password protected

Posted on 2009-07-03
Medium Priority
Last Modified: 2012-05-07

Our company would like to set up a system which should provide video's for our customers online. But these video's are for a select group of customers. They should be able to login en watch them but not with a fix login. In other words they should not able to pass their login to others and avoid the chance that others also watch the video's.

Do you guys think this is possible?

any suggestions?

Question by:GipsyKing

Accepted Solution

TurboBorland earned 150 total points
ID: 24771442
Nothing I could think of would be possible.  If the person who views the videos wants to distribute them, there's nothing you can really do to stop them while allowing them to view them.  Say they view the video and save it to their computer, then they can pass it on through a USB or cd.  It's kind of a loaded question.  If you're looking for a more secure form of password protection, where if someone else got a hold of the password, yet wasn't able to get in, then we can look at htaccess (on Apache web servers) and deny from any ip that is not allowed to view the videos.  We can take it another step further we and use the RSA's securid where a person needs the "Authentication manager" device.  What this system does is supply a two-factor authentication system (meaning you need two forms of identification) and changes the password every 60 seconds with seemingly randomly generated numbers.  The authentication manager device will update as well and what it says on the devices is what the password is at the current time.  http://www.rsa.com/node.aspx?id=1156  This is a solution employed by Kohler company.

Expert Comment

ID: 24778434
Sure. You simply need to implement a two-factor auth. Easiest would be to give your group a PIN calculator type of token (like RSA SecurID - http://en.wikipedia.org/wiki/SecurID) and make your privileged web users use these with a fallback to simple passwds for unprivileged users.

Author Closing Comment

ID: 31599494
thank you for your feedback

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

An Incident response plan is an organized approach to addressing and managing an incident. The goal is to handle the situation in a way that limits damage and reduces recovery time and costs.
A discussion about Penetration Testing and the Tools used to help achieve this important task.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question