Control Strategy ClientOneTimeKeyAccess

URI: CSG-ClientOneTimeKeyAccess

Description: Access to a service Service requires a one time key, generated using a one time key device which itself requires a password entered by the user Human, who then types the one time key into their client application Client.

(empty)

CC.AX.CCC-nS.6.1.3

Client Client unable to use 2-factor authentication to access service Service: if service Service requires clients to authenticate using a second factor (e.g. a one time key or out of band key exchange), but this is not available to Client then access will be impossible.

(empty)

OneTimeKey at Role_Human

OneTimeKeyVerifier at Role_Service

Password at Role_Human

PasswordVerifier at Role_Service

Control Strategy ClientOneTimeKeyAccess

Mitigated Threats (0)

Blocked Threats (1)

CC.AX.CCC-nS.6.1.3

Triggers Threats (0)

Control Sets (4)