MODERN METHODS OF AUTHENTICATION AND TOKEN-BASED SECURITY

Abstract

With the development of digital transformation, new problems have arisen related to the protection of users' own accounts and personal data. The development of business and services has caused the need to use a large number of web applications to support everyday life, and therefore the number of users of these applications has increased. As the number and complexity of web applications grows, developers are faced with the need to provide the latest level of scalability and complexity to ensure user security, using currently popular micro- and nano-authorization services. User identity and access management aims to ensure that people have the right access to the right resources and prevent unauthorized users from entering. To provide single sign-on across multiple accounts and logins, there is a set of authorization, authentication, and single sign-on (SSO) protocols called OpenID Connect. The authentication mechanism is considered, clearly explaining how token-based authentication works and what are the main factors that drive the entire security process. With token-based authentication, users have the option to log into their own accounts using a smartphone or security key, or for passwordless operation. With token-based authentication, the user is checked for access to credentials once in a certain period of time, there is no need to register continuously.