊щ᙮
ཥ໘Դ͜٫͉ɛdவஷ੬݊л͜Ꮠ͜ӻ୕ٙԴ͜٫ʧࠦԸ᜕ᗇfԒʱ᜕ᗇɓٜே݊˸
፩
ɝᇁٙ˙όԸආБdɓছٙண᜕݊ᗇᇁஷ੬̥Ϟཥ໘ٙԴ͜٫Іʉʑึٝ
༸f
τΌ᜕ᗇ
Secure Authentication
jৰ˸ᇁЪᏨ᜕̮dᒔϞεΪɿᏨ᜕˙ό
27
fఱᕐΪɿ᜕ᗇԸႭd௰ᔊఊٙԷɿఱ݊ၣ༩ვБ
ה
મٙ͜ʹ᜕ᗇᇁᔊৃஷٝ
Short Message Service-Transaction Authentication Number
d
SMS-TAN
f
Չ˼Ꮸ᜕˙όᒔܼ̍jఊϣԴ͜ᇁe˿
token
ࡈא
ɛᗆйᇁ
PIN
e͛
ي
तᅄ༟ࣘԷνܸ७eᐘˆeൖၣᇫᅼؐ
א
А၍तᅄʿ
ࡈ
ɛ
ږ
ᝌኯᗇഃf
ʔሞτΌ᜕ᗇٙᗳۨ
މ
Оd˴
ࠅ
Դٙ͜ࡡଣே݊Νٙj፩ɝ͜˒Τ၈ʿᇁɓ
ছ݊ί͜˒ൗ̅ʘ
፯کڋ
ʘ̮dᒔც
ࠅ
Ύ̋ɪ̤ɓ
ࡈ
Ꮸ
ݟ
ٙΪɿνɪ
ࠑ
ʘධ
Ꮸ᜕˙όf
ɪ
ࠑ
Ꮸ᜕Ϊɿගٙࢨମίˢ༰ٙཀf͛
ي
εࠠΪɿ᜕ᗇც
ࠅ
ίɓකఱ࿁
͜˒ႡЪၾᎷπɓ
ࡈ
᜕ᗇٙ
و
ۨf
˿ӻ୕ஷ੬݊˸ಂቃ౬ٙᅰοଡ଼Υ
މ
ਿᓾdϤಂቃ౬ٙᅰοၾ͜˒
ٙ˿ପ͛ኜʿУኜɪ᜕ٙᗇଡ଼ϓΝӉᜊһf
˸ͦ
ۃ
ٙҦஔϾԊdΆุථٙԶᏐਠೌ
ج
˴ਗਂՑԴ̙ࠠ͜ልԴٙ͜ᅰοଡ଼Υਂ
ϓ
ږ
ᝌᐑdԸୌΥ͜˒Դ͜ც
ࠅ
fஷ੬ே݊ίൗ̅ʘ
ڋ
dᜫ͜˒ίՉཥ໘ɨ༱̙ପ͛
ᅰοଡ଼Υٙழʩd
٫א
͜˒௪೮ɝ
ۃ
dਗ਼ኯᗇᇁீཀᔊৃՑ͜˒ٙБਗ
27
要使用雙因子驗證或多重因子驗證的使用時機乃依個案需求。
