As public and private sector organisations open up their networks to facilitate information exchanges across a wider range of stakeholders, they are exposed to an increasing number of sophisticated e-crimes, such as financial fraud and identity theft. As a result, a static username and password is no longer an adequate identifier to verify a user and, at the same time, fails to reassure users that