Q$3.$ Access Control & Biometrics $(50$ pts$)$

Q$3\mathrm{.}1$ What are the four ways to authenticate users, e$.$g$.,$ authenticate users for device$/$system login$?$ Please also prov an example for each category $(20$ pts$)$

Answer:

$[$Case study$]$: Suppose you're the CTO $($Chief Technology Officer$)$ of mSecure, a cross$-$platform password manager app for storing website usernames$/$passwords$,$ PIN numbers, credit card numbers, and bank account numbers, etc. Now, you'd like to add Passkey $($Fido$2)$ user authentication$/$login for your $m$

Secure.com server.

Q$3\mathrm{.}2$ Passkeys are essentially public$/$private key pairs. User Public Key and User Private Key will be generated when requested by mSecure customers. Where should the keys be stored, respectively? $(10$ pts$)$

Answer: $$

Q$3\mathrm{.}3$ How can mSecure User Private Key be "adequately" protected in mSecure apps using Fido biometrics? $(10$ pts$)$

Answer:

Q$3\mathrm{.}4$ Please illustrate how Passkey $($Fitdo$2)$ can be used to authenticate user login attempts for mSecure server $(10$ pts$)$

Answer: