A lost laptop on the train
A staff laptop is left on a train. A stranger finds it. Can they open it?
If the laptop has a strong sign-in, a locked disk and a standard account, the answer is no. As a support technician you set that up before the laptop leaves your desk.
Key words
| Word | What it means | Example |
|---|---|---|
| End-user device | A device a person uses every day, such as a laptop, tablet or phone. | |
| Account | A named sign-in with its own rights. | |
| Standard user | An account that can use programs but not change the system. | |
| Administrator | An account that can change anything on the device. | |
| Screen lock | A sign-in screen that appears after a short time without use. | |
| Multi-factor authentication | Signing in with two or more proofs, such as a password and a phone code. | MFA |
| Disk encryption | Scrambling the data on a disk so it cannot be read without the key. | |
| Authentication | Proving who you are. | |
| Malware | Software made to cause harm. | |
| Attribute | A fact about a person, a device or a time, such as department. | |
| DAC | Discretionary access control: the owner decides who may use it. | |
| RBAC | Role-based access control: access follows the job role. | |
| MAC | Mandatory access control: central labels that nobody can change. | |
| ABAC | Attribute-based access control: rules about the person, device and time. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can apply authentication and the access control models to a laptop, tablet or phone.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Cycle 1: authentication on a device
Every end-user device needs a sign-in. A password or PIN is the base. A fingerprint or face check is faster. MFA adds a second proof, such as a code on a phone.
A screen lock brings the sign-in back after a short time. If a person walks away, the device locks itself.
Disk encryption protects the files even if the disk is taken out.
The four models on a device
| Model | How it looks on a laptop or phone |
|---|---|
| DAC | The owner shares one folder with named colleagues. |
| RBAC | A help desk account is in the "Help desk" group. The group has the rights. |
| MAC | A managed phone has a company rule the user cannot turn off, such as a screen lock. |
| ABAC | Email opens only on a device that is up to date and has a screen lock. |
The cells students fill in are left blank in this preview.
Check: on the device
Have a go
Check: on the device
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.