Enhanced authentication mechanism using multilevel security model

Abstract EN

This paper presents a proposed multilevel authentication method which is implemented especially in sensitive applications where they contain multilevel secure and confidential data.

The proposed method divides the system into multiple sensitive levels and tests users against different authentication methods for each level.

Most levels are subdivided further into secure sublevels.

Each sublevel contains its own privileges and data types which are managed by an Identity Manager (IM) whose responsibility is to transit users to other higher sublevels.

The transition’s decision is done by assigning different weights to each authentication method .After a series of tests, the IM must generate a status report describing the results and the decision made to each user’s activity.

This technique permits granting only the required privileges for a selected group of users and limits the configuration functions of those that users in a particular user group can perform