Sistema de autenticación para Instituciones Educativas basado en un modelo no multifactor

Abstract

This project proposes the design of a digital authentication system for educational institutions, based on a non-multifactor model. The solution replicates essential Active Directory (AD) services to host a proprietary application with a validation framework that includes device verification, geolocation, and risk analysis, in compliance with security standards such as ISO/IEC 27001. The proposed solution incorporates a robust authentication system that, while not considered multifactor, integrates multiple validators that increase security without requiring additional steps for the user. These validators include: • Device verification: Validation of the device’s IMEI or MAC address. • Geolocation: Use of geofencing techniques to validate the user’s location. • Risk analysis: To assess anomalous behavior or suspicious access. • Compliance with ISO/IEC 27001: Referring to information security management. • Secure protocols: Use of HTTPS for encryption. • Secure transmission media: such as Ethernet, WPA3 Wi-Fi, and VPN.