Specifications

70
The security function password structure is built around ‘regular expression’ syntax. Any valid
expression will be accepted to parse passwords an example is given below:
Expression
Meaning
X(n)
X exactly n number of times
X(n,m)
X between n and m
.[^\s]{n,m}
Any character except white spaces with a length between n-m
\w[n,m]
Word character [a-z,A-Z,_,0-9] between n-m
Personal Questions Authentication
This is another commonly used authentication module. Its simplicity and ease of use make this a
favorite choice amongst multi-factored schemes. In fact much like Password authentication, Personal
questions is also part of the default set of authentication schemes.
Since this is a secondary-only module it is the second stage module in the Password and Personal
Details scheme.
Personal authentication relies on pre-defined personal information about the user. A set number of
questions are managed by the system and when utilized the system takes a question and presents this to
the user. A comparison is made between the current answer and the preset answer; if a match is made
the user is authenticated.
This authentication method is a secondary option only and must work in conjunction with a more
secure module.
These cannot be amended nor can a user add additional question to these.
Configuring Answers
Both the administrator and the user are able to configure answers for these questions through the
Management Console and User Console respectively, but it mainly falls within the responsibility of the
user to provide secure and personal answers to each question, something that they will remember and
secure enough so that no other user can guess. The steps involved in configuring these are minimal
but have been detailed below nonetheless.
Management Console
The administrator can access the user’s personal details and alter these details if so required.
Step 1 From the ‘Accounts’ page (Management Console > Access Control > Accounts) select the Edit
action against the account to edit.
Step 2 From the Edit Account page select the Security Questions tab.
Step 3 This displays the available personal questions and where necessary populated with answers. These can
be altered. When satisfied with the changes pressing the Save button will store the new answers.
User Console
It should be the user’s responsibility to manage and update their personal details.