https://wiki.idesg.org/index.php?action=history&feed=atom&title=TokenToken - Revision history2026-05-01T12:08:53ZRevision history for this page on the wikiMediaWiki 1.38.4https://wiki.idesg.org/index.php?title=Token&diff=8084&oldid=prevOmaerz: 12 revisions imported: Initial Upload of old pages from IDESG Wiki2018-06-28T04:04:49Z<p>12 revisions imported: Initial Upload of old pages from IDESG Wiki</p>
<p><b>New page</b></p><div><br />
==Definition==<br />
Something that the claimant possesses and controls that is used to authenticate the claimant’s digital identity.<br />
<br />
===Note===<br />
The Taxonomy AHG observed that the word token has many meanings depending on the context. The OAuth protocol has a logical object called a token that signifies that authentication has occurred, and many people think of a physical device as a token. In the context of electronic authentication the group converged on the concept from SP 800-63 of the token as the secret controlled by the Claimant that enables them to authenticate. <br />
<br />
The primary threat to which tokens are subject is loss or theft. <br />
<br />
Example: Passwords and cryptographic keys are all tokens. Note that the token is secret, information, that must remain under subscriber control.<br />
<br />
This version of the definition was added to the glossary on 12/10 based upon the definition included in the Weekly Discussion Guide for 12/5.<br />
<br />
== Sources ==<br />
NIST SP 800-63<br />
<br />
== Status ==<br />
<span style="background:green">NC Approved</span><br />
<br />
<br />
{{Comment}}<br />
<br />
<br />
----<br />
----<br />
Quick Links: [[Taxonomy]] | [[Taxonomy Project Management]] | [[Taxonomy AHG Catalog]] | [[Taxonomy AHG Glossary]] | <br />
<br />
----<br />
----<br />
<br />
<br />
[[Category:Concept]]</div>Omaerz