3. Supposing we are designing an authentication system. Please discuss what aspects we need to consider in this design. These aspects may include but are not limited to the risk assessment / assurance level / impact level, authentication method (such as password, biometric, and even the multi-factor authentication), protocol, potential attacks and defenses, etc. (30 points)