Project Overview
Multi-Factor Authentication (MFA) for Student 2023
The Information Technology department at John Jay College has consolidated the login credentials – in most cases – to one single account. It helps students by not having to remember multiple accounts credentials. However, students use their login information virtually anywhere; their credentials are vulnerable. The vulnerability exists because many external devices are unprotected and may have spyware installed discretely. Whenever a student's password is compromised, it puts the student at risk of identity theft (Dasgupta & Nag). A comprised student account can also affect the rest of the campus. MFA is a secure process of authentication that requires more than one authentication technique chosen from independent categories of credentials. Like single factor, multi-factor is increasingly used to verify the users' identities in accessing the computer information systems. MFA combines two or more types of authentication to provide a better and more secure way of authenticating users. For example, an MFA solution might require that a student enters his regular credentials followed by entering a one-time passcode sent via SMS to their mobile phone. Secure accounts give students uninterrupted access to the University's resources and the peace of mind to focus on their academic pursuits. To prevent the exploitation of student accounts, last year DoIT requested $60,000 in funding to deploy Multi-Factor Authentication (MFA) for student accounts. As a result, the number of compromised student accounts and the number of students falling victim to scams has all but disappeared. This proposal seeks to continue protecting student accounts by funding MFA for another year. References: Dasgupta, D., Roy, A., & Nag, A. (2017). Multi-factor authentication. In Advances in User Authentication (pp.185-233). Springer, Cham