Identity Proofing - Revision history

Tomjones: /* Problem */

2019-11-18T17:11:22Z

Problem

← Older revision		Revision as of 17:11, 18 November 2019
Line 11:		Line 11:
	* IAL levels refers to the identity proofing process.		* IAL levels refers to the identity proofing process.
	# There is no requirement to link the applicant to a specific real-life identity. Any attributes provided in conjunction with the authentication process are self-asserted or should be treated as such		# There is no requirement to link the applicant to a specific real-life identity. Any attributes provided in conjunction with the authentication process are self-asserted or should be treated as such
	# Evidence supports the real-world existence of the claimed identity and verifies that the applicant is appropriately associated with this real-world identity. IAL2 introduces the need for either remote or physically-present identity proofing. Attributes can be asserted by CSPs to RPs in support of pseudonymous identity with verified attributes.		# Evidence supports the real-world existence of the claimed identity and verifies that the applicant is appropriately associated with this real-world identity. IAL2 introduces the need for either remote or physically-present identity proofing. Attributes can be asserted by [[Credential Service Provider]]s (CSPs) to RPs in support of pseudonymous identity with verified attributes.
	#Physical presence is required for identity proofing. Identifying attributes must be verified by an authorized and trained representative of the CSP. As with IAL2, attributes can be asserted by CSPs to RPs in support of pseudonymous identity with verified attributes.		#Physical presence is required for identity proofing. Identifying attributes must be verified by an authorized and trained representative of the CSP. As with IAL2, attributes can be asserted by CSPs to RPs in support of pseudonymous identity with verified attributes.

Tomjones: /* Problem */

2019-11-18T04:34:36Z

Problem

← Older revision		Revision as of 04:34, 18 November 2019
Line 9:		Line 9:
	*On the internet no one knows your are a dog without [[Identity Proofing]].		*On the internet no one knows your are a dog without [[Identity Proofing]].
	* NIST 800-63-3 (see below) has this description.<blockquote>Identity proofing establishes that a subject is who they claim to be. Digital authentication establishes that a subject attempting to access a digital service is in control of one or more valid authenticators associated with that subject’s digital identity. For services in which return visits are applicable, successfully authenticating provides reasonable risk-based assurances that the subject accessing the service today is the same as that which accessed the service previously. Digital identity presents a technical challenge because this process often involves proofing individuals over an open network, and always involves the authentication of individual subjects over an open network to access digital government services. The processes and technologies to establish and use digital identities offer multiple opportunities for impersonation and other attacks.<\blockquote>		* NIST 800-63-3 (see below) has this description.<blockquote>Identity proofing establishes that a subject is who they claim to be. Digital authentication establishes that a subject attempting to access a digital service is in control of one or more valid authenticators associated with that subject’s digital identity. For services in which return visits are applicable, successfully authenticating provides reasonable risk-based assurances that the subject accessing the service today is the same as that which accessed the service previously. Digital identity presents a technical challenge because this process often involves proofing individuals over an open network, and always involves the authentication of individual subjects over an open network to access digital government services. The processes and technologies to establish and use digital identities offer multiple opportunities for impersonation and other attacks.<\blockquote>
			* IAL levels refers to the identity proofing process.
			# There is no requirement to link the applicant to a specific real-life identity. Any attributes provided in conjunction with the authentication process are self-asserted or should be treated as such
			# Evidence supports the real-world existence of the claimed identity and verifies that the applicant is appropriately associated with this real-world identity. IAL2 introduces the need for either remote or physically-present identity proofing. Attributes can be asserted by CSPs to RPs in support of pseudonymous identity with verified attributes.
			#Physical presence is required for identity proofing. Identifying attributes must be verified by an authorized and trained representative of the CSP. As with IAL2, attributes can be asserted by CSPs to RPs in support of pseudonymous identity with verified attributes.

	==Solutions==		==Solutions==

Tomjones: /* Problem */

2019-11-18T04:32:38Z

Problem

← Older revision		Revision as of 04:32, 18 November 2019
Line 7:		Line 7:

	==Problem==		==Problem==
	On the internet no one knows your are a dog without [[Identity Proofing]].		*On the internet no one knows your are a dog without [[Identity Proofing]].
			* NIST 800-63-3 (see below) has this description.<blockquote>Identity proofing establishes that a subject is who they claim to be. Digital authentication establishes that a subject attempting to access a digital service is in control of one or more valid authenticators associated with that subject’s digital identity. For services in which return visits are applicable, successfully authenticating provides reasonable risk-based assurances that the subject accessing the service today is the same as that which accessed the service previously. Digital identity presents a technical challenge because this process often involves proofing individuals over an open network, and always involves the authentication of individual subjects over an open network to access digital government services. The processes and technologies to establish and use digital identities offer multiple opportunities for impersonation and other attacks.<\blockquote>

	==Solutions==		==Solutions==

Tomjones: /* References */

2019-11-18T04:30:14Z

References

← Older revision		Revision as of 04:30, 18 November 2019
Line 12:		Line 12:

	==References==		==References==
	* [https://pages.nist.gov/800-63-3/sp800-63-3.html New version of SP 800-63-3] with [[Assurance]] separated out from the ~~other [[Authentication]]~~ or Federation [[Attribute]]s.		* [https://pages.nist.gov/800-63-3/sp800-63-3.html New version of SP 800-63-3] with Assurance separated out from the Identifier or Federation [[Attribute]]s.
	[[Category:Glossary]]		[[Category:Glossary]]

Tomjones: /* References */

2019-11-18T04:29:37Z

References

← Older revision		Revision as of 04:29, 18 November 2019
Line 12:		Line 12:

	==References==		==References==
			* [https://pages.nist.gov/800-63-3/sp800-63-3.html New version of SP 800-63-3] with [[Assurance]] separated out from the other [[Authentication]] or Federation [[Attribute]]s.
	[[Category:Glossary]]		[[Category:Glossary]]

Tomjones: /* References */

2019-11-18T04:25:08Z

References

← Older revision		Revision as of 04:25, 18 November 2019
Line 13:		Line 13:
	==References==		==References==

	[[~~Catecory~~:Glossary]]		[[Category:Glossary]]

Tomjones: /* Context */

2019-11-18T04:24:54Z

Context

← Older revision		Revision as of 04:24, 18 November 2019
Line 4:		Line 4:
	==Context==		==Context==
	*Also see [[Identity Proofing Use Case]]		*Also see [[Identity Proofing Use Case]]
	*[[~~Assurance~~]] is the term typically used for proofing organizations or software implementations.		*[[Attestation]] is the term typically used for proofing organizations or software implementations.

	==Problem==		==Problem==
	On the internet no one knows your are a dog without [[Identity Proofing]].		On the internet no one knows your are a dog without [[Identity Proofing]].

Tomjones at 04:22, 18 November 2019

2019-11-18T04:22:39Z

← Older revision		Revision as of 04:22, 18 November 2019
Line 1:		Line 1:
	~~#REDIRECT~~ [[Identity Proofing Use Case]]		==Full Title or Meme==
			The process of evaluating evidence of the [[Identifier]]s and [[Attribute]]s that are associated with a human being.

			==Context==
			*Also see [[Identity Proofing Use Case]]
			*[[Assurance]] is the term typically used for proofing organizations or software implementations.
			==Problem==
			On the internet no one knows your are a dog without [[Identity Proofing]].

			==Solutions==

			==References==

			[[Catecory:Glossary]]

Omaerz: 1 revision imported: Initial Upload of old pages from IDESG Wiki

2018-06-28T04:01:40Z

1 revision imported: Initial Upload of old pages from IDESG Wiki

New page

#REDIRECT [[Identity Proofing Use Case]]