Google wants Gmail authentication with ring ...

Computer security, in particular the confidentiality and integrity of data, has been a priority of the companies that provide online services. There are many recent years which give news known attacks by hackers carried out, in order to obtain services and invade personal data.
Moreover, users have a tendency to define passwords, little complex and very often obvious. Aware of this issue, Google has indicated that it has an ongoing project which aims pioloto implement a new security mechanism for gmail.



The authentication mechanism proposed by Google may be weird but considering that the use of biometrics is effective and inviolable (this time), then the proposal can be interesting. According to the Wired site, the investigation of this mechanism will be published in the magazine I EEE Privacy & Security which will be available later this month.
According to researchers from Google, the year 2012 has been the year that did reflect on the use of your password, since this is a cheap and weak mechanism to authenticate users on the Internet today.
The idea of Google is to make use of a small card Yubico that supports encryption and enabling the authentication of users. They should also be made ​​of changes in browsers, for integration with this mechanism. At first it may be just a mini card after inserted into the USB port can do user authentication.



However, Google said that it is also planned to integrate this mechanism with smartphones or even a ring embedded in a smartcard. In these cases, if someone steals your smartphone or ring is easier to inform Google's own successful for it to take the appropriate action.

We'd like your smartphone or smartcard-embedded ring finger to authorize the new computer via a tap on the computer, even in situações Which in your phone might be without cellular connectivity

For this idea to succeed, Google is aware that this mechanism will be adopted by other services / businesses. For this, we have developed a protocol (details were not disclosed) that will allow the use of such a mechanism, and is fully independent of Google.
Note that Google has implemented about two years a security mechanism with two-step verification , which become more complex. However, this security mechanism can easily be "overtaken" by a phishing attack - a scam that uses spam or pop-up messages to deceive people in order to reveal credit card numbers, bank account information, numbers social security, passwords and other confidential or sensitive information.
This new authentication mechanism is interesting and based on the giant Google has everything to succeed. However it raises some issues such as the need to acquire a physical device for authentication. Let's see what the future holds and what paths to follow in the area of ​​user authentication.

Consider this authentication mechanism, proposed by Google, will be effective?