ACTION-151 update security context - User agents and robustness of authentication schemes

With the discussion on authentication mechanism I added some text to
the user agent section. Imagine that this will generate some
conversation
 

7.5 Provided by user agent


o       Robustness of Authentication mechanism(s) used to establish
user identity

§         One Factor (Shared Secret, something you know)   

*         ID / Password

*         Personalized access control (e.g. ID/Password with additional
fields customized by user such as graphic and/or text field(s))

§         Two Factor (something you have / something you are)

*         Smart Cards, tokens (e.g. USB, CaC, RSA SecureID)

*         Biometrics

  

Bill D.

wdoyle@mitre.org