BAYESIAN APPROACH TO RISK ASSESSMENT IN KNOWLEDGE BASED AUTHENTICATION

Knowledge is quantified according to [1] as expertise and skills acquired by a person, the theoretical understanding of a specific subject or facts and information with respect to a specific field or domain. According to [2] knowledge is information possessed by an individual which can be used in profit generating activities. Knowledge in the context of KBA is represented by common information known by the individual who will be used to confirm his identity. According to [1] authentication is the act of establishing or confirming something or someone as authentic. Considering access control, authentication is the process through which the identity of an individual is established through the use of a diverse set of credentials.