Requirement
Pattern
Authentication
Description This pattern expresses the need of having the system functionality to identify users
Comments ----
Pattern goal Ensure the identity of the users that access to the system.
Author GESSI-SSI
Sources (0..*)
  • Requirement books from SSI
  • Specialized literature
Keywords (0..*)Acces Control, Security, Users
Dependencies (0..*)IMPLIES Authorization
IMPLIES Stored Data Protection
Requirement
Form
Authentication
Description This form states the general need of having the system functionality of identifying users, and has extensions for detailing the type or technology to be used. An extension for requiring to not be necessary to create an specific account for the system is present.
Comments Application of extensions: Authentication Technology, Single Sign-on: may be applied at most once each.
Version date 2009-03-20 00:00:00.0
Author GESSI-SSI
Sources (0..*)
  • Requirement books from SSI
  • Specialized literature
Fixed PartQuestion text ----
Form text The system shall authenticate users
Extended Part Authentication TechnologyQuestion text ----
Form text The authentication process shall be based on the %authMechanism% authentication technology
ParameterMetric
authMechanism: is an authentication software technologyAuthenticationTechnology: AuthenticationTechnology = Domain(Windows login, …)
Extended Part Authentication TypesQuestion text ----
Form text The authentication type shall be: %authTypes%
ParameterMetric
authTypes: is a non-empty set of authentication typesAuthenticationTypes: AuthenticationTypes = Set(AuthenticationType)
AuthenticationType = Domain(Open, Encrypted)
Extended Part Single Sign-onQuestion text ----
Form text The system shall not oblige users to create and manage a specific account for this system