Challenge-Response Verification Process
Occasionally, a Duke user forgets their NetID password and calls the OIT Help Desk to have their password changed for them. In order to accurately
identify users without using Social Security Numbers, Duke has created and implemented a Challenge-Response Verification (CRV) application.
The CRV system uses questions and answers to identify users to the Help Desk, and allows users to choose or write the questions. A minimum of 3
questions must be chosen or written, as a minimum of 3 correct answers are required to identify you. You can access the application and set up
your challenges here:
www.duke.edu/online/crv.
Starting in October 2005, the preferred methods of identifying callers who request password changes will be either challenge questions and
answers set up in the CRV application, or photo identification presented to the OIT Help Desk in person.
However, other methods could include giving your name, date of birth and
last four digits of your SSN to the HelpDesk or faxing in photo
identification.