Authentication factors (something you know, have, are) in Cybersecurity - Step-by-Step Execution

Concept Flow - Authentication factors (something you know, have, are)

User tries to access system

↓

System asks for authentication

↓

User provides factor

↓

System checks if factor is correct

↓

Access granted or denied

The user tries to access a system, provides one or more authentication factors (knowledge, possession, or inherence), and the system verifies them to allow or deny access.

Execution Sample

Cybersecurity

User inputs password (something you know)
User inserts security token (something you have)
User scans fingerprint (something you are)

This shows the three types of authentication factors a user can provide to prove identity.

Analysis Table

Step	Authentication Factor Type	User Input	System Check	Result
1	Something you know	Password: 'mypassword123'	Password matches stored password	Pass
2	Something you have	Security token code: '456789'	Code matches token generator	Pass
3	Something you are	Fingerprint scan	Fingerprint matches stored biometric data	Pass
4	Final decision	All factors verified	All checks passed	Access granted

💡 All authentication factors verified successfully, so access is granted.

State Tracker

Variable	Start	After Step 1	After Step 2	After Step 3	Final
Password check	Not checked	Pass	Pass	Pass	Pass
Token check	Not checked	Not checked	Pass	Pass	Pass
Biometric check	Not checked	Not checked	Not checked	Pass	Pass
Access status	Denied	Denied	Denied	Denied	Granted

Key Insights - 2 Insights

Why does the system ask for different types of factors instead of just one?

Using multiple factors (knowledge, possession, inherence) increases security by making it harder for unauthorized users to gain access, as shown in the execution_table where all three checks must pass.

What happens if one factor fails the system check?

If any factor fails, the system denies access immediately. The execution_table shows all factors must pass for access to be granted.

Visual Quiz - 3 Questions

Look at the execution_table at Step 2. What does the system check for?

A Fingerprint match

B Password correctness

C Security token code validity

D User identity confirmation

💡 Hint

Refer to the 'System Check' column in Step 2 of the execution_table.

At which step does the system verify biometric data?

A Step 1

B Step 3

C Step 2

D Final decision

💡 Hint

Check the 'Authentication Factor Type' column for 'Something you are' in the execution_table.

If the password was incorrect at Step 1, what would happen to the 'Access status' variable?

A It would remain Denied

B It would change to Granted

C It would be Unknown

D It would skip to Step 3

💡 Hint

Look at the 'Access status' row in variable_tracker and consider the effect of a failed check.

Concept Snapshot

Authentication factors verify identity using:
- Something you know (password, PIN)
- Something you have (security token, phone)
- Something you are (fingerprint, face)
Using multiple factors improves security by requiring more proof before access.

Full Transcript

Authentication factors are ways a system checks who you are. There are three main types: something you know, like a password; something you have, like a security token; and something you are, like your fingerprint. When you try to access a system, it asks for one or more of these. The system checks each factor. If all checks pass, you get access. If any check fails, access is denied. This method makes it harder for someone else to pretend to be you.