Double Check: An exploration into Two-Factor Authentication and Duo at UConn

The host, Cole P. Ste­fan, has a coin­ci­den­tal­ly odd knack for mak­ing pod­casts about recent events that have hap­pened or are hap­pen­ing at the Uni­ver­si­ty of Con­necti­cut. That was the case when a UConn stu­dent got run over by a car on North Eagleville Road in Sep­tem­ber, and it was most def­i­nite­ly the case with the con­struc­tion of a new res­i­dence hall on South Cam­pus, which began in November.

On this spe­cif­ic edi­tion of Cold Cut Elab­o­ra­tions, Mr. Ste­fan takes a deep dive into one of the new­er aspects of UCon­n’s secu­ri­ty sys­tem, two-fac­tor authen­ti­ca­tion. On Novem­ber 10, 2022, UConn imple­ment­ed two-fac­tor authen­ti­ca­tion (also known as 2FA) on top of log­ging into the uni­ver­si­ty’s meta­da­ta, which includes every­thing from one’s NetID to access to Microsoft Office 365. This would be done through a sys­tem called Duo, a rel­a­tive­ly new sys­tem that com­pa­nies and uni­ver­si­ties are using to help keep login infor­ma­tion more secure. It has been used every­where since being imple­ment­ed a month ago, whether it is in the class­room or on the Lock­down brows­er, a brows­er that essen­tial­ly pre­vents a stu­dent from cheat­ing on online exams, every time that a stu­dent logs onto it.

The offi­cial logo for Duo, the app that UConn is using for two-fac­tor authen­ti­ca­tion.
Image Cour­tesy of: Duo Secu­ri­ty

The host says every time for the Lock­down brows­er because there is a way to have the brows­er remem­ber an indi­vid­ual stu­dent when they log on to access their meta­da­ta out­side of the Lock­down sys­tem on browsers such as Google Chrome and Microsoft Edge. Despite every­thing that UConn, from their IT Depart­ment to the numer­ous emails stu­dents received lead­ing up to the start date of Novem­ber 10, explain, Mr. Ste­fan believes that there is more to the puzzle.

As a senior colum­nist (and for­mer Staff Writer) for The Dai­ly Cam­pus, UCon­n’s stu­dent news­pa­per, Mr. Ste­fan has had to use 2FA since Sep­tem­ber. Even though he has been using the sys­tem longer than most stu­dents on cam­pus have (by two months, give or take), not even he under­stands all of the nit­ty grit­ty details behind what makes Duo and 2FA work at UConn.

Newman, AJ
AJ New­man, a for­mer stu­dent and cur­rent employ­ee of UCon­n’s IT Sup­port Cen­ter locat­ed on the first floor of the Homer Bab­bidge Library.

To help fur­ther increase his under­stand­ing of 2FA and Duo as well as that of the stu­dents, Mr. Ste­fan (sep­a­rate­ly) inter­viewed AJ New­man and Dr. Michael Mundrane, two peo­ple who work in UCon­n’s ITS Depart­ment in sig­nif­i­cant­ly dif­fer­ent capac­i­ties. AJ, a for­mer UConn stu­dent, works in the Homer Bab­bidge library with Tech Sup­port and sim­ply helps stu­dents with their tech­no­log­i­cal needs while Dr. Mundrane over­sees the entire depart­ment as the uni­ver­si­ty’s Chief Infor­ma­tion Officer.

Mundrane, Michael
Dr. Michael Mundrane, UCon­n’s Chief Infor­ma­tion Offi­cer in UCon­n’s ITS Depart­ment. He is also a Vice Pres­i­dent under the direc­tion of the Provost/Executive Vice Pres­i­dent for Aca­d­e­m­ic Affairs. (Pic­ture via his pro­file page on the Office of the Provost site)

But this pod­cast requires more than what the experts think. The back­bone of any uni­ver­si­ty or col­lege (depend­ing on what kind of school one attends) are the stu­dents, and their opin­ions may (or may not) have an influ­ence on some of the deci­sions the school makes. To that end, Mr. Ste­fan got in touch with Jake Farn­worth, one of his bud­dies from his local high school who cur­rent­ly attends the Uni­ver­si­ty of Michi­gan in Ann Arbor. Michi­gan, like UConn, requires 2FA in order for stu­dents to access their meta­da­ta, but they have been doing it since at least the fall of 2020. That means that the sys­tem has been in place since Jake expe­ri­enced “Zoom Uni­ver­si­ty” dur­ing the 2020–21 school year. But Michi­gan is not the only place where Jake has used two-fac­tor authentication.

School of Ross
The Ross School of Busi­ness at the Uni­ver­si­ty of Michi­gan, the school where Jake Farn­worth is get­ting his Bach­e­lor’s Degree in Eco­nom­ics in 2024

Since stu­dents are the most impor­tant part of the uni­ver­si­ty, no under­stand­ing of a new sys­tem at UConn is com­plete with­out hear­ing what the stu­dents think. To that end, Mr. Ste­fan spent almost two hours on a chilly Thurs­day after­noon (not the same Thurs­day that 2FA became a neces­si­ty on cam­pus) inter­view­ing lit­er­al­ly any­one he saw in cer­tain areas of cam­pus about their thoughts on the sys­tem. The respons­es helped Mr. Ste­fan real­ize that most peo­ple do not like the new sys­tem and think that it is a bit much. There were vary­ing opin­ions, some of which leaned toward lik­ing the sys­tem, but the major­i­ty seemed to not real­ly like it.

Jake from State Farn
Jake Farn­worth, an Eco­nom­ics major at the Uni­ver­si­ty of Michi­gan. (Pic­ture cour­tesy of LinkedIn)

But what else gets dis­cussed in this tech­no­log­i­cal­ly-advanc­ing (and stor­age-con­sum­ing) pod­cast? Are there dis­cus­sions about what 2FA is? How about some com­par­isons to oth­er tech­no­log­i­cal sys­tems cur­rent­ly in place? What is the over­all mood of this inves­tiga­tive research project? Lis­ten more to find out.

Prompts
The prompt that Duo gives a stu­dent who is try­ing to log into HuskyCT (or some oth­er site requir­ing their NetID) to access the uni­ver­si­ty’s metadata.

Want to learn more about Duo? Like any edu­ca­tion­al system/modem, they have their own YouTube chan­nel. If Mr. Ste­fan’s long­form sum­ma­ry of what Duo and 2FA are still mak­ing you (the read­er) con­fused, here is a sim­pli­fied ver­sion.

Images, unless not­ed oth­er­wise, are cour­tesy of the Cole Stefan.

 

Every piece of roy­al­ty-free music in this pod­cast (in order of when it was used):

  • Instru­men­tal — Cre­ation by Dan War­ren [Pub­lished 6/21/2012]
  • Tetris (Beware Boy, Videogames are Evil) by Steal­ing Orches­tra [Pub­lished 10/13/2012]
  • Glac­i­er by SalmonLikeThe­Fish [Pub­lished 1/19/2018]
  • Tele­scope by The Owl [Pub­lished 1/10/2017]
  • Kool Kwe­si by Monk Turn­er [Pub­lished 6/20/2013]
  • Woods by Hawkin [Pub­lished 8/19/2015]
  • Venet­ian Boat Song (Felix Mendelssohn) by Dr. Phibes and The Ten Plagues of Egypt [Pub­lished 11/03/2010]

Every oth­er piece of music (in order of when it was used; sources cit­ed):

Sources of Sounds out­side of mul­ti­ple experts, UConn Stu­dents talk­ing, and myself (in order of when it was used; sources cit­ed):

Promos
A pro­mo­tion for the pod­cast meant for Insta­gram stories.

Have Questions or Concerns

Go back

Your message has been sent

Warn­ing
Warn­ing
Warn­ing
Warn­ing

Warn­ing.