Page Comparison

...

👋 Introduction

TREs are the ‘Safe Setting’ solution to conduct research on sensitive or confidential data. As such, there is a high degree of enhanced security required to safeguard access. Whilst some websites only require a username and password to login. For some applications, this may be ok. However, it may be log-in, it is possible for someone with malicious intent to guess your password, or for the website user to share the credentials with a colleague. To prevent either of these, we add an additional factor of authenticationuse Multi-Factor Authentication, i.e. an extra factor. Authentication “factors” generally fall into the following three categories:

• Something the user has - A physical object which the user has access to, and can prove they have access to during login.

• Something the user knows - Something they remember, but should keep a secret, such as your password.

• Something the user is - Such as your finger print or retina.

🔐 HIC TRE log-in process

We rely on the first two authentication factors to ensure safe access to our TRE. During the login, you will be prompted for a username and password. Your password should not be shared with any one else: something you have and something you know. You will login with your username and password, which should remain confidential, and is therefore something only you know. As our

For the second factor, we ensure that you have access to something capable of you will need your phone for generating authentication codes, such as your phone. We use TOTP (Time-based One Time Password) which can be generated using your phone, with an app such as Google or Microsoft Authenticator.When you first Google (Android or Apple iOS) or Microsoft Authenticator (Android or Apple iOS) apps (which you may need to install).

The first time you login to the TRE, you will be asked to configure set up a OTP (One Time Password) . For this, you should install one of the aforementioned apps to your smart phone. We include a few links to these in case you don’t already have one installed.

• Microsoft Authenticator for Android or Apple iOS

• Google Authenticator for Android or Apple iOS

The login screen will show you a QR code, which can be scanned using your phone’s camera, once you open the authenticator app. The by scanning a QR code with your authenticator app. This QR code includes information such as the website name, along with a pre-shared key, which is used to generate future codes.

The next time you login to the TRE, you will be asked to enter a OTP (One Time Password) 6-digit OTP from the authenticator app. These are six numerical digits long.

\uD83D\uDCCB Related articles